pwn 0.5.790 → 0.5.793

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 43bc28ac60d5883af330355e4b3c12a7d0b8d553f194021a934eab172efe0d51
-  data.tar.gz: b2c8133b2a5fd7a7be73e2245df3a6e2a35e5eb6319cde8676b109f9b423577a
+  metadata.gz: ad2a2e3fe7efc1387b2e1e74af3eb75a7f843fa48f6256e86670ffde794f091d
+  data.tar.gz: b48527c558f948fc39b09c8ac03a6fe90ef4be80ea042dcbe77c4f33cce00a08
 SHA512:
-  metadata.gz: 316290237f20ebf205c02adcada75525462ac152d9c8ce0db918ac87b7d17457b8d1461c81bfad3cf19fc5bb649a6dfec5c05bed384e4389e2dcf19a9985267d
-  data.tar.gz: 99d090c82e60a2641cf1c53b0a54a4ce09d7cede595d9c03d9958861ab48785a8022e17184bc3fd9b9ec935149477180dbf531668e60695005a7dde3d4001d80
+  metadata.gz: '08697b10f3966be151cca3d55d72f0c852256989bcbeb7ee3887a160d231e7463ea140e0498562783a052f05a802e35f028362e918fe2b50220a0f9f2d55e9de'
+  data.tar.gz: 0a88ece3b27161c451ddae0e20e9d6edf90328f66f0027abce7bc502117b7f999aa1b5361e423b9630c950d463ed4aa5bb4283225c9e6748256eaae6a9a58c51

data/Gemfile

@@ -11,7 +11,7 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '<8.1.4'
+gem 'activesupport', '<8.1.4.1'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.3.0'
@@ -52,7 +52,7 @@ gem 'mail', '2.9.1'
 gem 'mcp', '1.9.0'
 gem 'meshtastic', '0.0.192'
 gem 'metasm', '1.0.6'
-gem 'mongo', '2.26.0'
+gem 'mongo', '2.26.1'
 gem 'msfrpc-client', '1.1.2'
 gem 'netaddr', '2.0.6'
 gem 'net-ldap', '0.21.0'

data/lib/pwn/plugins/yubikey/piv.rb

@@ -482,11 +482,28 @@ module PWN
               options['rsa_mgf1_md'] = @opts.fetch(:mgf1_hash, digest)
               options['rsa_oaep_label'] = @opts[:label].b.unpack1('H*') if @opts[:label]
             end
-            dummy.decrypt(wrapped, options)
+            message = dummy.decrypt(wrapped, options)
+            # OpenSSL 3 may return random bytes instead of raising when PKCS1
+            # padding is invalid. Never treat that as plaintext.
+            if padding == :pkcs1
+              verified = pkcs1_unpad(padded)
+              raise ResponseError, 'RSA decryption failed' unless verified == message
+            end
+            message
           rescue OpenSSL::OpenSSLError
             raise ResponseError, 'RSA decryption failed', cause: nil
           end
 
+          def pkcs1_unpad(padded)
+            bytes = padded.b.bytes
+            tail = bytes[2..] || []
+            found = tail.index(0)
+            separator = found.nil? ? nil : found + 2
+            raise ResponseError, 'RSA decryption failed' unless bytes[0].zero? && bytes[1] == 2 && separator && separator >= 10
+
+            padded.b.byteslice(separator + 1, padded.bytesize - separator - 1)
+          end
+
           def calculate_secret(identifier, peer)
             selected = slot(identifier)
             public_part = parse_key(peer)

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.790'
+  VERSION = '0.5.793'
 end

data/spec/lib/pwn/plugins/repl/ai_console_spec.rb

@@ -515,13 +515,22 @@ describe 'pwn-ai curses launch' do # rubocop:disable Metrics/BlockLength -- publ
     @screen = screen
     output = double('terminal', tty?: true)
     previous = [$stdin, $stdout, $stderr]
-    Timeout.timeout(60, Class.new(Exception)) do # rubocop:disable Lint/InheritException -- must escape Console rescue StandardError
-      reader = lambda do
-        key = keys.empty? ? tick.call : keys.shift
-        Thread.pass if key.nil?
-        key
+    @console = nil
+    allow(PWN::Plugins::REPL::AIConsole::Console).to receive(:new).and_wrap_original do |original, *args, **kwargs|
+      @console = original.call(*args, **kwargs)
+    end
+    expired = Class.new(Exception) # rubocop:disable Lint/InheritException -- must escape Console rescue StandardError
+    begin
+      Timeout.timeout(60, expired) do
+        reader = lambda do
+          key = keys.empty? ? tick.call : keys.shift
+          Thread.pass if key.nil?
+          key
+        end
+        PWN::Plugins::REPL::AIConsole.run(pry: @pry, input: input, output: output, curses: screen, getch: reader)
       end
-      PWN::Plugins::REPL::AIConsole.run(pry: @pry, input: input, output: output, curses: screen, getch: reader)
+    rescue expired
+      raise expired, "execution expired phase=#{@launch_phase.inspect} session=#{@pry.config.pwn_ai_session_id} paint=#{@paint.join[-240]}"
     end
     expect([$stdin, $stdout]).to eq(previous.take(2))
     expect(PWN::Plugins::Log.raw_stderr).to equal(previous[2])
@@ -2674,15 +2683,26 @@ describe 'pwn-ai curses launch' do # rubocop:disable Metrics/BlockLength -- publ
       expect(opts[:messages]).to include(hash_including(role: 'user', content: 'Previous fixture question'), hash_including(role: 'assistant', content: 'Previous fixture answer'))
       { choices: [{ message: { role: 'assistant', content: 'Selected route.', tool_calls: [] } }] }
     end
-    keys = "/model openai console-fixture\n/sessions resume resumed console\n".chars
-    submitted = false
+    keys = "/model openai console-fixture\n".chars
+    phase = :model
     launch(keys) do
-      if !submitted && @pry.config.pwn_ai_session_id == sid
-        submitted = true
-        keys.concat("what color is a lemon?\n".chars)
+      @launch_phase = phase
+      idle = @console && !@console.send(:busy?)
+      case phase
+      when :model
+        if idle && @paint.join.include?('model=console-fixture')
+          phase = :resume
+          keys.concat("/sessions resume resumed console\n".chars)
+        end
         nil
-      elsif @paint.any? { |row| row.include?('Selected route.') }
-        "\u0004"
+      when :resume
+        if idle && @pry.config.pwn_ai_session_id == sid
+          phase = :ask
+          keys.concat("what color is a lemon?\n".chars)
+        end
+        nil
+      else
+        "\u0004" if @paint.join.include?('Selected route.')
       end
     end
     expect(@pry.config.pwn_ai_session_id).to eq(sid)

data/third_party/pwn_rdoc.jsonl

@@ -1900,9 +1900,11 @@
 {"messages":[{"role":"user","content":"PWN::Backups.capture Usage"},{"role":"assistant","content":"`PWN::Backups.capture`: Supported Method Parameters\n\nPWN::Backups.capture(path: ‘/path/to/source’, label: ‘learning’)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Backups.configure Usage"},{"role":"assistant","content":"`PWN::Backups.configure`: Supported Method Parameters\n\nPWN::Backups.configure(root: nil)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Backups.directory Usage"},{"role":"assistant","content":"`PWN::Backups.directory`: Supported Method Parameters\n\nPWN::Backups.directory(label: ‘maintenance’) Caller must hold transaction through the final source mutation and ledger.\n"}]}
+{"messages":[{"role":"user","content":"PWN::Backups.expirable_name? Usage"},{"role":"assistant","content":"`PWN::Backups.expirable_name?`: "}]}
 {"messages":[{"role":"user","content":"PWN::Backups.help Usage"},{"role":"assistant","content":"`PWN::Backups.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Backups.legacy_inventory Usage"},{"role":"assistant","content":"`PWN::Backups.legacy_inventory`: "}]}
 {"messages":[{"role":"user","content":"PWN::Backups.legacy_unreferenced Usage"},{"role":"assistant","content":"`PWN::Backups.legacy_unreferenced`: "}]}
+{"messages":[{"role":"user","content":"PWN::Backups.owned_directory? Usage"},{"role":"assistant","content":"`PWN::Backups.owned_directory?`: "}]}
 {"messages":[{"role":"user","content":"PWN::Backups.reconcile Usage"},{"role":"assistant","content":"`PWN::Backups.reconcile`: Supported Method Parameters\n\nPWN::Backups.reconcile(generation: ‘name’, expected_sha256: ‘digest’, confirmed: true)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Backups.reference_pins Usage"},{"role":"assistant","content":"`PWN::Backups.reference_pins`: "}]}
 {"messages":[{"role":"user","content":"PWN::Backups.relocate_legacy Usage"},{"role":"assistant","content":"`PWN::Backups.relocate_legacy`: Supported Method Parameters\n\nPWN::Backups.relocate_legacy(paths: [], dry_run: true, writers_stopped: false)\n"}]}

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.790
+  version: 0.5.793
 platform: ruby
 authors:
 - 0day Inc.
@@ -15,14 +15,14 @@ dependencies:
     requirements:
     - - "<"
       - !ruby/object:Gem::Version
-        version: 8.1.4
+        version: 8.1.4.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "<"
       - !ruby/object:Gem::Version
-        version: 8.1.4
+        version: 8.1.4.1
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement
@@ -547,14 +547,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.26.0
+        version: 2.26.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.26.0
+        version: 2.26.1
 - !ruby/object:Gem::Dependency
   name: msfrpc-client
   requirement: !ruby/object:Gem::Requirement