pwn 0.4.564 → 0.4.565

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 0e8727f452f14ea8c389c2a31ad2e1c38688fef705e3defd1760524d21b589d2
-  data.tar.gz: dfd1cdaf5f2023292349a4f2e9a1e651804dac1030c9be78af287037660384fb
+  metadata.gz: 7628c99b9233f9d0432a2aecb486056b9f54bbd47d418a56dd28673a76b7e5cb
+  data.tar.gz: d7317d4f68e4a2c954b663ea4e953866237a0a7c2a1a4ed1f449f553ef9d64c2
 SHA512:
-  metadata.gz: be114735fa769a158cb5fa342ba7ccb723cf92e104822bb0bdf3e961c760a09bc47aec81d62d8a14a097005e66d5fa974a5262c13b9a52db2238cfbb02e0e718
-  data.tar.gz: 3142bc917c1ca58441ef7d5bf0fc9e4c8d4c6475f71df921f6e17e38100fe37b4f6b3e66eba0458a3fb4043cb687e8db78e93b3cf4844948448d3bf1d14d03af
+  metadata.gz: ef9ec95c5312a57a08d85f84d726a0a4eaf6cb1a163fa7eb3d9b963ad4f4f7a677c39b302de4133fc344779ebcbdbdf5fd3847635a96581585feaf8e7664fb0b
+  data.tar.gz: 932abad9c6e2610b2fe2a990dfba0122316a5ff1b3c07ae137408fe4a47911cea81a19a97a9d1e9c71097ea936110789029043bed6abf8fd5b11cf50110b74b0

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.564]:001 >>> PWN.help
+pwn[v0.4.565]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.564]:001 >>> PWN.help
+pwn[v0.4.565]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_www_uri_buster

@@ -21,10 +21,6 @@ OptionParser.new do |options|
     opts[:wordlist] = w
   end
 
-  options.on('-rHEADERS', '--request-headers=HEADERS', '<Optional - HTTP Request Headers in JSON Format)>') do |h|
-    opts[:http_request_headers] = h
-  end
-
   options.on('-pPROXY', '--proxy=PROXY', '<Optional - Proxy SCHEME://ADDRESS:PORT>') do |p|
     opts[:proxy] = p
   end
@@ -33,6 +29,14 @@ OptionParser.new do |options|
     opts[:max_threads] = t
   end
 
+  options.on('-rHEADERS', '--request-headers=HEADERS', '<Optional - HTTP Request Headers in JSON Format)>') do |h|
+    opts[:http_request_headers] = h
+  end
+
+  options.on('-cCODES', '--only-report-response-codes=CODES', '<Optional - Comma-Delimited List of Response Codes to Only Include in Report)>') do |c|
+    opts[:http_response_codes] = c
+  end
+
   options.on('-dDIR', '--dir-path=DIR', '<Optional - Report Output Directory (Defaults to ".")>') do |w|
     opts[:wordlist] = w
   end
@@ -53,8 +57,8 @@ end
 
 def request_path(opts = {})
   target_url = opts[:target_url]
-  http_request_headers = opts[:http_request_headers]
   proxy = opts[:proxy]
+  http_request_headers = opts[:http_request_headers]
   wordlist_line = opts[:wordlist_line]
   http_method = opts[:http_method]
 
@@ -132,13 +136,15 @@ begin
   wordlist = opts[:wordlist]
   raise "ERROR: #{wordlist} Does Not Exist." unless File.exist?(wordlist)
 
-  http_request_headers = opts[:http_request_headers]
-
   proxy = opts[:proxy]
 
   max_threads = opts[:max_threads]
   max_threads ||= 100
 
+  http_request_headers = opts[:http_request_headers]
+  http_response_codes = opts[:http_response_codes]
+  http_response_codes = http_response_codes.delete("\s").split(',') if http_response_codes
+
   dir_path = opts[:dir_path]
   dir_path ||= '.'
 
@@ -169,14 +175,19 @@ begin
     http_methods.each do |http_method|
       rest_client_resp_hash = request_path(
         target_url: target_url,
-        http_request_headers: http_request_headers,
         proxy: proxy,
+        http_request_headers: http_request_headers,
         wordlist_line: wordlist_line,
         http_method: http_method
       )
 
       mutex.synchronize do
-        results_hash[:data].push(rest_client_resp_hash)
+        if http_response_codes.any?
+          ret_http_resp_code = rest_client_resp_hash[:http_resp_code]
+          results_hash[:data].push(rest_client_resp_hash) if http_response_codes.include?(ret_http_resp_code)
+        else
+          results_hash[:data].push(rest_client_resp_hash)
+        end
       end
     end
   end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.564'
+  VERSION = '0.4.565'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.564
+  version: 0.4.565
 platform: ruby
 authors:
 - 0day Inc.