pwn 0.5.152 → 0.5.153

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 21607e314af9fff26fdac0bb90c4bbeeb5cf704eab2d9ee7d23eb9f012bfc678
-  data.tar.gz: 66bce5604f136fca916597f20818a7d891e5ccf03089b04a3b66d49b216d907d
+  metadata.gz: 19b5a2c08a7c1a2e6f2d425d684f38dd56d4c8900cd58ed834168b7070d12c09
+  data.tar.gz: 47eb458cac4381bfdcf5c2d97172d467d50c5485a0543666d5aeada43a82662a
 SHA512:
-  metadata.gz: c3d99c0ff3a72e858ae99d821ba3c50874cdeca31632cfc8505220b97390e42404b663a999f3d9575e99394e8c8c6babb2dc4e69540522cab4678f58037c657d
-  data.tar.gz: f0ba150c13822bfe93df917e27b714f17fd84d0d1baf50864ac5c29e47ed12e2697f7ba291185d3fa4ae171e075245f744e1145ea486830a0067c1a00af90878
+  metadata.gz: 37fa4e3f1343a65818901039df701eb05037584111d797fcdfe076d0459a389b2703440f99f326a9a05be9633577423274d6f6931ee932dc4041396710be5bac
+  data.tar.gz: 3192b67dbebe9a383575a1877ad0241a4c2d6c7bb0681df65cf97cfc04889bfc6d04278790446bb0f0b81258f9f26a10f6a2f5bffae2ad9cb0fb0cf98966e187

data/Gemfile

@@ -11,7 +11,7 @@ gemspec
 # In some circumstances custom flags are passed to gems in order
 # to build appropriately.  Defer to ./reinstall_pwn_gemset.sh
 # to review these custom flags (e.g. pg, serialport, etc).
-gem 'activesupport', '7.1.3.3'
+gem 'activesupport', '7.1.3.4'
 gem 'anemone', '0.7.2'
 gem 'authy', '3.0.1'
 gem 'aws-sdk', '3.2.0'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.152]:001 >>> PWN.help
+pwn[v0.5.153]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.1@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.152]:001 >>> PWN.help
+pwn[v0.5.153]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.1@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.152]:001 >>> PWN.help
+pwn[v0.5.153]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/ip_info.rb

@@ -72,7 +72,7 @@ module PWN
         end
 
         ip_resp_hash = ip_info_rest_call(ip: target, proxy: proxy) unless skip_api
-        ip_resp_hash[:target] = target
+        ip_resp_hash[:ip] = target
         ip_info_resp.push(ip_resp_hash) unless target.nil?
 
         if proxy.nil? && is_ip
@@ -129,7 +129,7 @@ module PWN
       #   parent_domain: 'required - Parent Domain to brute force',
       #   dictionary: 'required - Dictionary to use for subdomain brute force',
       #   max_threads: 'optional - Maximum number of threads to use (default: 10)',
-      #   proxy: 'optional - use a proxy'
+      #   proxy: 'optional - use a proxy',
       #   tls_port: 'optional port to check cert for Domain Name (default: 443). Will not execute if proxy parameter is set.',
       #   results_file: 'optional - File to write results to (default: /tmp/parent_domain-timestamp-pwn_bruteforce_subdomains.txt)'
       # )
@@ -142,7 +142,7 @@ module PWN
         raise "ERROR: Dictionary file not found: #{dictionary}" unless File.exist?(dictionary)
 
         max_threads = opts[:max_threads].to_i
-        max_threads = 10 unless max_threads.positive?
+        max_threads = 8 unless max_threads.positive?
 
         proxy = opts[:proxy]
         tls_port = opts[:tls_port]
@@ -151,12 +151,9 @@ module PWN
 
         # Break up dictonary file into sublines and process each subline in a thread
         dict_lines = File.readlines(dictionary).shuffle
-        lines_per_thread = (dict_lines.size / max_threads.to_f).ceil
-        dict_slice = dict_lines.each_slice(lines_per_thread).to_a
-
         mutex = Mutex.new
         PWN::Plugins::ThreadPool.fill(
-          enumerable_array: dict_slice,
+          enumerable_array: dict_lines,
           max_threads: max_threads
         ) do |subline|
           subdomain = subline.to_s.scrub.strip.chomp
@@ -169,8 +166,8 @@ module PWN
             tls_port: tls_port,
             skip_api: true
           )
-          puts "TARGET: #{target} RESP: #{ip_info_resp}" if ip_info_resp.empty?
-          puts "TARGET: #{target} RESP:\n#{ip_info_resp}" if ip_info_resp.any?
+          puts "SUBD: #{target} RESP: #{ip_info_resp}" if ip_info_resp.empty?
+          puts "SUBD: #{target} RESP:\n#{ip_info_resp}" if ip_info_resp.any?
 
           mutex.synchronize do
             File.open(results_file, 'a') do |file|
@@ -197,7 +194,17 @@ module PWN
           ip_info_struc = #{self}.get(
             target: 'required - IP or Host to lookup',
             proxy: 'optional - use a proxy',
-            tls_port: 'optional port to check cert for Domain Name (default: 443). Will not execute if proxy parameter is set.'
+            tls_port: 'optional port to check cert for Domain Name (default: 443). Will not execute if proxy parameter is set.',
+            skip_api: 'optional - skip the API call'
+          )
+
+          #{self}.bruteforce_subdomains(
+            parent_domain: 'required - Parent Domain to brute force',
+            dictionary: 'required - Dictionary to use for subdomain brute force',
+            max_threads: 'optional - Maximum number of threads to use (default: 10)',
+            proxy: 'optional - use a proxy',
+            tls_port: 'optional port to check cert for Domain Name (default: 443). Will not execute if proxy parameter is set.',
+            results_file: 'optional - File to write results to (default: /tmp/parent_domain-timestamp-pwn_bruteforce_subdomains.txt)'
           )
 
           #{self}.authors

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.152'
+  VERSION = '0.5.153'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.152
+  version: 0.5.153
 platform: ruby
 authors:
 - 0day Inc.
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.3.3
+        version: 7.1.3.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 7.1.3.3
+        version: 7.1.3.4
 - !ruby/object:Gem::Dependency
   name: anemone
   requirement: !ruby/object:Gem::Requirement