pwn 0.4.899 → 0.4.900
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG_BETWEEN_TAGS.txt +168 -181
- data/README.md +2 -2
- data/lib/pwn/plugins/sock.rb +6 -1
- data/lib/pwn/version.rb +1 -1
- metadata +1 -1
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: ab94f09d0f8bbf236f327f3e9b46fde446be954ab5268a183403536675eb1b02
|
|
4
|
+
data.tar.gz: 5a1a387c87110edfc7ebe60e2af5ccc3595b71b4c01aaf09b5bc520c647e9f2e
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: eb9f44624d56e01f18a54818eb51838b7421650e2a4dd255d2fbc99494d331b4d63b7548ec32e83aabb99a28be2bceab8cbac698e4e72c8ba1cc907ed7f95ae8
|
|
7
|
+
data.tar.gz: 72cca93ee656580b82a6e0262182a7cbaaf337d5514f3f0fe4b237608a5b1111661b049b2edf1e3c305f9cb737458386d7f78181a7d5ba8726dd53f561b56bca
|
data/CHANGELOG_BETWEEN_TAGS.txt
CHANGED
|
@@ -1,181 +1,168 @@
|
|
|
1
|
-
|
|
2
|
-
|
|
3
|
-
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
|
|
100
|
-
|
|
101
|
-
|
|
102
|
-
|
|
103
|
-
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
139
|
-
|
|
140
|
-
|
|
141
|
-
|
|
142
|
-
|
|
143
|
-
|
|
144
|
-
|
|
145
|
-
|
|
146
|
-
|
|
147
|
-
|
|
148
|
-
|
|
149
|
-
|
|
150
|
-
|
|
151
|
-
|
|
152
|
-
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
|
|
156
|
-
|
|
157
|
-
|
|
158
|
-
|
|
159
|
-
|
|
160
|
-
|
|
161
|
-
|
|
162
|
-
|
|
163
|
-
|
|
164
|
-
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
eb8d222 Merge pull request #287 from ninp0/master
|
|
170
|
-
f6724a8 PWN::Plugins::DetectOS module - extend capabilities to detect *BSDs
|
|
171
|
-
dd8194a Merge pull request #286 from ninp0/master
|
|
172
|
-
da367d1 PWN::Plugins::PS module - replace sys-proctable gem requirement in pwn REPL driver to make compat w *nix and *bsd #rubocop_fix
|
|
173
|
-
8fecfe0 Merge pull request #285 from ninp0/master
|
|
174
|
-
f7932f8 PWN::Plugins::PS module - replace sys-proctable gem requirement in pwn REPL driver to make compat w *nix and *bsd
|
|
175
|
-
241096f Merge pull request #284 from ninp0/master
|
|
176
|
-
33a5322 PWN::Plugins::TransparentBrowser module - #bugfix in #close method
|
|
177
|
-
bc9bf5f Merge pull request #283 from ninp0/master
|
|
178
|
-
0ec4889 PWN::Plugins::TransparentBrowser module - refactor the return object for the #open method to be a hash containing the browser and tor_obj. Refactor pwn code to reflect this change.
|
|
179
|
-
727481b Merge pull request #282 from ninp0/master
|
|
180
|
-
810931a PWN::Plugins::TransparentBrowser module - use "tor" String as value to proxy parameter to trigger PWN::Plugins::Tor.start instead of using symbol
|
|
181
|
-
ca5ddef Merge pull request #281 from ninp0/master
|
|
1
|
+
b47ecb4 PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
2
|
+
fa1760e Merge pull request #428 from ninp0/master
|
|
3
|
+
2bd5d5e PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
4
|
+
7967c6f PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
5
|
+
14d80f3 Merge pull request #427 from ninp0/master
|
|
6
|
+
1c887ec PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
7
|
+
be15999 Merge pull request #426 from ninp0/master
|
|
8
|
+
b085855 PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
9
|
+
7652edd PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
10
|
+
f359109 PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
11
|
+
9c88be9 Merge pull request #425 from ninp0/master
|
|
12
|
+
2dfcf91 PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #try_again
|
|
13
|
+
f101f43 Merge pull request #424 from ninp0/master
|
|
14
|
+
946ed64 PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #bugfix
|
|
15
|
+
2e9c789 PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method #bugfix
|
|
16
|
+
d15459e PWN::Plugins::Sock module - use lowest supported proto version when attempting to connect to a socket via the #connect method
|
|
17
|
+
4279ce0 Merge pull request #423 from ninp0/master
|
|
18
|
+
67a340a pwn_graphql_introspection_detector Driver - rename to pwn_shodan_graphql_introspection to better reflect its purpose
|
|
19
|
+
be974d9 Merge pull request #422 from ninp0/master
|
|
20
|
+
aeac8e7 pwn_graphql_introspection_detector Driver - initial commit
|
|
21
|
+
ba6ec74 Merge pull request #421 from ninp0/master
|
|
22
|
+
7c5a237 PWN::Plugins::IPInfo module - prefer specific common key values from cert_obj for this module. If additonal functionality is required, defer to using PWN::Plugins::Sock.get_tls_cert directly
|
|
23
|
+
a65d92e pwn_www_checkip Driver - JSON.pretty_generate when returning IP information via -i flag
|
|
24
|
+
63894da PWN::Plugins::IPInfo module - remove redundant cert_txt key from ip_info_resp, preferring a return of cert object which can call #to_text, #subject, #issuer, etc.
|
|
25
|
+
0733e4b Merge pull request #420 from ninp0/master
|
|
26
|
+
70baa71 PWN::Plugins::IPInfo module - #bugfix in returned object from #get_tls_cert method
|
|
27
|
+
068f2d6 PWN::Plugins::IPInfo module - #bugfixes
|
|
28
|
+
b60a94c PWN::Plugins::IPInfo module - get TLS cert if possible in attempt to obtain valid domain from IP addresses cert info #bugfix when checking for open tls port
|
|
29
|
+
e055792 PWN::Plugins::Sock module - add #get_tls_cert method
|
|
30
|
+
0d9bb3f PWN::Plugins::IPInfo module - get TLS cert if possible in attempt to obtain valid domain from IP addresses cert info
|
|
31
|
+
7f150c6 Merge pull request #419 from ninp0/master
|
|
32
|
+
647e5f3 pwn_shodan_search Driver - isolate objects in results that are causing JSON::GeneratorError: source sequence is illegal/malformed utf-8 messages when serializing to JSON strings #dont_use_gets
|
|
33
|
+
9ad051c pwn_shodan_search Driver - isolate objects in results that are causing JSON::GeneratorError: source sequence is illegal/malformed utf-8 messages when serializing to JSON strings #serialization_issue
|
|
34
|
+
0d166ee pwn_shodan_search Driver - #bugfix in JSON::GeneratorError where invalid UTF-8 sequences prevent writing to JSON file #nope_gotta_revert_that
|
|
35
|
+
3f84e71 pwn_shodan_search Driver - #bugfix in JSON::GeneratorError where invalid UTF-8 sequences prevent writing to JSON file
|
|
36
|
+
7721af4 Merge pull request #418 from ninp0/master
|
|
37
|
+
02b8719 PWN::Plugins::Shodan module - need to return specific hash when JSON::ParserError is resccued (related to invalid UTF-8 sequences) #bugfix
|
|
38
|
+
34df5ea Merge pull request #417 from ninp0/master
|
|
39
|
+
ea99612 pwn_shodan_search Driver - add RAW.arr results file containing raw_results_arr object prior to attempting to cast the object as JSON #bugfix / #cast_to_string
|
|
40
|
+
6104b15 Merge pull request #416 from ninp0/master
|
|
41
|
+
09b0ad9 pwn_shodan_search Driver - add RAW.arr results file containing raw_results_arr object prior to attempting to cast the object as JSON
|
|
42
|
+
705da0a Merge pull request #415 from ninp0/master
|
|
43
|
+
e63cee6 pwn_shodan_search Driver - add RAW.arr results file containing raw_results_arr object prior to attempting to cast the object as JSON
|
|
44
|
+
2e45a04 pwn_shodan_search Driver - strip comments when loading query file #rubocop_fix
|
|
45
|
+
5f9598a Merge pull request #414 from ninp0/master
|
|
46
|
+
4dfa34f pwn_shodan_search Driver - strip comments when loading query file
|
|
47
|
+
217800b Merge pull request #413 from ninp0/master
|
|
48
|
+
a473732 PWN::WWW::HackerOne module - #rubocop_fix
|
|
49
|
+
5a9296e Merge pull request #412 from ninp0/master
|
|
50
|
+
35236cc PWN::Plugins::Shodan module - scrub response.body for malformed UTF-8 characters that would otherwise prevent saving JSON results to file within pwn_shodan_search driver #attemptN
|
|
51
|
+
cb17de9 Merge pull request #411 from ninp0/master
|
|
52
|
+
afea697 PWN::Plugins::Shodan module - scrub response.body for malformed UTF-8 characters that would otherwise prevent saving JSON results to file within pwn_shodan_search driver
|
|
53
|
+
bd7fd57 Merge pull request #410 from ninp0/master
|
|
54
|
+
ca87dec pwn_shodan_search Driver - rescue JSON::Generator error in rare cases #pretty_generate method cant save out results
|
|
55
|
+
6babce2 Merge pull request #409 from ninp0/master
|
|
56
|
+
9675c6d PWN::Plugins::BurpSuite module - add #uri_in_scope method to compare URI to URI regexes in / out of scope per burp suite target scope config JSON file, like those produced by H1 (returns boolean)
|
|
57
|
+
e20e0ee Merge pull request #408 from ninp0/master
|
|
58
|
+
12ba09b Merge branch 'master' of ssh://github.com/ninp0/pwn
|
|
59
|
+
f28066d PWN::WWW::TransparentBrowser module - add #find_element_by_text method #bugfix_again
|
|
60
|
+
cd8db7a Merge pull request #407 from ninp0/master
|
|
61
|
+
607e1de PWN::WWW::TransparentBrowser module - add #find_element_by_text method #bugfix
|
|
62
|
+
b191e1c Merge pull request #406 from ninp0/master
|
|
63
|
+
3a4d68a PWN::WWW::TransparentBrowser module - add #find_element_by_text method
|
|
64
|
+
e0e7ecc Merge pull request #405 from ninp0/master
|
|
65
|
+
adaebc5 PWN::WWW::HackerOne module - #slight_tweak to #save_burp_target_config_file method...replace random user_agent w/ fixed known supported user agent
|
|
66
|
+
bcc814f Merge pull request #404 from ninp0/master
|
|
67
|
+
9bd7c1b PWN::WWW::HackerOne module - #slight_tweak to #save_burp_target_config_file method...replace random user_agent w/ fixed known supported user agent
|
|
68
|
+
8dfff4d PWN::WWW::HackerOne module - #slight_tweak to #save_burp_target_config_file method
|
|
69
|
+
f2b0a55 Merge pull request #403 from ninp0/master
|
|
70
|
+
48f47ff PWN::Plugins::BurpSuite module && pwn_burp_suite_pro_active_scan Driver - implement target_config capability to consume Burp Suite Pro Target Scope config JSON file
|
|
71
|
+
e1b9345 PWN::WWW::HackerOne module - add #save_burp_project_file method
|
|
72
|
+
b33caa7 Merge pull request #402 from ninp0/master
|
|
73
|
+
7e7942f PWN::WWW::HackerOne module - add burp_project link to object returned from #get_bounty_programs method #bugfix
|
|
74
|
+
13d3615 PWN::WWW::HackerOne module - add burp_project link to object returned from #get_bounty_programs method #bugfix
|
|
75
|
+
049681e PWN::WWW::HackerOne module - add burp_project link to object returned from #get_bounty_programs method
|
|
76
|
+
2f1e787 PWN::WWW::HackerOne module - add policy, scope, hacktivity, thanks, updates, collaborator links to object returned from #get_bounty_programs method / #minor_bugfix / #rubocop_fixes
|
|
77
|
+
81bb4c3 Merge pull request #401 from ninp0/master
|
|
78
|
+
cb7e893 PWN::WWW::HackerOne module - implement min_payouts_enabled parameter for #get_bounty_programs method
|
|
79
|
+
22cff1b Merge pull request #400 from ninp0/master
|
|
80
|
+
fcafa7e PWN::WWW::HackerOne module - best approarch to snag links after DOM loads #bugfix
|
|
81
|
+
368a4df PWN::WWW::HackerOne module - best approarch to snag links after DOM loads #again
|
|
82
|
+
bea57c0 PWN::WWW::HackerOne module - replace brittle sleep with more resilient .div(class: full-width-inner-container).wait_until(&:present?) to snag links after DOM loads #again
|
|
83
|
+
1617603 PWN::WWW::HackerOne module - replace brittle sleep with more resilient .div(class: full-width-inner-container).wait_until(&:present?) to snag links after DOM loads
|
|
84
|
+
9386f03 Merge pull request #399 from ninp0/master
|
|
85
|
+
2058b3c PWN::WWW::HackerOne module - add method to return all bug bounty program links #bugfixes
|
|
86
|
+
152022c Merge pull request #398 from ninp0/master
|
|
87
|
+
67fe8a6 PWN::WWW::HackerOne module - add method to return all bug bounty program links #bugfixes
|
|
88
|
+
a18b5ae PWN::WWW::HackerOne module - add method to return all bug bounty program links #bugfixes
|
|
89
|
+
a688297 Merge pull request #397 from ninp0/master
|
|
90
|
+
cff4ad0 PWN::WWW::HackerOne module - add method to return all bug bounty program links #bugfixes
|
|
91
|
+
a3af8cf Merge pull request #396 from ninp0/master
|
|
92
|
+
055eccb PWN::WWW::HackerOne module - add method to return all bug bounty program links #bugfixes
|
|
93
|
+
33b3c82 Merge pull request #395 from ninp0/master
|
|
94
|
+
3c1837b PWN::WWW::HackerOne module - add method to return all bug bounty program links #bugfixes
|
|
95
|
+
208c8a4 Merge pull request #394 from ninp0/master
|
|
96
|
+
773ad2f PWN::WWW::HackerOne module - add method to return all bug bounty program links #rubocop_fixes
|
|
97
|
+
91252c7 Merge pull request #393 from ninp0/master
|
|
98
|
+
fb80ad0 PWN::WWW::HackerOne module - add method to return all bug bounty program links #rubocop_fixes
|
|
99
|
+
598aa2b Merge pull request #392 from ninp0/master
|
|
100
|
+
cabcb83 PWN::WWW::HackerOne module - add method to return all bug bounty program links
|
|
101
|
+
662e05f PWN::WWW::HackerOne module - add method to return all bug bounty program links
|
|
102
|
+
94cf6d0 Merge pull request #391 from ninp0/master
|
|
103
|
+
22a696e PWN::WWW::HackerOne module - add method to return all bug bounty program links
|
|
104
|
+
69884d7 Merge pull request #390 from ninp0/master
|
|
105
|
+
51cbfca PWN::Plugins::Shodan module - add #get_uris method to extract URI strings from search results returned from #search method #bugfixes
|
|
106
|
+
57c18ee Merge pull request #389 from ninp0/master
|
|
107
|
+
0161122 PWN::Plugins::Shodan module - add #get_uris method to extract URI strings from search results returned from #search method #bugfixes
|
|
108
|
+
1f63683 Merge pull request #388 from ninp0/master
|
|
109
|
+
d6e5e41 PWN::Plugins::Shodan module - add #get_uris method to extract URI strings from search results returned from #search method #bugfixes
|
|
110
|
+
635d7d2 PWN::Plugins::Shodan module - add #get_uris method to extract URI strings from search results returned from #search method #bugfixes #add_usage
|
|
111
|
+
2691a6f PWN::Plugins::Shodan module - add #get_uris method to extract URI strings from search results returned from #search method
|
|
112
|
+
b83eed4 Merge pull request #387 from ninp0/master
|
|
113
|
+
e0d6850 pwn_shodan_search Driver - change default output-results-file to reside in CWD instead of /tmp
|
|
114
|
+
f19a02f Merge pull request #386 from ninp0/master
|
|
115
|
+
04d3f97 pwn_shodan_search Driver - implement a --rate-limit flag to allow for customized rate limiting when API gets grumpy
|
|
116
|
+
cff4d3c Merge pull request #385 from ninp0/master
|
|
117
|
+
a949aa6 PWN::Plugins::ScannableCodes module - #bugfix in #help method
|
|
118
|
+
e4b5a19 Merge pull request #384 from ninp0/master
|
|
119
|
+
216bb34 PWN::Plugins::ScannableCodes module - initial commit
|
|
120
|
+
04bc64e PWN::Plugins::ScannableCodes module - initial commit
|
|
121
|
+
ae9ece4 Merge pull request #383 from ninp0/master
|
|
122
|
+
594808b pwn_www_uri_buster Driver - JSON.pretty_generate(response.headers) #bugfix, cast hash to pretty JSON string
|
|
123
|
+
810ee16 Merge pull request #382 from ninp0/master
|
|
124
|
+
0adff45 pwn_www_uri_buster Driver - incorporate randomized user-agent string in HTTP requests
|
|
125
|
+
b429bca Merge pull request #381 from ninp0/master
|
|
126
|
+
8afb64a PWN::Reports::SAST module - #bugfix in escaped newline
|
|
127
|
+
3ac73eb Merge pull request #380 from ninp0/master
|
|
128
|
+
54e8fe1 PWN::Reports::* - #bufix in "ajax" key where report_name is now dynamic
|
|
129
|
+
5fb8eb6 pwn_www_uri_buster Driver - #bugfix in retrieving random available ephemeral port via PWN::Plugins::Sock module in #get_random_unused_port method
|
|
130
|
+
6c0d1be Merge pull request #379 from ninp0/master
|
|
131
|
+
c3964c0 pwn_www_uri_buster Driver - include HTTP response headers in results && #bugfix
|
|
132
|
+
1edc9d7 Merge pull request #378 from ninp0/master
|
|
133
|
+
4cbd086 pwn_www_uri_buster Driver - include HTTP response headers in results && #bugfix when using tor as proxy
|
|
134
|
+
1d8a60d Merge pull request #377 from ninp0/master
|
|
135
|
+
4e0f5be pwn_www_uri_buster - implement tor support #more_bugfixes
|
|
136
|
+
cf1a932 Merge pull request #376 from ninp0/master
|
|
137
|
+
c845e1f pwn_www_uri_buster - implement tor support #bugfixes
|
|
138
|
+
0e88ef7 Merge pull request #375 from ninp0/master
|
|
139
|
+
e2e1de4 pwn_www_uri_buster - implement tor support
|
|
140
|
+
5f4c2e3 Merge pull request #374 from ninp0/master
|
|
141
|
+
720eec2 Custom report names for all reports in PWN::Reports namespace #bugfix
|
|
142
|
+
7a77a69 Merge pull request #373 from ninp0/master
|
|
143
|
+
61cc8a9 Custom report names for all reports in PWN::Reports namespace #bugfix
|
|
144
|
+
e45c36e Merge pull request #372 from ninp0/master
|
|
145
|
+
35b6623 Custom report names for all reports in PWN::Reports namespace
|
|
146
|
+
c169f48 Merge pull request #371 from ninp0/master
|
|
147
|
+
eb6de5e pwn_www_uri_buster Driver - add --append parameter to append pattern to end of entries in wordlist
|
|
148
|
+
8a05fca pwn_www_uri_buster Driver - add --append parameter to append pattern to end of entries in wordlist
|
|
149
|
+
5d04eab Merge pull request #370 from ninp0/master
|
|
150
|
+
491898e PWN::Plugins::DetectOS module - #rubocop_fixes
|
|
151
|
+
c752179 pwn_nmap_discover_tcp_udp Driver - implement --target-file flag (i.e. you can use either --target-file OR --target-range, not both and not neither) / slight discovery tweaks
|
|
152
|
+
a320df1 Merge pull request #369 from ninp0/master
|
|
153
|
+
9e16d30 pwn_bdba_scan && pwn_bdba_groups Drivers - change both drivers to support --parent-group-id flow (i.e. to avoid wrong group association when duplicate group names reside under different search-paths) #bugfix2_revert
|
|
154
|
+
0bc80c1 Merge pull request #368 from ninp0/master
|
|
155
|
+
1f92631 pwn_bdba_scan && pwn_bdba_groups Drivers - change both drivers to support --parent-group-id flow (i.e. to avoid wrong group association when duplicate group names reside under different search-paths) #bugfix
|
|
156
|
+
663f3d9 Merge pull request #367 from ninp0/master
|
|
157
|
+
50a4c48 pwn_bdba_scan && pwn_bdba_groups Drivers - change both drivers to support --parent-group-id flow (i.e. to avoid wrong group association when duplicate group names reside under different search-paths)
|
|
158
|
+
02432d4 Merge pull request #366 from ninp0/master
|
|
159
|
+
6afd3fc pwn_bdba_scan Driver - change --parent-group-name parameter to --parent-group-id to avoid wrong group association when duplicate group names reside under different search-paths
|
|
160
|
+
9517452 Merge pull request #365 from ninp0/master
|
|
161
|
+
0c326b8 pwn_bdba_scan Driver - incorporate optional --version parameter
|
|
162
|
+
e96cb62 Merge pull request #364 from ninp0/master
|
|
163
|
+
5324605 PWN::Plugins::BlackDuckBinaryAnalysis module && pwn_bdba_scans Driver - implement #abort_product_scan method && abort product scan results if they have been sitting in a queue status for more than 90 minutes.
|
|
164
|
+
f36af42 Merge pull request #363 from ninp0/master
|
|
165
|
+
f308dba git_commit_test_reinit_gem.sh - #more_tag_bugfixes
|
|
166
|
+
31e8c06 Merge pull request #362 from ninp0/master
|
|
167
|
+
38835e3 git_commit_test_reinit_gem.sh - Address off-by-one tagging #bugfix
|
|
168
|
+
2f31697 Merge pull request #361 from ninp0/master
|
data/README.md
CHANGED
|
@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
|
37
37
|
$ rvm list gemsets
|
|
38
38
|
$ gem install --verbose pwn
|
|
39
39
|
$ pwn
|
|
40
|
-
pwn[v0.4.
|
|
40
|
+
pwn[v0.4.900]:001 >>> PWN.help
|
|
41
41
|
```
|
|
42
42
|
|
|
43
43
|
[](https://youtu.be/G7iLUY4FzsI)
|
|
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
|
|
|
52
52
|
$ gem uninstall --all --executables pwn
|
|
53
53
|
$ gem install --verbose pwn
|
|
54
54
|
$ pwn
|
|
55
|
-
pwn[v0.4.
|
|
55
|
+
pwn[v0.4.900]:001 >>> PWN.help
|
|
56
56
|
```
|
|
57
57
|
|
|
58
58
|
|
data/lib/pwn/plugins/sock.rb
CHANGED
|
@@ -32,7 +32,8 @@ module PWN
|
|
|
32
32
|
tls_min_version = OpenSSL::SSL::TLS1_VERSION if tls_min_version.nil?
|
|
33
33
|
# tls_version Values can be Displayed via:
|
|
34
34
|
# OpenSSL::SSL::SSLContext::METHODS
|
|
35
|
-
tls_version = '
|
|
35
|
+
tls_version = 'TLSv1' if tls_version.nil?
|
|
36
|
+
cipher_tls = 'TLSv1.0' if cipher_tls.nil?
|
|
36
37
|
|
|
37
38
|
case protocol
|
|
38
39
|
when :tcp
|
|
@@ -43,6 +44,7 @@ module PWN
|
|
|
43
44
|
tls_context.verify_hostname = false
|
|
44
45
|
tls_context.ssl_version = tls_version
|
|
45
46
|
tls_context.min_version = tls_min_version
|
|
47
|
+
tls_context.ciphers = tls_context.ciphers.select { |c| c[1] == cipher_tls }
|
|
46
48
|
tls_sock = OpenSSL::SSL::SSLSocket.new(sock, tls_context)
|
|
47
49
|
sock_obj = tls_sock.connect
|
|
48
50
|
else
|
|
@@ -61,13 +63,16 @@ module PWN
|
|
|
61
63
|
when OpenSSL::SSL::TLS1_VERSION
|
|
62
64
|
puts 'Attempting OpenSSL::SSL::TLS1_1_VERSION...'
|
|
63
65
|
tls_version = 'TLSv1_1'
|
|
66
|
+
cipher_tls = 'TLSv1.0'
|
|
64
67
|
tls_min_version = OpenSSL::SSL::TLS1_1_VERSION
|
|
65
68
|
when OpenSSL::SSL::TLS1_1_VERSION
|
|
66
69
|
puts 'Attempting OpenSSL::SSL::TLS1_2_VERSION...'
|
|
67
70
|
tls_version = 'TLSv1_2'
|
|
71
|
+
cipher_tls = 'TLSv1.2'
|
|
68
72
|
tls_min_version = OpenSSL::SSL::TLS1_2_VERSION
|
|
69
73
|
when OpenSSL::SSL::TLS1_2_VERSION
|
|
70
74
|
puts 'Attempting OpenSSL::SSL::TLS1_3_VERSION...'
|
|
75
|
+
cipher_tls = 'TLSv1.3'
|
|
71
76
|
tls_min_version = OpenSSL::SSL::TLS1_3_VERSION
|
|
72
77
|
else
|
|
73
78
|
tls_min_version = :abort
|
data/lib/pwn/version.rb
CHANGED