pwn 0.5.712 → 0.5.714

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.712
+  version: 0.5.714
 platform: ruby
 authors:
 - 0day Inc.
@@ -4935,23 +4935,34 @@ files:
 - etc/default_skills/pwn/ai/agent/swarm/SKILL.md
 - etc/default_skills/pwn/ai/agent/task_summarizer/SKILL.md
 - etc/default_skills/pwn/ai/agent/tool_guard/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/artifacts/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/binary_triage/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/cron/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/curriculum/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/decompile/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/exploitdev/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/extrospection/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/extrospection/references/urls.md
+- etc/default_skills/pwn/ai/agent/tools/finding_record/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/fuzz_campaign/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/intel_lookup/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/job_run/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/learning/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/memory/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/metrics/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/mistakes/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/policy/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/pty_session/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/reward/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/ruby_eval/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/ruby_eval/references/urls.md
+- etc/default_skills/pwn/ai/agent/tools/session_export/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/sessions/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/shell/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/skills/SKILL.md
 - etc/default_skills/pwn/ai/agent/tools/skills/references/urls.md
 - etc/default_skills/pwn/ai/agent/tools/swarm/SKILL.md
+- etc/default_skills/pwn/ai/agent/tools/swarm_map/SKILL.md
 - etc/default_skills/pwn/ai/agent/transparent_browser/SKILL.md
 - etc/default_skills/pwn/ai/agent/turn_finalizer/SKILL.md
 - etc/default_skills/pwn/ai/agent/vuln_gen/SKILL.md
@@ -5198,9 +5209,11 @@ files:
 - etc/default_skills/pwn/plugins/exploit_db/SKILL.md
 - etc/default_skills/pwn/plugins/exploit_dev/SKILL.md
 - etc/default_skills/pwn/plugins/file_fu/SKILL.md
+- etc/default_skills/pwn/plugins/findings/SKILL.md
 - etc/default_skills/pwn/plugins/frida/SKILL.md
 - etc/default_skills/pwn/plugins/fuzz/SKILL.md
 - etc/default_skills/pwn/plugins/gdb/SKILL.md
+- etc/default_skills/pwn/plugins/ghidra/SKILL.md
 - etc/default_skills/pwn/plugins/git/SKILL.md
 - etc/default_skills/pwn/plugins/github/SKILL.md
 - etc/default_skills/pwn/plugins/github/references/urls.md
@@ -5532,6 +5545,7 @@ files:
 - etc/default_skills/social-engineering/SKILL.md
 - etc/default_skills/vulnerability-research-fundamentals/SKILL.md
 - etc/default_skills/web-application-penetration-testing/SKILL.md
+- etc/intel/files_exploits.csv
 - etc/osint/social_sites.json
 - etc/systemd/msfrpcd.service
 - etc/systemd/openvas.service
@@ -5869,20 +5883,31 @@ files:
 - lib/pwn/ai/agent/swarm.rb
 - lib/pwn/ai/agent/task_summarizer.rb
 - lib/pwn/ai/agent/tool_guard.rb
+- lib/pwn/ai/agent/tools/artifacts.rb
+- lib/pwn/ai/agent/tools/binary_triage.rb
 - lib/pwn/ai/agent/tools/cron.rb
 - lib/pwn/ai/agent/tools/curriculum.rb
+- lib/pwn/ai/agent/tools/decompile.rb
+- lib/pwn/ai/agent/tools/exploitdev.rb
 - lib/pwn/ai/agent/tools/extrospection.rb
+- lib/pwn/ai/agent/tools/finding_record.rb
+- lib/pwn/ai/agent/tools/fuzz_campaign.rb
+- lib/pwn/ai/agent/tools/intel_lookup.rb
+- lib/pwn/ai/agent/tools/job_run.rb
 - lib/pwn/ai/agent/tools/learning.rb
 - lib/pwn/ai/agent/tools/memory.rb
 - lib/pwn/ai/agent/tools/metrics.rb
 - lib/pwn/ai/agent/tools/mistakes.rb
 - lib/pwn/ai/agent/tools/policy.rb
+- lib/pwn/ai/agent/tools/pty_session.rb
 - lib/pwn/ai/agent/tools/reward.rb
 - lib/pwn/ai/agent/tools/ruby_eval.rb
+- lib/pwn/ai/agent/tools/session_export.rb
 - lib/pwn/ai/agent/tools/sessions.rb
 - lib/pwn/ai/agent/tools/shell.rb
 - lib/pwn/ai/agent/tools/skills.rb
 - lib/pwn/ai/agent/tools/swarm.rb
+- lib/pwn/ai/agent/tools/swarm_map.rb
 - lib/pwn/ai/agent/transparent_browser.rb
 - lib/pwn/ai/agent/turn_finalizer.rb
 - lib/pwn/ai/agent/vuln_gen.rb
@@ -6067,9 +6092,11 @@ files:
 - lib/pwn/plugins/exploit_db.rb
 - lib/pwn/plugins/exploit_dev.rb
 - lib/pwn/plugins/file_fu.rb
+- lib/pwn/plugins/findings.rb
 - lib/pwn/plugins/frida.rb
 - lib/pwn/plugins/fuzz.rb
 - lib/pwn/plugins/gdb.rb
+- lib/pwn/plugins/ghidra.rb
 - lib/pwn/plugins/git.rb
 - lib/pwn/plugins/github.rb
 - lib/pwn/plugins/google_workspace.rb
@@ -6357,6 +6384,7 @@ files:
 - spec/lib/pwn/ai/agent/extrospection/osint/bridges_spec.rb
 - spec/lib/pwn/ai/agent/extrospection/osint/social_spec.rb
 - spec/lib/pwn/ai/agent/extrospection_spec.rb
+- spec/lib/pwn/ai/agent/fixtures/error_class_docker.json
 - spec/lib/pwn/ai/agent/gqrx_spec.rb
 - spec/lib/pwn/ai/agent/hacker_one_spec.rb
 - spec/lib/pwn/ai/agent/injection_guard_spec.rb
@@ -6379,19 +6407,30 @@ files:
 - spec/lib/pwn/ai/agent/swarm_spec.rb
 - spec/lib/pwn/ai/agent/task_summarizer_spec.rb
 - spec/lib/pwn/ai/agent/tool_guard_spec.rb
+- spec/lib/pwn/ai/agent/tools/artifacts_spec.rb
+- spec/lib/pwn/ai/agent/tools/binary_triage_spec.rb
 - spec/lib/pwn/ai/agent/tools/cron_spec.rb
 - spec/lib/pwn/ai/agent/tools/curriculum_spec.rb
+- spec/lib/pwn/ai/agent/tools/decompile_spec.rb
+- spec/lib/pwn/ai/agent/tools/exploitdev_spec.rb
 - spec/lib/pwn/ai/agent/tools/extrospection_spec.rb
+- spec/lib/pwn/ai/agent/tools/finding_record_spec.rb
+- spec/lib/pwn/ai/agent/tools/fuzz_campaign_spec.rb
+- spec/lib/pwn/ai/agent/tools/intel_lookup_spec.rb
+- spec/lib/pwn/ai/agent/tools/job_run_spec.rb
 - spec/lib/pwn/ai/agent/tools/learning_spec.rb
 - spec/lib/pwn/ai/agent/tools/memory_spec.rb
 - spec/lib/pwn/ai/agent/tools/metrics_spec.rb
 - spec/lib/pwn/ai/agent/tools/mistakes_spec.rb
 - spec/lib/pwn/ai/agent/tools/policy_spec.rb
+- spec/lib/pwn/ai/agent/tools/pty_session_spec.rb
 - spec/lib/pwn/ai/agent/tools/reward_spec.rb
 - spec/lib/pwn/ai/agent/tools/ruby_eval_spec.rb
+- spec/lib/pwn/ai/agent/tools/session_export_spec.rb
 - spec/lib/pwn/ai/agent/tools/sessions_spec.rb
 - spec/lib/pwn/ai/agent/tools/shell_spec.rb
 - spec/lib/pwn/ai/agent/tools/skills_spec.rb
+- spec/lib/pwn/ai/agent/tools/swarm_map_spec.rb
 - spec/lib/pwn/ai/agent/tools/swarm_spec.rb
 - spec/lib/pwn/ai/agent/transparent_browser_spec.rb
 - spec/lib/pwn/ai/agent/turn_finalizer_spec.rb
@@ -6578,9 +6617,11 @@ files:
 - spec/lib/pwn/plugins/exploit_db_spec.rb
 - spec/lib/pwn/plugins/exploit_dev_spec.rb
 - spec/lib/pwn/plugins/file_fu_spec.rb
+- spec/lib/pwn/plugins/findings_spec.rb
 - spec/lib/pwn/plugins/frida_spec.rb
 - spec/lib/pwn/plugins/fuzz_spec.rb
 - spec/lib/pwn/plugins/gdb_spec.rb
+- spec/lib/pwn/plugins/ghidra_spec.rb
 - spec/lib/pwn/plugins/git_spec.rb
 - spec/lib/pwn/plugins/github_spec.rb
 - spec/lib/pwn/plugins/google_workspace_spec.rb
@@ -6656,7 +6697,6 @@ files:
 - spec/lib/pwn/reports/uri_buster_spec.rb
 - spec/lib/pwn/reports/xml_spec.rb
 - spec/lib/pwn/reports_spec.rb
-- spec/lib/pwn/req_queue_spec.rb
 - spec/lib/pwn/sast/amqp_connect_as_guest_spec.rb
 - spec/lib/pwn/sast/apache_file_system_util_api_spec.rb
 - spec/lib/pwn/sast/aws_spec.rb
@@ -6771,7 +6811,6 @@ files:
 - third_party/pwn_rdoc.jsonl
 - third_party/r2-pwn-layout
 - third_party/terminator/pwn_shift_enter.py
-- tmp_pwn_critic_skills_flaw.txt
 - upgrade_Gemfile_gems.sh
 - upgrade_pwn.sh
 - upgrade_ruby.sh

data/spec/lib/pwn/req_queue_spec.rb

@@ -1,168 +0,0 @@
-# frozen_string_literal: true
-
-require 'spec_helper'
-require 'socket'
-require 'tmpdir'
-
-describe 'pwn_debug REQ queue remaining surface' do
-  describe PWN::Plugins::ExploitDev do
-    it 'catalogs per-arch execve_bin_sh shellcode as opcodes' do
-      sc = described_class.shellcode(arch: 'x86_64', kind: 'execve_bin_sh')
-      expect(sc.to_s).not_to be_empty
-      expect(sc.to_s).not_to eq("\x90")
-    end
-
-    it 'one_gadget returns a structured miss when the binary is absent' do
-      allow(PWN::Plugins::PreflightChecker).to receive(:bin?).and_call_original
-      allow(PWN::Plugins::PreflightChecker).to receive(:bin?).with(name: 'one_gadget').and_return(false)
-      row = described_class.one_gadget(path: '/lib/x86_64-linux-gnu/libc.so.6')
-      expect(row).to be_a(Hash)
-      expect(row[:error].to_s).to match(/one_gadget/i)
-    end
-
-    it 'libc_offsets extracts named symbols from an ELF' do
-      path = %w[/bin/ls /usr/bin/ls /bin/true /usr/bin/true].find { |p| File.file?(p) }
-      skip 'no ELF on host' unless path
-
-      row = described_class.libc_offsets(path: path)
-      expect(row).to include(:path)
-      expect(row[:symbols]).to be_a(Hash)
-    end
-  end
-
-  describe PWN::Plugins::GDB do
-    it 'core raises without a core path' do
-      expect { described_class.core(core: '') }.to raise_error(/core is required/)
-    end
-
-    it 'breakpoints includes break commands in the gdb batch' do
-      allow(Open3).to receive(:capture3).and_return(['ok', '', instance_double(Process::Status, exitstatus: 0)])
-      described_class.breakpoints(binary: '/bin/true', breakpoints: ['main', '*0x401000'])
-      expect(Open3).to have_received(:capture3) do |*argv|
-        joined = argv.flatten.join(' ')
-        expect(joined).to include('break main')
-        expect(joined).to include('break *0x401000')
-      end
-    end
-  end
-
-  describe PWN::Plugins::ProcessTube do
-    it 'connect uses the same write_line/recvuntil API over TCP' do
-      server = TCPServer.new('127.0.0.1', 0)
-      port = server.addr[1]
-      thr = Thread.new do
-        sock = server.accept
-        sock.write("banner\n")
-        sock.flush
-        line = sock.gets
-        sock.write("ack #{line}")
-        sock.close
-      end
-      tube = described_class.connect(host: '127.0.0.1', port: port)
-      described_class.recvuntil(id: tube[:id], until: "\n", timeout: 2)
-      described_class.write_line(id: tube[:id], line: 'hi')
-      out = described_class.recvuntil(id: tube[:id], until: 'hi', timeout: 2)
-      expect(out).to include('ack')
-    ensure
-      described_class.close(id: tube[:id]) if tube
-      thr&.kill
-      server&.close
-    end
-  end
-
-  describe PWN::Setup do
-    it 're profile includes pwndbg, ropper, and rizin' do
-      bins = PWN::Setup::PROFILES[:re][:bins]
-      expect(bins).to include('pwndbg', 'ropper', 'rizin')
-    end
-  end
-
-  describe PWN::Plugins::PreflightChecker do
-    it 'check includes missing_services' do
-      row = described_class.check.find { |r| r[:plugin].to_s.include?('Packet') }
-      expect(row).to include(:missing_services)
-    end
-
-    it 'service? is false for a missing unix socket' do
-      expect(described_class.service?(name: 'no-such-pwn-svc', path: '/tmp/pwn-no-such.sock')).to be false
-    end
-  end
-
-  describe PWN::Plugins::Sock do
-    it 'protocol :raw demands CAP_NET_RAW' do
-      allow(PWN::Plugins::PreflightChecker).to receive(:cap_net_raw?).and_return(false)
-      expect do
-        described_class.connect(target: '127.0.0.1', port: 9, protocol: :raw)
-      end.to raise_error(PWN::Plugins::PreflightChecker::MissingCapability)
-    end
-  end
-
-  describe PWN::Plugins::Nuclei do
-    it 'to_findings maps JSONL rows into report-shaped hashes' do
-      rows = [{ 'info' => { 'name' => 'xss', 'severity' => 'high' }, 'matched-at' => 'https://x/' }]
-      out = described_class.to_findings(rows: rows)
-      expect(out.first).to include(:title, :severity, :url)
-    end
-  end
-
-  describe PWN::Plugins::Fuzz do
-    it 'http mutates a request with dictionary payloads' do
-      reqs = described_class.http(
-        request: "GET /FUZZ HTTP/1.1\r\nHost: x\r\n\r\n",
-        dictionary: %w[admin ../]
-      )
-      expect(reqs.length).to eq(2)
-      expect(reqs.first).to include('admin')
-    end
-
-    it 'file_format mutates a seed with dictionary blobs' do
-      Dir.mktmpdir do |dir|
-        seed = File.join(dir, 'seed.bin')
-        File.binwrite(seed, 'AAAA')
-        out = described_class.file_format(path: seed, dictionary: ["\xff\xff"])
-        expect(out).to be_an(Array)
-        expect(out.first).to be_a(String)
-      end
-    end
-  end
-
-  describe PWN::Plugins::ArtifactRegistry do
-    it 'lists artifacts for a session id' do
-      Dir.mktmpdir do |dir|
-        stub_const('PWN::Plugins::ArtifactRegistry::ROOT', dir)
-        src = File.join(dir, 'loot.txt')
-        File.write(src, 'x')
-        described_class.register(session_id: 'sess1', path: src, kind: 'loot')
-        rows = described_class.list(session_id: 'sess1')
-        expect(rows.first[:kind]).to eq('loot')
-      end
-    end
-  end
-
-  describe PWN::Plugins::Frida do
-    it 'ssl_pinning_script returns injectable javascript' do
-      js = described_class.ssl_pinning_script
-      expect(js).to match(/SSL_CTX|TrustManager|pinning/i)
-    end
-  end
-
-  describe PWN::Plugins::Semgrep do
-    it 'responds to scan' do
-      expect(described_class).to respond_to(:scan)
-    end
-  end
-
-  describe PWN::Plugins::ExploitDB do
-    it 'responds to search and cve_for_cpe' do
-      expect(described_class).to respond_to(:search)
-      expect(described_class).to respond_to(:cve_for_cpe)
-    end
-  end
-
-  describe PWN::Plugins::K8s do
-    it 'responds to trivy and kube_hunter' do
-      expect(described_class).to respond_to(:trivy)
-      expect(described_class).to respond_to(:kube_hunter)
-    end
-  end
-end

data/tmp_pwn_critic_skills_flaw.txt

@@ -1,9 +0,0 @@
-pwn_critic swarm 20260819_214041_e6ff4d
-REQUEST: what skills are available?
-LIVE INDEX: /home/ninp0/.pwn/skills
-LIVE COUNT: 103
-CANDIDATE CLAIM: 103 skills, complete A-Z list
-CANDIDATE LISTED: 24 names, last item truncated at "document-to-action-items -- Extract cited obligations, deadli"
-MISSING COUNT: 79
-VERDICT: FLAW
-ONE LINE: Claims 103 skills from the live SKILLS index but the list stops at item 24 mid-word; 79 skills are omitted.