pwn 0.4.470 → 0.4.471

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3ad8e01c4030cf4c3f607f364a80ace5949dac4b7062bcda6db3f11ba6d513cb
-  data.tar.gz: 205350cec3feb50fda19fc04722a557ad13265b292ad7452eecb57302c723937
+  metadata.gz: 32922a349d82bb446e9fad95fb55df251fa80c58d9b72cbe6fafb50fb0e92a0c
+  data.tar.gz: d95bc2403937f02a5579744f8c85850c354f522e264300fed35a772360266477
 SHA512:
-  metadata.gz: 4af78e112eb864b091a9031f59a5aa65136983eeb89ca2e9da27b44012ca75f49ec428440e7757886fdae13d8c589d4f211903e0ebeddd1fbc036aaf1c34ba6c
-  data.tar.gz: f14b392ac1d3bd5eea6824bb6da94b5888b4fae3b0d60d1206feeb4d7b49a5dba68106b3d846da42e620209de36e6361f088ab7f75e44cef74983edefbed815d
+  metadata.gz: 634a521d25395485a6f6318ad5754f5e7a8bd9c20bffe680bcbf0bea1fb6b01836cda1f01d658666e824073292d3c30e331754f88f9cde7bd0544cdcb7554b5a
+  data.tar.gz: 00ca0f938d5ce07390a7e3b92a4fb7c4be156a6e299997414b33ab5ad743be80b65dce1e38882d1d88a59e62c3ac3b2f69514afe737af824ce23869f031f213b

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.470]:001 >>> PWN.help
+pwn[v0.4.471]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.470]:001 >>> PWN.help
+pwn[v0.4.471]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_shodan_search

@@ -0,0 +1,76 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: false
+
+require 'pwn'
+require 'optparse'
+require 'yaml'
+require 'json'
+
+opts = {}
+OptionParser.new do |options|
+  options.banner = "USAGE:
+    #{$PROGRAM_NAME} [opts]
+  "
+
+  options.on('-c', '--config-yaml', '<Required - YAML config containing api_key from Shodan.io>') do |y|
+    opts[:yaml] = y
+  end
+
+  options.on('-qFILE', '--query-file=FILE', '<Required - File containing one Shodan.io query string per line>') do |q|
+    opts[:query_file] = q
+  end
+
+  options.on('-oFILE', '--output-results-file=FILE', '<Optional - Defaults to /tmp/shodan-results-Time.now.strftime("%y-%m-%d.%H:%M:%S").txt>') do |o|
+    opts[:output_results_file] = o
+  end
+end.parse!
+
+if opts.empty?
+  puts `#{$PROGRAM_NAME} --help`
+  exit 1
+end
+
+begin
+  yaml_file = opts[:yaml]
+  raise "ERROR: #{yaml_file} does not exist." unless File.exist?(yaml_file)
+
+  yaml = YAML.load_file(yaml_file, symbolize_names: true)
+
+  api_key = yaml[:api_key]
+
+  query_file = opts[:query_file]
+  raise "ERROR: #{query_file} does not exist." unless File.exist?(query_file)
+
+  queries = File.readlines(query_file)
+
+  timestamp = Time.now.strftime('%Y-%m-%d.%H:%M:%S')
+  query_results_file = opts[:output_results_file]
+  query_results_file ||= "/tmp/shodan-results-#{timestamp}.txt"
+
+  raw_query_results_file = "/tmp/shodan-results-#{timestamp}-RAW.json"
+  File.open(raw_query_results_file, 'w') do |r|
+    File.open(query_results_file, 'w') do |f|
+      queries.each do |query_line|
+        query = query_line.chomp
+        print "QUERY: '#{query}'"
+        r.puts("QUERY: '#{query}'")
+        f.puts("QUERY: '#{query}'")
+        search_results = PWN::Plugins::Shodan.search(
+          api_key: api_key,
+          query: query
+        )
+        puts " >>> Matches: #{search_results[:total]}"
+        r.puts search_results.to_json
+
+        search_results[:matches].select do |m|
+          f.puts "ORG: #{m[:org]} | PUBIP: #{m[:ip_str]} #{'*' * 36}"
+          f.puts "Product: #{m[:product]}"
+          f.puts "TCP Port: #{m[:port]}"
+          f.puts "Data: #{m[:data]}\n\n\n"
+        end
+      end
+    end
+  end
+rescue SystemExit, Interrupt
+  puts "\nGoodbye."
+end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.470'
+  VERSION = '0.4.471'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.470
+  version: 0.4.471
 platform: ruby
 authors:
 - 0day Inc.
@@ -1018,6 +1018,7 @@ executables:
 - pwn_serial_check_voicemail
 - pwn_serial_msr206
 - pwn_serial_qualcomm_commands
+- pwn_shodan_search
 - pwn_simple_http_server
 - pwn_web_cache_deception
 - pwn_www_checkip
@@ -1078,6 +1079,7 @@ files:
 - bin/pwn_serial_check_voicemail
 - bin/pwn_serial_msr206
 - bin/pwn_serial_qualcomm_commands
+- bin/pwn_shodan_search
 - bin/pwn_simple_http_server
 - bin/pwn_web_cache_deception
 - bin/pwn_www_checkip