pwn 0.4.466 → 0.4.467

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b22a31f1952951d9c3bd1a8dd912b58e1b6ccf39d93a55327b10e285729e67de
-  data.tar.gz: a15ab49fbf548031599248380aca04bb05e9220357d771d27de63d477af33038
+  metadata.gz: 6c3c8162a975f70b29fef9ca0c1e9e3089bc625345dfd2a3183c8925bacd96cf
+  data.tar.gz: 874976297d57b765cbe21b6c582f6a51c77bf1a1bd758376bfe33820eb6b5b0d
 SHA512:
-  metadata.gz: 360eab449207970607c8052dfd3ee9beae9026ed19c41f690f2874cdc932eb8981c341792d37316bc202a5feb2332cdf86686f39416dd001b0338d8b19dbad72
-  data.tar.gz: d85c5f1785095b00c058727366896774a47afcb107aa69d0115aa4d501b83daa71df4699983f51acafdc46fa91fc9bcba52bdd7cb770fade67ac5ba85e3ecf9d
+  metadata.gz: efaae24fa8eabb639a90c7ce675aedc5323fcf91ba2aebf24f2f84243c00b67422a92ee4aeafd7260d9ff4515069c187c01903ad3221e623dbf139874daa1831
+  data.tar.gz: e7905ef924e48fc92d589cd3dbe1bfcab64c89ef8585edc1f239423588b1a1ec20672171ec23ddeea2adacecff66cf00017a3fd7f2a09c1c5ca0dcc901c5bb12

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.466]:001 >>> PWN.help
+pwn[v0.4.467]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.466]:001 >>> PWN.help
+pwn[v0.4.467]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_serial_msr206

@@ -3,6 +3,7 @@
 
 require 'pwn'
 require 'optparse'
+require 'json'
 
 opts = {}
 OptionParser.new do |options|
@@ -81,7 +82,7 @@ begin
   # 4  |Track 3 Write not present|Track 3 Write present
   # 5  |Track 2 Write not present|Track 2 Write present
   # 6  |Track 1 Write not present|Track 1 Write present
-  # 7  |parity bit**             |parity bit** 
+  # 7  |parity bit**             |parity bit**
   exec_resp = PWN::Plugins::MSR206.exec(
     msr206_obj: msr206_obj,
     cmd: :configuration_request
@@ -120,14 +121,14 @@ begin
     when :R
       menu_msg = 'READY TO READ - PLEASE SWIPE CARD'
       # Read Card
-      PWN::Plugins::MSR206.wait_for_swipe(
+      track_data = PWN::Plugins::MSR206.wait_for_swipe(
         msr206_obj: msr206_obj,
         type: :arm_to_read
       )
     when :C
       menu_msg = 'READY TO COPY - PLEASE SWIPE ORIGINAL CARD'
       # Read Original Card
-      PWN::Plugins::MSR206.wait_for_swipe(
+      track_data = PWN::Plugins::MSR206.wait_for_swipe(
         msr206_obj: msr206_obj,
         type: :arm_to_read
       )
@@ -138,7 +139,7 @@ begin
     when :E
       menu_msg = 'READY TO EDIT - PLEASE SWIPE TARGET CARD'
       # Read Target Card
-      PWN::Plugins::MSR206.wait_for_swipe(
+      track_data = PWN::Plugins::MSR206.wait_for_swipe(
         msr206_obj: msr206_obj,
         type: :arm_to_read
       )
@@ -149,10 +150,21 @@ begin
     when :B
       menu_msg = 'READY TO BACKUP - PLEASE SWIPE CARD'
       # Read Card
-      PWN::Plugins::MSR206.wait_for_swipe(
+      track_data = PWN::Plugins::MSR206.wait_for_swipe(
         msr206_obj: msr206_obj,
         type: :arm_to_read
       )
+      file = ''
+      loop do
+        print 'Enter File Name to Save Backup: '
+        file = gets.scrub.chomp.strip
+        file_dir = File.dirname(file)
+        break if Dir.exist?(file_dir)
+
+        puts "\nDirectory #{file_dir} for #{file} does not exist."
+      end
+      File.write(file, "#{track_data.to_json}\n")
+      puts 'complete.'
     when :W
       exec_resp = PWN::Plugins::MSR206.exec(
         msr206_obj: msr206_obj,

data/lib/pwn/plugins/msr206.rb

@@ -319,7 +319,7 @@ module PWN
         binary_byte_arr = []
         if raw_byte_arr
           raw_byte_arr.first.split.each do |byte_str|
-            binary_byte_arr.push([byte_str].pack('H*').unpack('B*').first.reverse)
+            binary_byte_arr.push([byte_str].pack('H*').unpack1('B*').reverse)
           end
         end
 
@@ -555,6 +555,7 @@ module PWN
       # Supported Method Parameters::
       # PWN::Plugins::MSR206.wait_for_swipe(
       #   msr206_obj: 'required - msr206_obj returned from #connect method'
+      #   type: 'required - swipe type'
       # )
 
       public_class_method def self.wait_for_swipe(opts = {})
@@ -570,6 +571,8 @@ module PWN
 
         raise "ERROR Unsupported type in #wait_for_swipe - #{type}. Valid types:\n#{types_arr}" unless types_arr.include?(type)
 
+        track_data = {}
+
         exec_resp = exec(
           msr206_obj: msr206_obj,
           cmd: :red_off
@@ -613,6 +616,7 @@ module PWN
         )
         puts exec_resp[:decoded]
         puts exec_resp.inspect
+        track_data[:track1] = exec_resp
 
         # (1..3).each do |n|
         #   print ">> Track 1 (ALT DATA) ISO Track Format: #{n}\n"
@@ -631,6 +635,7 @@ module PWN
         )
         puts exec_resp[:decoded]
         puts exec_resp.inspect
+        track_data[:track2] = exec_resp
 
         # (1..3).each do |n|
         #   print ">> Track 2 (ALT DATA) ISO Track Format: #{n}\n"
@@ -649,6 +654,7 @@ module PWN
         )
         puts exec_resp[:decoded]
         puts exec_resp.inspect
+        track_data[:track3] = exec_resp
 
         # (1..3).each do |n|
         #   print ">> Track 3 (ALT DATA) ISO Track Format: #{n}\n"
@@ -659,7 +665,7 @@ module PWN
         #   )
         #   puts exec_resp.inspect
         # end
-
+        track_data
       rescue StandardError => e
         raise e
       ensure

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.466'
+  VERSION = '0.4.467'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.466
+  version: 0.4.467
 platform: ruby
 authors:
 - 0day Inc.
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-06-01 00:00:00.000000000 Z
+date: 2022-06-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -1972,7 +1972,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.14
+rubygems_version: 3.3.15
 signing_key: 
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond