pwn 0.5.784 → 0.5.785

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (242) hide show
  1. checksums.yaml +4 -4
  2. data/.ruby-version +1 -1
  3. data/Gemfile +6 -6
  4. data/README.md +37 -0
  5. data/bin/pwn +2 -1
  6. data/bin/pwn_web_cache_deception +35 -7
  7. data/documentation/AI-Integration.md +7 -5
  8. data/documentation/Agent-Tool-Registry.md +2 -2
  9. data/documentation/Backup-Retention.md +70 -15
  10. data/documentation/Configuration.md +10 -6
  11. data/documentation/Contributing.md +1 -1
  12. data/documentation/Cron.md +2 -2
  13. data/documentation/Diagrams.md +2 -2
  14. data/documentation/General-PWN-Usage.md +4 -3
  15. data/documentation/Home.md +6 -5
  16. data/documentation/How-PWN-Works.md +6 -5
  17. data/documentation/Installation.md +12 -9
  18. data/documentation/Mission-Cancellation.md +134 -0
  19. data/documentation/Operability.md +17 -0
  20. data/documentation/Persistence.md +7 -5
  21. data/documentation/Plugin-Degradation.md +12 -0
  22. data/documentation/Plugins.md +3 -2
  23. data/documentation/Runtime-Source-Protection.md +162 -0
  24. data/documentation/Transparent-Browser.md +11 -0
  25. data/documentation/Troubleshooting.md +3 -2
  26. data/documentation/What-is-PWN.md +2 -2
  27. data/documentation/YubiKey-Vaults.md +183 -0
  28. data/documentation/YubiKey.md +339 -0
  29. data/documentation/diagrams/cron-scheduling.svg +130 -130
  30. data/documentation/diagrams/dot/cron-scheduling.dot +3 -3
  31. data/documentation/diagrams/dot/persistence-filesystem.dot +5 -3
  32. data/documentation/diagrams/dot/plugin-ecosystem.dot +2 -2
  33. data/documentation/diagrams/persistence-filesystem.svg +172 -142
  34. data/documentation/diagrams/plugin-ecosystem.svg +64 -64
  35. data/documentation/pwn-ai-Agent.md +10 -4
  36. data/etc/default_cron/session_cleanup.rb +43 -27
  37. data/etc/default_skills/pwn/ai/agent/mission_namespace/SKILL.md +21 -0
  38. data/etc/default_skills/pwn/ai/agent/tools/browser_act/SKILL.md +45 -0
  39. data/etc/default_skills/pwn/ai/agent/tools/loot_query/SKILL.md +27 -26
  40. data/etc/default_skills/pwn/ai/agent/tools/recon_run/SKILL.md +25 -15
  41. data/etc/default_skills/pwn/ai/agent/tools/workspace_tool/SKILL.md +24 -0
  42. data/etc/default_skills/pwn/ai/server_tools/SKILL.md +25 -0
  43. data/etc/default_skills/pwn/backups/SKILL.md +54 -0
  44. data/etc/default_skills/pwn/plugins/recon/SKILL.md +12 -1
  45. data/etc/default_skills/pwn/plugins/yubikey/SKILL.md +157 -0
  46. data/etc/default_skills/pwn/plugins/yubikey/fido/SKILL.md +189 -0
  47. data/etc/default_skills/pwn/plugins/yubikey/hsmauth/SKILL.md +83 -0
  48. data/etc/default_skills/pwn/plugins/yubikey/management/SKILL.md +80 -0
  49. data/etc/default_skills/pwn/plugins/yubikey/oath/SKILL.md +115 -0
  50. data/etc/default_skills/pwn/plugins/yubikey/openpgp/SKILL.md +144 -0
  51. data/etc/default_skills/pwn/plugins/yubikey/otp/SKILL.md +97 -0
  52. data/etc/default_skills/pwn/plugins/yubikey/piv/SKILL.md +110 -0
  53. data/etc/default_skills/pwn/plugins/yubikey/protocol/SKILL.md +21 -0
  54. data/etc/default_skills/pwn/plugins/yubikey/security_domain/SKILL.md +75 -0
  55. data/etc/default_skills/pwn/plugins/yubikey/security_domain/scp/SKILL.md +46 -0
  56. data/etc/default_skills/pwn/plugins/yubikey/transport/SKILL.md +98 -0
  57. data/etc/default_skills/pwn/redaction/SKILL.md +13 -1
  58. data/lib/pwn/ai/agent/dispatch.rb +26 -15
  59. data/lib/pwn/ai/agent/learning.rb +14 -18
  60. data/lib/pwn/ai/agent/loop.rb +17 -1
  61. data/lib/pwn/ai/agent/mission_namespace.rb +331 -0
  62. data/lib/pwn/ai/agent/policy_evaluation.rb +8 -8
  63. data/lib/pwn/ai/agent/prompt_builder.rb +13 -2
  64. data/lib/pwn/ai/agent/request_runtime.rb +122 -18
  65. data/lib/pwn/ai/agent/reward.rb +5 -3
  66. data/lib/pwn/ai/agent/skill_consolidation.rb +3 -2
  67. data/lib/pwn/ai/agent/skill_review.rb +9 -5
  68. data/lib/pwn/ai/agent/swarm.rb +4 -0
  69. data/lib/pwn/ai/agent/tools/browser_act.rb +32 -0
  70. data/lib/pwn/ai/agent/tools/loot_query.rb +11 -1
  71. data/lib/pwn/ai/agent/tools/recon_run.rb +11 -1
  72. data/lib/pwn/ai/agent/tools/workspace_tool.rb +29 -0
  73. data/lib/pwn/ai/agent/turn_finalizer.rb +6 -2
  74. data/lib/pwn/ai/agent.rb +1 -0
  75. data/lib/pwn/ai/anthropic.rb +8 -33
  76. data/lib/pwn/ai/cli.rb +34 -5
  77. data/lib/pwn/ai/gemini.rb +1 -0
  78. data/lib/pwn/ai/grok.rb +39 -28
  79. data/lib/pwn/ai/ollama.rb +4 -2
  80. data/lib/pwn/ai/open_ai.rb +11 -32
  81. data/lib/pwn/ai/open_web_ui.rb +62 -4
  82. data/lib/pwn/ai/router.rb +8 -1
  83. data/lib/pwn/ai/server_tools.rb +231 -0
  84. data/lib/pwn/ai.rb +1 -0
  85. data/lib/pwn/backups.rb +347 -0
  86. data/lib/pwn/config.rb +70 -39
  87. data/lib/pwn/migrate.rb +85 -280
  88. data/lib/pwn/module_skills.rb +7 -0
  89. data/lib/pwn/plugins/ai_sandbox.rb +538 -1
  90. data/lib/pwn/plugins/authentication_helper.rb +74 -4
  91. data/lib/pwn/plugins/basic_auth.rb +2 -1
  92. data/lib/pwn/plugins/google_workspace.rb +4 -21
  93. data/lib/pwn/plugins/jobs.rb +1 -1
  94. data/lib/pwn/plugins/log.rb +3 -1
  95. data/lib/pwn/plugins/preflight_checker.rb +34 -9
  96. data/lib/pwn/plugins/recon.rb +4 -1
  97. data/lib/pwn/plugins/repl/ai.rb +293 -26
  98. data/lib/pwn/plugins/repl/ai_console.rb +268 -88
  99. data/lib/pwn/plugins/repl/ai_swarm.rb +177 -58
  100. data/lib/pwn/plugins/repl/mesh.rb +3 -16
  101. data/lib/pwn/plugins/repl/vault.rb +4 -15
  102. data/lib/pwn/plugins/repl.rb +1 -216
  103. data/lib/pwn/plugins/sandbox/driver.rb +4 -0
  104. data/lib/pwn/plugins/transparent_browser.rb +215 -0
  105. data/lib/pwn/plugins/vault.rb +412 -135
  106. data/lib/pwn/plugins/yubikey/fido.rb +1288 -0
  107. data/lib/pwn/plugins/yubikey/hsmauth.rb +439 -0
  108. data/lib/pwn/plugins/yubikey/management.rb +686 -0
  109. data/lib/pwn/plugins/yubikey/oath.rb +766 -0
  110. data/lib/pwn/plugins/yubikey/openpgp.rb +1063 -0
  111. data/lib/pwn/plugins/yubikey/otp.rb +897 -0
  112. data/lib/pwn/plugins/yubikey/piv.rb +1315 -0
  113. data/lib/pwn/plugins/yubikey/protocol.rb +341 -0
  114. data/lib/pwn/plugins/yubikey/security_domain/scp.rb +482 -0
  115. data/lib/pwn/plugins/yubikey/security_domain.rb +464 -0
  116. data/lib/pwn/plugins/yubikey/transport.rb +1017 -0
  117. data/lib/pwn/plugins/yubikey.rb +844 -0
  118. data/lib/pwn/plugins.rb +1 -0
  119. data/lib/pwn/redaction.rb +69 -12
  120. data/lib/pwn/session_trace.rb +4 -0
  121. data/lib/pwn/setup.rb +114 -24
  122. data/lib/pwn/version.rb +1 -1
  123. data/lib/pwn/www/app_cobalt_io.rb +16 -5
  124. data/lib/pwn/www/bug_crowd.rb +16 -5
  125. data/lib/pwn/www/coinbase_pro.rb +16 -5
  126. data/lib/pwn/www/github.rb +30 -14
  127. data/lib/pwn/www/paypal.rb +15 -4
  128. data/lib/pwn/www/synack.rb +16 -5
  129. data/lib/pwn/www/twitter.rb +17 -6
  130. data/lib/pwn.rb +1 -0
  131. data/spec/documentation/installation_md_spec.rb +1 -1
  132. data/spec/fixtures/yubikey/apdu_frames.json +162 -0
  133. data/spec/integration/authentication_helper_oath_spec.rb +117 -0
  134. data/spec/integration/controller_spill_spec.rb +48 -0
  135. data/spec/integration/harness_process_spec.rb +97 -0
  136. data/spec/integration/mission_cancel_spec.rb +79 -0
  137. data/spec/integration/mission_curses_pty_spec.rb +44 -0
  138. data/spec/integration/readme_security_spec.rb +47 -0
  139. data/spec/integration/web_cache_deception_yubikey_spec.rb +159 -0
  140. data/spec/lib/pwn/ai/agent/dispatch_spec.rb +6 -3
  141. data/spec/lib/pwn/ai/agent/dispatch_vault_safety_spec.rb +86 -0
  142. data/spec/lib/pwn/ai/agent/injection_guard_spec.rb +2 -0
  143. data/spec/lib/pwn/ai/agent/learning_spec.rb +4 -4
  144. data/spec/lib/pwn/ai/agent/loop_artifacts_spec.rb +5 -0
  145. data/spec/lib/pwn/ai/agent/loop_spec.rb +104 -29
  146. data/spec/lib/pwn/ai/agent/mission_namespace_spec.rb +138 -0
  147. data/spec/lib/pwn/ai/agent/request_runtime_spec.rb +48 -0
  148. data/spec/lib/pwn/ai/agent/shell_search_effect_spec.rb +44 -0
  149. data/spec/lib/pwn/ai/agent/solve_spec.rb +6 -4
  150. data/spec/lib/pwn/ai/agent/tools/browser_act_spec.rb +44 -0
  151. data/spec/lib/pwn/ai/agent/tools/loot_query_yubikey_spec.rb +55 -0
  152. data/spec/lib/pwn/ai/agent/tools/recon_run_yubikey_spec.rb +43 -0
  153. data/spec/lib/pwn/ai/agent/tools/workspace_tool_spec.rb +20 -0
  154. data/spec/lib/pwn/ai/agent/turn_finalizer_spec.rb +7 -0
  155. data/spec/lib/pwn/ai/anthropic_vault_enrollment_spec.rb +37 -0
  156. data/spec/lib/pwn/ai/cli_spec.rb +6 -9
  157. data/spec/lib/pwn/ai/oauth_vault_persistence_spec.rb +195 -0
  158. data/spec/lib/pwn/ai/open_ai_spec.rb +2 -2
  159. data/spec/lib/pwn/ai/open_web_ui_workspace_spec.rb +36 -0
  160. data/spec/lib/pwn/ai/router_spec.rb +1 -1
  161. data/spec/lib/pwn/ai/server_tools_spec.rb +39 -0
  162. data/spec/lib/pwn/backups_spec.rb +114 -0
  163. data/spec/lib/pwn/config_redaction_yubikey_spec.rb +28 -0
  164. data/spec/lib/pwn/config_yubikey_spec.rb +92 -0
  165. data/spec/lib/pwn/migrate_spec.rb +29 -81
  166. data/spec/lib/pwn/migrate_yubikey_spec.rb +128 -0
  167. data/spec/lib/pwn/module_skills_spec.rb +8 -0
  168. data/spec/lib/pwn/plugins/ai_sandbox_spec.rb +230 -0
  169. data/spec/lib/pwn/plugins/authentication_helper_native_yubikey_spec.rb +40 -0
  170. data/spec/lib/pwn/plugins/authentication_helper_yubikey_spec.rb +90 -0
  171. data/spec/lib/pwn/plugins/capability_broker/daemon_spec.rb +1 -1
  172. data/spec/lib/pwn/plugins/google_workspace_spec.rb +17 -35
  173. data/spec/lib/pwn/plugins/log_yubikey_spec.rb +47 -0
  174. data/spec/lib/pwn/plugins/preflight_checker_native_yubikey_spec.rb +19 -0
  175. data/spec/lib/pwn/plugins/preflight_checker_yubikey_spec.rb +55 -0
  176. data/spec/lib/pwn/plugins/recon_yubikey_spec.rb +43 -0
  177. data/spec/lib/pwn/plugins/repl/ai_console_spec.rb +110 -75
  178. data/spec/lib/pwn/plugins/repl/ai_legacy_containment_spec.rb +200 -0
  179. data/spec/lib/pwn/plugins/repl/ai_swarm_spec.rb +19 -16
  180. data/spec/lib/pwn/plugins/repl/ai_vault_edit_yubikey_spec.rb +103 -0
  181. data/spec/lib/pwn/plugins/repl/ai_yubikey_spec.rb +48 -0
  182. data/spec/lib/pwn/plugins/repl/mesh_vault_persistence_spec.rb +149 -0
  183. data/spec/lib/pwn/plugins/repl/vault_yaml_serialization_spec.rb +11 -0
  184. data/spec/lib/pwn/plugins/repl/vault_yubikey_spec.rb +39 -0
  185. data/spec/lib/pwn/plugins/repl_spec.rb +56 -5
  186. data/spec/lib/pwn/plugins/transparent_browser_jev_spec.rb +46 -0
  187. data/spec/lib/pwn/plugins/vault_native_yubikey_spec.rb +29 -0
  188. data/spec/lib/pwn/plugins/vault_publication_safety_spec.rb +258 -0
  189. data/spec/lib/pwn/plugins/vault_store_safety_spec.rb +241 -0
  190. data/spec/lib/pwn/plugins/vault_yubikey_safety_spec.rb +168 -0
  191. data/spec/lib/pwn/plugins/vault_yubikey_spec.rb +128 -0
  192. data/spec/lib/pwn/plugins/vault_yubikey_vector_spec.rb +45 -0
  193. data/spec/lib/pwn/plugins/yubikey/fido_spec.rb +854 -0
  194. data/spec/lib/pwn/plugins/yubikey/hsmauth_spec.rb +235 -0
  195. data/spec/lib/pwn/plugins/yubikey/management_spec.rb +277 -0
  196. data/spec/lib/pwn/plugins/yubikey/oath_spec.rb +349 -0
  197. data/spec/lib/pwn/plugins/yubikey/openpgp_spec.rb +810 -0
  198. data/spec/lib/pwn/plugins/yubikey/otp_spec.rb +337 -0
  199. data/spec/lib/pwn/plugins/yubikey/piv_spec.rb +646 -0
  200. data/spec/lib/pwn/plugins/yubikey/protocol_secure_spec.rb +28 -0
  201. data/spec/lib/pwn/plugins/yubikey/protocol_spec.rb +149 -0
  202. data/spec/lib/pwn/plugins/yubikey/protocol_vectors_spec.rb +18 -0
  203. data/spec/lib/pwn/plugins/yubikey/security_domain/scp_spec.rb +256 -0
  204. data/spec/lib/pwn/plugins/yubikey/security_domain/support.rb +153 -0
  205. data/spec/lib/pwn/plugins/yubikey/security_domain_spec.rb +296 -0
  206. data/spec/lib/pwn/plugins/yubikey/transport_spec.rb +760 -0
  207. data/spec/lib/pwn/plugins/yubikey_security_spec.rb +260 -0
  208. data/spec/lib/pwn/plugins/yubikey_spec.rb +209 -0
  209. data/spec/lib/pwn/plugins/yubikey_terminal_spec.rb +147 -0
  210. data/spec/lib/pwn/redaction_yubikey_spec.rb +61 -0
  211. data/spec/lib/pwn/session_cleanup_default_spec.rb +7 -5
  212. data/spec/lib/pwn/session_cleanup_payload_spec.rb +11 -11
  213. data/spec/lib/pwn/session_cleanup_recovery_spec.rb +34 -20
  214. data/spec/lib/pwn/setup_native_yubikey_spec.rb +66 -0
  215. data/spec/lib/pwn/setup_vault_yubikey_spec.rb +61 -0
  216. data/spec/lib/pwn/setup_yubikey_spec.rb +40 -0
  217. data/spec/lib/pwn/www/login_yubikey_spec.rb +273 -0
  218. data/spec/spec_helper.rb +15 -0
  219. data/spec/support/harness/cli_faults.rb +13 -9
  220. data/spec/support/harness/controller_spill.rb +26 -0
  221. data/spec/support/harness/controller_state.rb +54 -0
  222. data/spec/support/harness/evaluate.rb +12 -1
  223. data/spec/support/harness/experiments.rb +1 -1
  224. data/spec/support/harness/fake_provider.rb +22 -6
  225. data/spec/support/harness/fault_preload.rb +3 -1
  226. data/spec/support/harness/mission_console.rb +54 -0
  227. data/spec/support/harness/mission_curses_pty.rb +41 -0
  228. data/spec/support/harness/mission_dispatch.rb +30 -0
  229. data/spec/support/harness/mission_fixture_preload.rb +24 -0
  230. data/spec/support/harness/mission_job_lifetime.rb +25 -0
  231. data/spec/support/harness/mission_legacy.rb +25 -0
  232. data/spec/support/harness/mission_normal_exit.rb +34 -0
  233. data/spec/support/harness/mission_swarm.rb +23 -0
  234. data/spec/support/harness/mission_unsupported.rb +29 -0
  235. data/spec/support/harness/package_acceptance.rb +33 -5
  236. data/spec/support/harness/session_acceptance.rb +4 -4
  237. data/spec/support/harness/swarm_acceptance.rb +1 -1
  238. data/spec/support/harness/swarm_control.rb +44 -0
  239. data/spec/support/mission_namespace.rb +14 -0
  240. data/spec/support/mission_pipe_queue.rb +33 -0
  241. data/third_party/pwn_rdoc.jsonl +589 -19
  242. metadata +129 -13
@@ -29,13 +29,13 @@ digraph "PWN_Cron" {
29
29
  {rank=same; Prompt; Ruby; Script}
30
30
 
31
31
  subgraph cluster_seed {
32
- label="Optional curriculum templates / preserved legacy jobs (NOT seeded)"; fontcolor="#ddd6fe"; style=rounded;
32
+ label="Not seeded. Curriculum templates, plus legacy split jobs if already present"; fontcolor="#ddd6fe"; style=rounded;
33
33
  color="#6d28d9"; bgcolor="#2e1065"; penwidth=2;
34
34
  Practice [label="curriculum_practice_nightly\n0 3 * * * OFF\nCurriculum.practice(limit:3)", fillcolor="#c4b5fd"];
35
35
  Offline [label="curriculum_offline_judge\n30 3 * * * OFF\nCurriculum.offline_judge", fillcolor="#c4b5fd"];
36
36
  Train [label="curriculum_train_weekly\n0 4 * * 0 OFF\nCurriculum.train_and_gate\n(dry_run / export_ready)", fillcolor="#c4b5fd"];
37
- MemGC [label="learning_consolidate_nightly\n0 5 * * * ON\nLearning.consolidate", fillcolor="#c4b5fd"];
38
- Lean [label="pwn_stores_lean_nightly\n15 5 * * * ON\nLearning.gc_stores!", fillcolor="#c4b5fd"];
37
+ MemGC [label="learning_consolidate_nightly\nnot seeded\npreserved only if already present", fillcolor="#c4b5fd"];
38
+ Lean [label="pwn_stores_lean_nightly\nnot seeded\npreserved only if already present", fillcolor="#c4b5fd"];
39
39
  }
40
40
  {rank=same; Practice; Offline; Train; MemGC; Lean}
41
41
 
@@ -26,16 +26,18 @@ digraph "PWN_Persistence" {
26
26
  ext [label="extrospection.json\nsnapshot (host/net/tc/repo/env/\nrf/web/osint/serial/telecomm/\npacket/vision/voice) + prev + obs[]"];
27
27
  eart [label="extrospection/{web,packet,voice}/*\nscreenshots · pcaps · wav/txt"];
28
28
  ses [label="sessions/*.jsonl\ntranscripts (+ step_reward)"];
29
- crn [label="cron/jobs.yml + log/\nhygiene ON: consolidate + lean\ncurriculum practice/judge/train OFF"];
29
+ crn [label="cron/jobs.yml + log/\nfresh seed: session_cleanup only\ncurriculum not seeded"];
30
30
  agt [label="agents.yml\npersona registry"];
31
31
  swm [label="swarm/<id>/bus.jsonl\nmulti-agent chat"];
32
32
  cur [label="curriculum/ + curriculum_kpi.jsonl\nself-play · A/B eval · KPI trend"];
33
33
  ftn [label="finetune/*.jsonl\nShareGPT / OpenAI SFT + DPO"];
34
- bkp [label="backup/<ts>/ · quarantine/\nMigrate autofix snapshots"];
34
+ bkp [label="backup/<generation>/\nPWN::Backups · 7 total"];
35
+ qtn [label="quarantine/\ncorrupt originals\nnot a backup generation"];
36
+ rt [label="workspaces/runtime/\npwn-ai writes · TMPDIR\nregistered disposable inputs"];
35
37
  hist [label="~/.pwn/pwn_history\nREPL history"];
36
38
 
37
39
  Root->cfg; Root->schm; Root->mem; Root->midx; Root->skl; Root->lrn;
38
40
  Root->prf; Root->mis; Root->met; Root->pol; Root->rws; Root->ext; Root->eart;
39
41
  Root->ses; Root->crn; Root->agt; Root->swm; Root->cur; Root->ftn;
40
- Root->bkp; Root->hist;
42
+ Root->bkp; Root->qtn; Root->hist; Root->rt;
41
43
  }
@@ -1,6 +1,6 @@
1
1
  digraph "PWN_Plugins" {
2
2
  graph [
3
- label=<<B>PWN::Plugins - Selected categories from 107 plugin modules</B>>,
3
+ label=<<B>PWN::Plugins - Selected categories from 108 plugin modules</B>>,
4
4
  labelloc=t, fontsize=20, fontname="Helvetica",
5
5
  rankdir=LR, splines=spline, nodesep=0.25, ranksep=1.5,
6
6
  bgcolor="#0f172a", fontcolor="#e2e8f0", pad=0.6, newrank=true
@@ -32,7 +32,7 @@ digraph "PWN_Plugins" {
32
32
  x [label="Metasploit · Fuzz\nBeEF · Assembly"];
33
33
  o [label="Shodan · Hunter\nGithub · HackerOne"];
34
34
  d [label="DAO::LDAP/Mongo/PG/SQLite\nJSONPathify · PDFParse · OCR"];
35
- a [label="OAuth2 · BasicAuth\nAuthenticationHelper · Vault"];
35
+ a [label="OAuth2 · BasicAuth\nAuthenticationHelper · Vault · YubiKey"];
36
36
  h [label="Serial · BusPirate\nMSR206 · Android · BareSIP"];
37
37
  c [label="Jenkins · Git · Vsphere\nDefectDojo · BlackDuck"];
38
38
  m [label="MailAgent · SlackClient\nIRC · RabbitMQ · TwitterAPI · Voice"];