pwn 0.5.711 → 0.5.712

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ab0eff0005f523bb5972be43cf49ab4c15ab9eaecda0968c9206621e2997e47
-  data.tar.gz: 2a166f6ff6b5620e820de709d5dc1ae356550e23afffbc52de138d3ab6499d7f
+  metadata.gz: 24bf2b4c619ee3d57fe991bff09ab97838506283144fbcde635d39c7e368a3b1
+  data.tar.gz: 1ed8d4f63cfc8331fd494172e65724037131a378cd42716df2d36e22dfdce6d5
 SHA512:
-  metadata.gz: c74d677beb74e9cd348faebbc1b02dff1b48956b0225487ef48af1be080f94137472f892dce6698a2d55c0febbbb1637a477e4ec090098ffe64cc5e26030b33b
-  data.tar.gz: 6bf02d8127f74b609d3cc8ae1c03586b96f29e44c921e00893dc550f516817c6b4d3456ad516262c1d919e93a36cceffedc7891039460801de2c937dfbbaf2d1
+  metadata.gz: d8ce0b58ac26c52adacedd0ae58df169357d87d53f1e5040d9c6eba4083bf83545065c8e504a6f2e7baebb84409b807af99fa6ef2cfd148682e898962794b67e
+  data.tar.gz: 712a254b7346e7eb3668634c1b47bf336dce6393e960ad1ed24e0d0abc812752ed1cd442f277c44bd6b1c3360472b8d44075418758909fd7bbf435ea2d8ebe2f

data/documentation/Installation.md

@@ -108,8 +108,9 @@ pwn setup --list-profiles
    `24.04`) via `PWN::Setup.packages_for`. Family fallbacks still live in
    `PWN::Setup::NATIVE_GEMS` / `::TOOLCHAIN`. Tools with no OS package on this
    distro (Frida, one_gadget, ROPgadget, checksec, ropper, kube-hunter, or
-   Kali-only names on Ubuntu) install via `pip` / `gem` or are skipped so
-   `apt-get` does not abort the whole profile.
+   Kali-only names on Ubuntu) install via `pipx` (Debian/Kali/Ubuntu) or `pip`
+   / `gem`, or are skipped so one missing apt name cannot abort the whole
+   profile. Each OS package is installed in its own `apt-get`/`dnf`/… command.
 3. Show the exact commands, prompt (unless `--yes`), run them, then
    `gem pristine` / `gem install` any native extension that still fails to
    load, and re-run the doctor.

data/etc/default_skills/pwn/setup/SKILL.md

@@ -44,6 +44,10 @@ PWN::Setup.packages_for(opts)
 - `authors`
 - `help`
 
+## References
+
+- `references/urls.md` — URLs from source
+
 ## Source
 
 `pwn/setup.rb`

data/etc/default_skills/pwn/setup/references/urls.md

@@ -0,0 +1,3 @@
+# PWN::Setup source links
+
+- https://install.pwndbg.re

data/lib/pwn/setup.rb

@@ -262,6 +262,7 @@ module PWN
       },
       'pwndbg' => {
         apt: %w[pwndbg], dnf: %w[], pacman: %w[pwndbg], brew: %w[], port: %w[],
+        script: "curl --proto '=https' --tlsv1.2 -LsSf 'https://install.pwndbg.re' | sh -s -- -t pwndbg-gdb",
         plugins: %w[PWN::Plugins::GDB]
       },
       'ropper' => {
@@ -373,6 +374,18 @@ module PWN
 
         t[bin] = t[bin].merge(ubuntu: [], debian: [])
       end
+      {
+        'checksec' => %w[checksec],
+        'ROPgadget' => %w[python3-ropgadget],
+        'ropper' => %w[ropper],
+        'pwndbg' => [],
+        'semgrep' => [],
+        'vol' => []
+      }.each do |bin, pkgs|
+        next unless t[bin]
+
+        t[bin] = t[bin].merge(kali: pkgs)
+      end
     end.freeze
 
     # Capability profiles — how you get the ergonomics of `pwn-full`
@@ -653,6 +666,8 @@ module PWN
       gems.each { |g| os_pkgs.concat(Array(NATIVE_GEMS.dig(g, pm[:key]))) }
       bins.each { |b| os_pkgs.concat(packages_for(bin: b, distro: distro, version: version, pm_key: pm[:key])) }
       os_pkgs = os_pkgs.reject(&:empty?).uniq
+      alts = alt_install_cmds(bins: bins, pm_key: pm[:key], distro: distro, version: version)
+      os_pkgs = (['pipx'] + os_pkgs).uniq if pm[:key] == :apt && alts.any? { |c| c.include?('pipx install') }
 
       io.puts "Profile   : #{profile} — #{prof[:desc]}"
       io.puts "Distro    : #{distro} #{version}"
@@ -661,14 +676,13 @@ module PWN
       io.puts "Ruby exts : #{gems.empty? ? '(none)' : gems.join(' ')}"
       io.puts
 
-      cmds = []
-      cmds << "#{pm[:install]} #{os_pkgs.map { |p| Shellwords.escape(p) }.join(' ')}" unless os_pkgs.empty?
+      cmds = os_pkgs.map { |pkg| "#{pm[:install]} #{Shellwords.escape(pkg)}" }
       unless gems.empty?
         broken = gems.reject { |g| gem_loadable?(name: g) }
         cmds << "gem pristine #{broken.map { |g| Shellwords.escape(g) }.join(' ')}" unless broken.empty?
         cmds << "gem install #{broken.map { |g| Shellwords.escape(g) }.join(' ')}"  unless broken.empty?
       end
-      cmds.concat(alt_install_cmds(bins: bins, pm_key: pm[:key], distro: distro, version: version))
+      cmds.concat(alts)
 
       if cmds.empty?
         io.puts "Nothing to do — profile '#{profile}' is already satisfied."
@@ -922,13 +936,25 @@ module PWN
         next if packages_for(bin: b, pm_key: pm_key, distro: distro, version: version).any?
 
         if meta[:pip].to_s != ''
-          "python3 -m pip install --user #{Shellwords.escape(meta[:pip])}"
+          pip_install_cmd(pkg: meta[:pip], distro: distro)
         elsif meta[:gem].to_s != ''
           "gem install #{Shellwords.escape(meta[:gem])}"
+        elsif meta[:script].to_s != ''
+          meta[:script].to_s
         end
       end
     end
 
+    private_class_method def self.pip_install_cmd(opts = {})
+      pkg = opts[:pkg].to_s
+      distro = opts[:distro].to_s.to_sym
+      if %i[kali debian ubuntu mint pop chromeos].include?(distro)
+        "pipx install #{Shellwords.escape(pkg)}"
+      else
+        "python3 -m pip install --user #{Shellwords.escape(pkg)}"
+      end
+    end
+
     private_class_method def self.bin?(opts = {})
       !which(name: opts[:name]).empty?
     end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.711'
+  VERSION = '0.5.712'
 end

data/spec/lib/pwn/setup_spec.rb

@@ -117,21 +117,24 @@ describe PWN::Setup do
   it 'every TOOLCHAIN row has an OS package or pip/gem installer' do
     PWN::Setup::TOOLCHAIN.each do |bin, meta|
       has_pkg = %i[apt dnf pacman brew port].any? { |k| Array(meta[k]).any? }
-      has_alt = meta[:pip].to_s != '' || meta[:gem].to_s != ''
+      has_alt = meta[:pip].to_s != '' || meta[:gem].to_s != '' || meta[:script].to_s != ''
       expect(has_pkg || has_alt).to be(true), "#{bin} has no apt/dnf/pacman/brew/port/pip/gem installer"
     end
   end
 
-  it 'deps --profile full dry-run emits pip/gem for unpackaged toolchain bins' do
+  it 'deps --profile full dry-run emits pipx/gem for bins with no distro package' do
     io = StringIO.new
     r = PWN::Setup.deps(profile: :full, dry_run: true, io: io)
     cmds = Array(r[:ran]).map { |h| h[:cmd] }.join("\n")
     expect(r[:skipped]).not_to be true
-    unpackaged = PWN::Setup::TOOLCHAIN.select do |_bin, meta|
-      %i[apt dnf pacman brew port].none? { |k| Array(meta[k]).any? }
-    end
-    unpackaged.each do |bin, meta|
-      token = meta[:pip] || meta[:gem] || bin
+    distro = PWN::Plugins::DetectOS.distro
+    version = PWN::Plugins::DetectOS.version
+    PWN::Setup::TOOLCHAIN.each do |bin, meta|
+      next if PWN::Setup.packages_for(bin: bin, distro: distro, version: version).any?
+
+      token = meta[:pip] || meta[:gem]
+      next unless token
+
       expect(cmds).to include(token.to_s), "full dry-run missing installer for #{bin} (#{token})"
     end
   end
@@ -155,4 +158,37 @@ describe PWN::Setup do
     expect(cmds).not_to include('burpsuite')
     expect(cmds).not_to include('zaproxy')
   end
+
+  it 'maps Kali 2026.3 apt names for checksec ROPgadget ropper' do
+    k = { distro: :kali, version: '2026.3', pm_key: :apt }
+    expect(PWN::Setup.packages_for(k.merge(bin: 'checksec'))).to eq(%w[checksec])
+    expect(PWN::Setup.packages_for(k.merge(bin: 'ROPgadget'))).to eq(%w[python3-ropgadget])
+    expect(PWN::Setup.packages_for(k.merge(bin: 'ropper'))).to eq(%w[ropper])
+  end
+
+  it 'does not apt-get Kali-missing names and does not pip --user on Kali' do
+    k = { distro: :kali, version: '2026.3', pm_key: :apt }
+    %w[pwndbg semgrep vol].each do |b|
+      expect(PWN::Setup.packages_for(k.merge(bin: b))).to eq([])
+    end
+    r = PWN::Setup.deps(profile: :full, dry_run: true, io: StringIO.new, distro: :kali, version: '2026.3')
+    cmds = Array(r[:ran]).map { |h| h[:cmd] }
+    apt = cmds.select { |c| c.include?('apt-get') }.join("\n")
+    expect(apt).to include('checksec')
+    expect(apt).to include('python3-ropgadget')
+    expect(apt).to include('ropper')
+    expect(apt).not_to match(/\bpwndbg\b/)
+    expect(apt).not_to match(/\bsemgrep\b/)
+    expect(apt).not_to include('volatility3')
+    expect(cmds.join("\n")).not_to include('pip install --user')
+    expect(cmds.join("\n")).to include('install.pwndbg.re')
+    expect(cmds.join("\n")).to include('pwndbg-gdb')
+  end
+
+  it 'issues one apt-get per package so a missing name cannot abort the rest' do
+    r = PWN::Setup.deps(profile: :net, dry_run: true, io: StringIO.new, distro: :kali, version: '2026.3')
+    apt = Array(r[:ran]).map { |h| h[:cmd] }.select { |c| c.include?('apt-get install') }
+    expect(apt.length).to be > 1
+    apt.each { |c| expect(c).to match(/apt-get install -y \S+\z/) }
+  end
 end

data/third_party/pwn_rdoc.jsonl

@@ -3195,6 +3195,7 @@
 {"messages":[{"role":"user","content":"PWN::Setup.list_profiles Usage"},{"role":"assistant","content":"`PWN::Setup.list_profiles`: Supported Method Parameters\n\nPWN::Setup.list_profiles(\n\nio: 'optional - IO to write to (default $stdout)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Setup.migrate Usage"},{"role":"assistant","content":"`PWN::Setup.migrate`: Supported Method Parameters\n\nPWN::Setup.migrate(\n\nfix:     'optional - also autofix incompatible ~/.pwn files (default false)',\ndry_run: 'optional - print what WOULD happen (default false)',\nyes:     'optional - alias for fix:true (CI-friendly)',\nio:      'optional - IO to write to (default $stdout)'\n\n)\n\nDelegate to PWN::Migrate.run — verify every ~/.pwn state file is compatible with THIS pwn release and (optionally) autofix it.  A timestamped backup of ~/.pwn is taken first.  See ‘PWN::Migrate.help`.\n"}]}
 {"messages":[{"role":"user","content":"PWN::Setup.packages_for Usage"},{"role":"assistant","content":"`PWN::Setup.packages_for`: Supported Method Parameters\n\nPWN::Setup.packages_for(\n\nbin: 'required - TOOLCHAIN key (e.g. nmap or burpsuite)',\ndistro: 'optional - DetectOS.distro symbol (defaults to live detect)',\nversion: 'optional - DetectOS.version string (defaults to live detect)',\npm_key: 'optional - package-manager family (:apt :dnf :pacman :brew :port :pkg …)'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Setup.pip_install_cmd Usage"},{"role":"assistant","content":"`PWN::Setup.pip_install_cmd`: "}]}
 {"messages":[{"role":"user","content":"PWN::Setup.pkg_manager Usage"},{"role":"assistant","content":"`PWN::Setup.pkg_manager`: Supported Method Parameters\n\nPWN::Setup.pkg_manager\n"}]}
 {"messages":[{"role":"user","content":"PWN::Setup.terminal Usage"},{"role":"assistant","content":"`PWN::Setup.terminal`: Supported Method Parameters\n\nPWN::Setup.terminal(\n\nyes:     'optional - assume yes; non-interactive (default false)',\ndry_run: 'optional - print what WOULD happen (default false)',\nio:      'optional - IO to write to (default $stdout)'\n\n)\n\nOpt-in installer for SHIFT+ENTER multi-line support in the pwn-ai / pwn-asm REPL. Never runs implicitly — the user invokes it with ‘pwn setup –terminal` after PWNMultiLineInput#ensure_vte_shift_enter tells them their emulator can’t distinguish Shift+Enter from Enter.\n\nWhat it does:\n\n1. Prints the two `~/.tmux.conf` lines that persist the runtime\n   `tmux set -s` calls PWNMultiLineInput already makes.\n2. If running under Terminator (a VTE host), copies\n   third_party/terminator/pwn_shift_enter.py to\n   ~/.config/terminator/plugins/ and enables the PWNShiftEnter\n   plugin in ~/.config/terminator/config — WITH confirmation and\n   a .pwnbak backup. This is the only VTE emulator we can fix at\n   the GTK layer without patching libvte itself.\n\nEverything here is host-config mutation, which is why it lives in ‘pwn setup` and NOT in the REPL’s runtime path. See GNOME/vte issues #2601 / #2607 for why VTE can’t be fixed with escape sequences alone.\n"}]}
 {"messages":[{"role":"user","content":"PWN::Setup.which Usage"},{"role":"assistant","content":"`PWN::Setup.which`: "}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.711
+  version: 0.5.712
 platform: ruby
 authors:
 - 0day Inc.
@@ -5478,6 +5478,7 @@ files:
 - etc/default_skills/pwn/sdr/son_micro_rfid/SKILL.md
 - etc/default_skills/pwn/sessions/SKILL.md
 - etc/default_skills/pwn/setup/SKILL.md
+- etc/default_skills/pwn/setup/references/urls.md
 - etc/default_skills/pwn/version/SKILL.md
 - etc/default_skills/pwn/www/SKILL.md
 - etc/default_skills/pwn/www/app_cobalt_io/SKILL.md