pwn 0.5.170 → 0.5.171

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ec94369fbeadf39f3526f3e5416570bd17fd654dd063b6f2a768c12db3f9e11d
-  data.tar.gz: 32f5580b118c1b9a091f1b601c1b6bc14c7780e277659a5dd71d46fe9981bf47
+  metadata.gz: a0ba45977e6b882046ff2e106aac51f68b2a3b02ca5a7b1f456ca4dba60c700f
+  data.tar.gz: d2403e95658aa3a25042090535b37078a8d73e9d856c58328b57607627009c53
 SHA512:
-  metadata.gz: 110864b6f5fb845e160a7d9e0bc9895581f27e114862cd07318b1801227969dd895a0bbacb9cfb814e1cdc8137fe7167bbde74a3486ac6ebbebfdcfda8dfb49f
-  data.tar.gz: d2932152fa9fc13bf13466103fdc42d006a7e0745df2df0d9ce3b7e99944028afe19252e5f40903ac845876da00451da5e577ee9abd23c86c32e99a35477b3ae
+  metadata.gz: 1f431eeb61b4fa7e462b800c8a540ecf7aeec0b1174773953d0125477d7fe402da5f4a4ec0166f338fe0678ed04e6e0d12351522c5b8fe31fb4a7ecbf49018cd
+  data.tar.gz: ce1bff0fae0ad0aa18d2a3f4a5df1d085c248301a5a1fb661818197f175dc42575f87fef6c4dead341c94039002d0f4ec71fac9021c4198c81bc610b4c828e3a

data/.rubocop_todo.yml

@@ -1,6 +1,6 @@
 # This configuration was generated by
 # `rubocop --auto-gen-config`
-# on 2024-05-31 18:04:59 UTC using RuboCop version 1.64.0.
+# on 2024-06-17 17:41:04 UTC using RuboCop version 1.64.1.
 # The point is for the user to remove these configuration records
 # one by one as the offenses are removed from the code base.
 # Note that changes in the inspected code, or installation of new
@@ -41,7 +41,7 @@ Lint/NestedMethodDefinition:
   Exclude:
     - 'lib/pwn/plugins/repl.rb'
 
-# Offense count: 306
+# Offense count: 307
 # This cop supports unsafe autocorrection (--autocorrect-all).
 # Configuration parameters: AutoCorrect.
 Lint/UselessAssignment:
@@ -140,6 +140,12 @@ Style/MapIntoArray:
     - 'lib/pwn/plugins/credit_card.rb'
     - 'lib/pwn/plugins/nexpose_vuln_scan.rb'
 
+# Offense count: 1
+# This cop supports safe autocorrection (--autocorrect).
+Style/RedundantBegin:
+  Exclude:
+    - 'lib/pwn/plugins/transparent_browser.rb'
+
 # Offense count: 94
 # This cop supports safe autocorrection (--autocorrect).
 Style/RedundantCondition:
@@ -156,7 +162,7 @@ Style/RedundantStringEscape:
     - 'lib/pwn/sast/redos.rb'
     - 'vagrant/provisioners/kali_customize.rb'
 
-# Offense count: 54
+# Offense count: 55
 # This cop supports unsafe autocorrection (--autocorrect-all).
 Style/SlicingWithRange:
   Enabled: false

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.170]:001 >>> PWN.help
+pwn[v0.5.171]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.3@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.170]:001 >>> PWN.help
+pwn[v0.5.171]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.3@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.170]:001 >>> PWN.help
+pwn[v0.5.171]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -1,13 +1,13 @@
 # frozen_string_literal: true
 
-require 'watir'
+require 'em/pure_ruby'
+require 'faye/websocket'
+require 'rest-client'
 require 'selenium/webdriver'
 require 'selenium/devtools'
-require 'rest-client'
 require 'socksify'
 require 'openssl'
-require 'em/pure_ruby'
-require 'faye/websocket'
+require 'watir'
 
 module PWN
   module Plugins
@@ -261,6 +261,8 @@ module PWN
           return nil
         end
 
+        browser_obj[:devtools] = browser_obj[:browser].driver.devtools if with_devtools && (browser_obj[:type] == :chrome || browser_obj[:type] == :headless_chrome || browser_obj[:type] == :firefox || browser_obj[:type] == :headless_firefox)
+
         browser_obj
       rescue StandardError => e
         raise e
@@ -275,11 +277,13 @@ module PWN
       public_class_method def self.devtools_console(opts = {})
         browser_obj = opts[:browser_obj]
         browser_type = browser_obj[:type]
-        raise 'Error: sorry, this method only supports browser_obj[:type] == :chrome' unless browser_type == :chrome
+
+        valid_browser_types = %i[chrome headless_chrome firefox headless_firefox]
+        raise 'ERROR: browser_type must be :chrome, :headless_chrome, :firefox, or :headless_firefox' unless valid_browser_types.include?(browser_type)
 
         js = opts[:js] ||= "alert('ACK from => #{self}')"
 
-        devtools = browser_obj[:browser].driver.devtools
+        devtools = browser_obj[:devtools]
         devtools.send_cmd('Runtime.enable')
         devtools.send_cmd('Console.enable')
         devtools.send_cmd('DOM.enable')
@@ -287,52 +291,76 @@ module PWN
         devtools.send_cmd('Log.enable')
         devtools.send_cmd('Debugger.enable')
 
-        expression_cmd = {
+        js_exp = {
           expression: js
         }
 
-        devtools.send_cmd('Runtime.evaluate', **expression_cmd)
+        devtools.send_cmd('Runtime.evaluate', **js_exp)
       rescue StandardError => e
         raise e
       end
 
       # Supported Method Parameters::
-      # browser_obj = PWN::Plugins::TransparentBrowser.linkout(
+      # browser_obj = PWN::Plugins::TransparentBrowser.dump_links(
       #   browser_obj: browser_obj1
       # )
 
-      public_class_method def self.linkout(opts = {})
+      public_class_method def self.dump_links(opts = {})
         browser_obj = opts[:browser_obj]
 
-        browser_obj[:browser].links.each do |link|
-          @@logger.info("#{link.text} => #{link.href}\n\n\n") unless link.text == ''
+        links = browser_obj[:browser].links
+
+        dump_links_arr = []
+        links.each do |link|
+          link_hash = {}
+
+          link_hash[:text] = link.text
+          link_hash[:href] = link.href
+          link_hash[:id] = link.id
+          link_hash[:name] = link.name
+          link_hash[:class_name] = link.class_name
+          link_hash[:html] = link.html
+          link_hash[:target] = link.target
+          dump_links_arr.push(link_hash)
+
+          yield link if block_given?
         end
 
-        browser_obj
+        dump_links_arr
       rescue StandardError => e
         raise e
       end
 
       # Supported Method Parameters::
-      # browser_obj = PWN::Plugins::TransparentBrowser.find_element_by_text(
+      # browser_obj = PWN::Plugins::TransparentBrowser.find_elements_by_text(
       #   browser_obj: browser_obj1,
       #   text: 'required - text to search for in the DOM'
       # )
 
-      public_class_method def self.find_element_by_text(opts = {})
+      public_class_method def self.find_elements_by_text(opts = {})
         browser_obj = opts[:browser_obj]
         text = opts[:text].to_s
 
-        elements_found = browser_obj[:browser].elements.select do |element|
-          element.text == text
-        end
-
-        elements_found.each do |element_found|
-          @@logger.info("#{element_found.html}\n\n\n")
+        elements = browser_obj[:browser].elements
+        elements_found_arr = []
+        elements.each do |element|
+          begin
+            if element.text == text || element.value == text
+              element_hash = {}
+              element_hash[:tag_name] = element.tag_name
+              element_hash[:html] = element.html
+              elements_found_arr.push(element_hash)
+
+              yield element if block_given?
+            end
+          rescue NoMethodError
+            next
+          end
         end
 
-        browser_obj
+        elements_found_arr
       rescue StandardError => e
+        puts e.backtrace
         raise e
       end
 
@@ -353,6 +381,7 @@ module PWN
 
         string.each_char do |char|
           yield char
+
           sleep Random.rand(rand_sleep_float)
         end
       rescue StandardError => e
@@ -489,11 +518,11 @@ module PWN
             js: 'required - JavaScript expression to evaluate'
           )
 
-          browser_obj1 = #{self}.linkout(
+          browser_obj1 = #{self}.dump_links(
             browser_obj: 'required - browser_obj returned from #open method)'
           )
 
-          browser_obj1 = #{self}.find_element_by_text(
+          browser_obj1 = #{self}.find_elements_by_text(
             browser_obj: 'required - browser_obj returned from #open method)',
             text: 'required - text to search for in the DOM'
           )

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.170'
+  VERSION = '0.5.171'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.170
+  version: 0.5.171
 platform: ruby
 authors:
 - 0day Inc.
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-14 00:00:00.000000000 Z
+date: 2024-06-17 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport