pwn 0.4.804 → 0.4.805

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '09721e5fe360b1b68f75194406792bf3ce99d8b0d907dbf3ec21e853f34792ba'
-  data.tar.gz: 32438ee4f0cfff658da7657c420602d0c4261909dc0d6cb28055ace5fae28252
+  metadata.gz: df24a7741ae10182398e97d2c9246f610c2a34b0fc49937302639e3b7841f2be
+  data.tar.gz: 046ff60cd9d8ac8e71e463104a8c26399d1fb7efacae051bd57ff61a6e063b57
 SHA512:
-  metadata.gz: 83c3dcbfce05ac2fcae70a94a88a4431f5191920f6ccc3f1412440609ca6b9a1b04b78107cd24541188e3e2eb80a13ca452b410f838dca8684535d46aa89e8ac
-  data.tar.gz: ff0b6e00e2b210d0249eedbcdd55e99bdd91b641dd0a611807e46342b6f91c709257d1b9dbd11e51b6d7bc690f21c3dcd86d29360fd44102093b6a8705a904f1
+  metadata.gz: 2450129fc4ade765a470e1493c707b21b518f546db44989b633377f0e3f114047a1b964a6bdcd27805c0d54c754ebfb8e0018b70289604ed27cb4cd0c967ba2b
+  data.tar.gz: a94197fa28bee16dafe03e13695f00c12e62ca7ef48e5718dbab1ff3a0da9d626f426532032da368f9a46d34e59a7dc8669bb165a36b845a07317880ddfe4da3

data/Gemfile

@@ -18,14 +18,14 @@ gem 'aws-sdk', '3.1.0'
 # gem 'bettercap', '1.6.2'
 gem 'brakeman', '6.0.1'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.4.17'
+gem 'bundler', '>=2.4.18'
 gem 'bundler-audit', '0.9.1'
 gem 'bunny', '2.22.0'
 gem 'colorize', '1.1.0'
 gem 'credit_card_validations', '6.0.0'
 gem 'eventmachine', '1.2.7'
 gem 'executable-hooks', '1.6.1'
-gem 'faye-websocket', '0.11.2'
+gem 'faye-websocket', '0.11.3'
 gem 'ffi', '1.15.5'
 gem 'fftw3', '0.3'
 gem 'gdb', '1.0.0'
@@ -67,9 +67,9 @@ gem 'rex', '2.0.13'
 gem 'rmagick', '5.3.0'
 gem 'rspec', '3.12.0'
 gem 'rtesseract', '3.1.2'
-gem 'rubocop', '1.55.0'
+gem 'rubocop', '1.55.1'
 gem 'rubocop-rake', '0.6.0'
-gem 'rubocop-rspec', '2.22.0'
+gem 'rubocop-rspec', '2.23.0'
 gem 'ruby-audio', '1.6.1'
 gem 'ruby-nmap', '1.0.1'
 gem 'ruby-saml', '1.15.0'
@@ -85,7 +85,7 @@ gem 'sqlite3', '1.6.3'
 gem 'thin', '1.8.2'
 gem 'tty-prompt', '0.23.1'
 gem 'tty-spinner', '0.9.3'
-gem 'watir', '7.2.2'
+gem 'watir', '7.3.0'
 gem 'waveform', '0.1.3'
 gem 'webrick', '1.8.1'
 gem 'whois', '5.1.0'

data/README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.804]:001 >>> PWN.help
+pwn[v0.4.805]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.804]:001 >>> PWN.help
+pwn[v0.4.805]:001 >>> PWN.help
 ```
 
 

data/bin/pwn_bdba_groups

@@ -15,7 +15,7 @@ OptionParser.new do |options|
     opts[:config] = c
   end
 
-  options.on('-CGROUP', '--create=GROUP', '<Required - Group/Sub-Group to Create>') do |g|
+  options.on('-CGROUP', '--create=GROUP', '<Optional - Group/Sub-Group to Create>') do |g|
     opts[:group_name] = g
   end
 
@@ -60,14 +60,29 @@ begin
     list_or_parent = parent_group_name unless parent_group_name.nil?
 
     group_arr = groups_resp[:groups].select { |g| g[:name] == list_or_parent }
-    group_arr_sorted = group_arr.sort_by { |g| g[:id] }
-    group = group_arr_sorted.last
 
-    if list_group_name && group.nil?
+    if list_group_name && group_arr.empty?
       puts 'BDBA Group Not Found.'
       exit 1
     end
 
+    group_arr_sorted = group_arr.sort_by { |g| g[:id] }
+    if group_arr_sorted.length > 1
+      dup_groups_arr = []
+      group_arr_sorted.each do |group|
+        this_group_id = group[:id]
+        this_group_details = PWN::Plugins::BlackDuckBinaryAnalysis.get_group_details(
+          token: token,
+          group_id: this_group_id
+        )
+        dup_groups_arr.push(this_group_details[:group])
+      end
+
+      puts "ERROR: Multiple BDBA Groups Found:\n#{dup_groups_arr}"
+      exit 1
+    end
+
+    group = group_arr_sorted.last
     parent_id = group[:id]
 
     if list_group_name
@@ -84,11 +99,13 @@ begin
   group_name = opts[:group_name]
   raise "ERROR: BDBA Group Name Not Provided: #{group_name}" if group_name.nil?
 
-  PWN::Plugins::BlackDuckBinaryAnalysis.create_group(
+  create_group_resp = PWN::Plugins::BlackDuckBinaryAnalysis.create_group(
     token: token,
     name: group_name,
     parent_id: parent_id
   )
+
+  puts create_group_resp.to_json
 rescue SystemExit, Interrupt
   puts "\nGoodbye."
 rescue StandardError => e

data/bin/pwn_bdba_scan

@@ -16,8 +16,8 @@ OptionParser.new do |options|
     opts[:config] = g
   end
 
-  options.on('-pNAME', '--parent-group=NAME', '<Required - Black Duck Binary Analysis Parent Group Name to Associate with Binary Scan>') do |p|
-    opts[:parent_group_name] = p
+  options.on('-pID', '--parent-group-id=ID', '<Required - Black Duck Binary Analysis Parent Group ID to Associate with Binary Scan>') do |p|
+    opts[:parent_group_id] = p
   end
 
   options.on('-sFILE', '--scan=FILE', '<Required - File to Scan in Black Duck Binary Analysis>') do |f|
@@ -58,8 +58,8 @@ begin
   token = yaml_config[:token]
   raise "ERROR: BDBA Token Not Found: #{token}" if token.nil?
 
-  parent_group_name = opts[:parent_group_name]
-  raise "ERROR: BDBA Parent Group Name Not Provided: #{parent_group_name}" if parent_group_name.nil?
+  parent_group_id = opts[:parent_group_id]
+  raise "ERROR: BDBA Parent Group ID Not Provided: #{parent_group_id}" if parent_group_id.nil?
 
   target_file = opts[:target_file]
   raise "ERROR: BDBA Target File Not Found: #{target_file}" unless File.exist?(target_file)
@@ -74,22 +74,12 @@ begin
 
   version = opts[:version]
 
-  groups_resp = PWN::Plugins::BlackDuckBinaryAnalysis.get_groups(
-    token: token
-  )
-
-  parent_arr = groups_resp[:groups].select { |g| g[:name] == parent_group_name }
-  raise "ERROR: BDBA Parent Group Not Found: #{parent_group_name}" if parent_arr.nil?
-
-  sorted_parent_arr = parent_arr.sort_by { |g| g[:id] }
-  parent_id = sorted_parent_arr.last[:id]
-
   unless report_only
     puts "Uploading/Scanning: #{target_file}"
     PWN::Plugins::BlackDuckBinaryAnalysis.upload_file(
       token: token,
       file: target_file,
-      group_id: parent_id,
+      group_id: parent_group_id,
       version: version
     )
   end
@@ -99,7 +89,7 @@ begin
   loop do
     scan_progress_resp = PWN::Plugins::BlackDuckBinaryAnalysis.get_apps_by_group(
       token: token,
-      group_id: parent_id
+      group_id: parent_group_id
     )
 
     break if scan_progress_resp[:products].none? { |p| p[:status] == 'B' } || report_only

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.804'
+  VERSION = '0.4.805'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.4.804
+  version: 0.4.805
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-07-25 00:00:00.000000000 Z
+date: 2023-08-06 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.4.17
+        version: 2.4.18
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 2.4.17
+        version: 2.4.18
 - !ruby/object:Gem::Dependency
   name: bundler-audit
   requirement: !ruby/object:Gem::Requirement
@@ -198,14 +198,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.11.2
+        version: 0.11.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.11.2
+        version: 0.11.3
 - !ruby/object:Gem::Dependency
   name: ffi
   requirement: !ruby/object:Gem::Requirement
@@ -786,14 +786,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.55.0
+        version: 1.55.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 1.55.0
+        version: 1.55.1
 - !ruby/object:Gem::Dependency
   name: rubocop-rake
   requirement: !ruby/object:Gem::Requirement
@@ -814,14 +814,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.22.0
+        version: 2.23.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 2.22.0
+        version: 2.23.0
 - !ruby/object:Gem::Dependency
   name: ruby-audio
   requirement: !ruby/object:Gem::Requirement
@@ -1038,14 +1038,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.2
+        version: 7.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.2.2
+        version: 7.3.0
 - !ruby/object:Gem::Dependency
   name: waveform
   requirement: !ruby/object:Gem::Requirement
@@ -2149,7 +2149,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.17
+rubygems_version: 3.4.18
 signing_key:
 specification_version: 4
 summary: Automated Security Testing for CI/CD Pipelines & Beyond