pwn 0.5.9 → 0.5.11

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 514c34c4e42b1393f41213d9544cd57d2e973e53e8c9b6ce842eddfe117c8a7c
-  data.tar.gz: 49c6dc53fa59441e0dd1e05862f64a978cf088bcbbc650fcab16246dcd07403e
+  metadata.gz: 1166d531105fe91c4800c93a9cad918750415df08064e18fa28ce175a6daa3f7
+  data.tar.gz: 584b2f2d74a81905d2831b6ac7dffdf05152690a04b016147955c90a11f75cbb
 SHA512:
-  metadata.gz: 87945569e7a360e42db017fbe9bffd90601a85a4c02ee96cfe7c5a1d6a14c9875a1e1d3281992fc914bb3c0d2d6d9ede10435851917a9ee350f8b8ab01031446
-  data.tar.gz: 0e42da74c1d30448b6dea2c2b8f099428af726abb7744f7517a869bfe828d8c48c967c9fb30ffde8e69f86b4823bdf7eb43da030eb73ffbd0fd72c04ef2c6b7c
+  metadata.gz: 92c96fac207368f754e37086233bee4ca5ba186eb6b8a911fb820818e617226d6c44a0e051aedb67fa6e45727c2217e32246093ada982da491199bccc54f48fd
+  data.tar.gz: d47c8a7afef9bd92dcdc5b970136f1ef74d1fb2b465ce7b242daae9b17193ec1667b07b88a5a8e737bf13c0add6961690125babcf5707fa485af6f669c93f2e8

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.9]:001 >>> PWN.help
+pwn[v0.5.11]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.0@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.9]:001 >>> PWN.help
+pwn[v0.5.11]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.0@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.9]:001 >>> PWN.help
+pwn[v0.5.11]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn_phone

@@ -54,7 +54,7 @@ OptionParser.new do |options|
     opts[:speech_to_text] = x
   end
 
-  options.on('-xRULES', '--source-num-rules=RULES', '<Optional - Comma-delimited list of rules for src_num format (i.e. XXXXXXXXXX, self, same_country, same_area, and/or same_prefix [Defaults to random src_num w/ same length as target_num])>') do |x|
+  options.on('-xRULES', '--source-num-rules=RULES', '<Optional - Comma-delimited list of rules for src_num format (i.e. XXXXXXXXXX, static, self, same_country, same_area, and/or same_prefix [Defaults to random src_num w/ same length as target_num])>') do |x|
     opts[:src_num_rules] = x
   end
 

data/lib/pwn/plugins/baresip.rb

@@ -277,6 +277,8 @@ module PWN
           )
         end
 
+        return 'static' if src_num_rules_arr.include?(:static)
+
         case target_num.to_s.length
         when 10
           # area+prefix+suffix
@@ -452,7 +454,9 @@ module PWN
         puts cmd_resp.xpath('//pre').text
 
         puts red
+        # TODO: This is a brittle mess. Refactor.
         # Conditions to hangup when less than seconds_to_record
+        forbidden = '403 Caller Origination Number is Invalid'
         terminated = 'terminated (duration:'
         unavail = '503 Service Unavailable'
         not_found = 'session closed: 404 Not Found'
@@ -469,6 +473,11 @@ module PWN
             line.include?('ua: using best effort AF: af=AF_INET')
           end
 
+          if dump_session_data.select { |s| s.include?(forbidden) }.length.positive?
+            reason = 'SIP 403 (forbidden)'
+            break
+          end
+
           if dump_session_data.select { |s| s.include?(terminated) }.length.positive?
             reason = 'call terminated by other party'
             break

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.9'
+  VERSION = '0.5.11'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.9
+  version: 0.5.11
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-02-11 00:00:00.000000000 Z
+date: 2024-02-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport