pwn 0.4.571 → 0.4.573

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 758c24e1c40fc065072d2513b798c6b0f33a8ee5bda1b9d510c7f09582a76a69
-  data.tar.gz: 1175f06f73d8dbf810cbbd169571e6f3c3366983b4c4ce78ec6f040d709c403c
+  metadata.gz: 3fe744f8009abe973548a7a25bb7dd3dfba3b2e2a8003ded871d00a709488dee
+  data.tar.gz: 6dfb03841d6f805b272c8c82cfddac8384ac6ea144eec1f0614c77a276860f00
 SHA512:
-  metadata.gz: 30eb94f010a1aeaa6d696bb8bbce40d350b934bd611d1235db62a4eff6eb379f8ece0af3bd3ca9452b5124a537e3fe2d7a107ac2d98a13933b31d7cbf37b36fa
-  data.tar.gz: 216fd24a9097f983f586549d848350e1e4e884ca534e20c768270d5f319902eb5024c201911658e9e2a42a38cc166a9123a200c4e9f90b403f830bdbbb1cd014
+  metadata.gz: 0b4b30e32dcc0510fb40691f612935dad4b640ab7b843db85cc3aed6d91fa3b91f6133b76df074fb4435c8979c8fe6a53b8939b722ce55e566cc062ef1b4c6fd
+  data.tar.gz: 3073d23d062871624d5f170f005c4aa9564382253f0ea9a35ab20fbf50df4f3c17a5f3b6854c19baf14a586f8a4438d9f26285b9bc5e741fa11d6d8c2ce21c3c

data/Gemfile

@@ -60,17 +60,17 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '5.0.0'
 gem 'rspec', '3.12.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.38.0'
+gem 'rubocop', '1.39.0'
 gem 'rubocop-rake', '0.6.0'
 gem 'rubocop-rspec', '2.15.0'
 gem 'ruby-audio', '1.6.1'
-gem 'ruby-nmap', '0.10.0'
+gem 'ruby-nmap', '1.0.0'
 gem 'ruby-saml', '1.14.0'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.13.1'
 gem 'selenium-devtools', '0.107.0'
 gem 'serialport', '1.3.2'
-gem 'sinatra', '3.0.2'
+gem 'sinatra', '3.0.3'
 gem 'slack-ruby-client', '2.0.0'
 gem 'socksify', '1.7.1'
 gem 'spreadsheet', '1.3.0'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.1.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.571]:001 >>> PWN.help
+pwn[v0.4.573]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.1.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.571]:001 >>> PWN.help
+pwn[v0.4.573]:001 >>> PWN.help
 ```
 
 

data/lib/pwn/plugins/burp_suite.rb

@@ -245,9 +245,13 @@ module PWN
         end
 
         report_url = Base64.strict_encode64(target_domain)
-        # Ready scanreport API call in burpbuddy to support iHTML & XML report generation
-        report_resp = rest_browser.get("http://#{burpbuddy_api}/scanreport/#{report_type.to_s.upcase}/#{report_url}")
-        # report_resp = rest_browser.get("http://#{burpbuddy_api}/scanreport/#{report_url}")
+        # Ready scanreport API call in burpbuddy to support HTML & XML report generation
+        # report_resp = rest_browser.get(
+        #   "http://#{burpbuddy_api}/scanreport/#{report_type.to_s.upcase}/#{report_url}"
+        # )
+        report_resp = rest_browser.get(
+          "http://#{burpbuddy_api}/scanreport/#{report_url}"
+        )
         File.open(output_path, 'w') do |f|
           f.puts(report_resp.body)
         end

data/lib/pwn/plugins/nmap_it.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
-require 'nmap'
+require 'nmap/command'
+require 'nmap/xml'
 
 module PWN
   module Plugins
@@ -12,7 +13,7 @@ module PWN
       # end
 
       public_class_method def self.port_scan
-        Nmap::Program.scan do |nmap|
+        Nmap::Command.sudo do |nmap|
           yield(nmap)
         end
       rescue StandardError => e
@@ -43,7 +44,7 @@ module PWN
       public_class_method def self.parse_xml_results(opts = {})
         xml_file = opts[:xml_file].to_s.scrub.strip.chomp if File.exist?(opts[:xml_file].to_s.scrub.strip.chomp)
 
-        Nmap::XML.new(xml_file) do |xml|
+        Nmap::XML.open(xml_file) do |xml|
           yield(xml)
         end
       rescue StandardError => e

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.571'
+  VERSION = '0.4.573'
 end

data/packer/provisioners/pwn.sh

@@ -22,6 +22,9 @@ case $os in
     echo "Installing fontconfig..."
     sudo port -N install fontconfig
 
+    echo "Installing cmatrix..."
+    sudo port -N install cmatrix
+
     echo 'Installing Postgres Libraries for pg gem...'
     sudo port -N install postgresql96-server
 
@@ -49,6 +52,10 @@ case $os in
       $screen_cmd "${apt} install -y fontconfig ${assess_update_errors}"
       grok_error
 
+      echo "Installing fontmatrix..."
+      $screen_cmd "${apt} install -y fontmatrix ${assess_update_errors}"
+      grok_error
+
       echo "Installing Postgres Libraries for pg gem..."
       $screen_cmd "${apt} install -y postgresql-server-dev-all ${assess_update_errors}"
       grok_error

data/packer/provisioners/ruby.sh

@@ -32,5 +32,4 @@ esac
 sudo /bin/bash --login -c "git clone https://github.com/0dayinc/pwn.git ${pwn_root}"
 
 ruby_version=`cat ${pwn_root}/.ruby-version`
-ruby_gemset=`cat ${pwn_root}/.ruby-gemset`
-sudo /bin/bash --login -c "source /etc/profile.d/rvm.sh && rvm install ruby-${ruby_version}"
+rvmsudo rvm install ruby-$ruby_version

data/packer/provisioners/rvm.sh

@@ -27,4 +27,5 @@ sudo /bin/bash --login -c "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-f
 sudo /bin/bash --login -c "echo -e \"trust\n5\ny\n\" | gpg2 --no-tty --command-fd 0 --edit-key ${key2}"
 
 # Multi-user install required due to the need to run MSFRPCD as root w/in metasploit gemset
-curl -sSL https://get.rvm.io | sudo bash -s latest
+curl -sSL https://get.rvm.io | sudo bash -s stable
+rvm reload

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.571
+  version: 0.4.573
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2022-11-04 00:00:00.000000000 Z
+date: 2022-11-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -688,14 +688,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.38.0
+        version: 1.39.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.38.0
+        version: 1.39.0
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -744,14 +744,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.10.0
+        version: 1.0.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.10.0
+        version: 1.0.0
 - !ruby/object:Gem::Dependency
   name: ruby-saml
   requirement: !ruby/object:Gem::Requirement
@@ -828,14 +828,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.0.2
+        version: 3.0.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 3.0.2
+        version: 3.0.3
 - !ruby/object:Gem::Dependency
   name: slack-ruby-client
   requirement: !ruby/object:Gem::Requirement