pwn 0.5.193 → 0.5.194

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 45b078b3f53dc5344594ebeb0a8e0121fa76d6161019e4ff6918ce1741d1e4f4
-  data.tar.gz: 6e066b6544dd185e3497cedacb72fc1250b519f04cdcf1fad8366cc6db777ab6
+  metadata.gz: d8e2618c43661322179b1ea623b1dc19c5fc079373197c1ba64d78e63e17d68f
+  data.tar.gz: 7c36ee8c5c48c6c181a7a4204911bdb6c9079f945b1814daafa5ccf433e71bd6
 SHA512:
-  metadata.gz: de6837d334d503f2052e7ac8401a993466e003ff03abc83e656f27c2b84bd95d56b1e3ba616d36d4c04c96efc759258077bb55c355d7a8f967ba05e7c1d737b4
-  data.tar.gz: 19b1550c8b1202312322a8ec5c0cc167b8273362bc9ef2eda046e825e2c336c4a4ae75145b1f4d593df61219fc8a0ba36fdd2d4ce54656d5965e81ec57e0ca03
+  metadata.gz: 8449c2bfcc574dab0613478ac7f9cc249f039c7fc8ea3d27fd14045ce399377f2be3fdcdd760ffeb93f2812c0157e8c6daa99645d965e59835e35d5bf40b8f0b
+  data.tar.gz: a5018bad53afa6a41bcf41c9b9c3abc0508ab2430f4905ab0368fd2beb479706c2f117bb48cb2414e641e5f39efe3cc28fd05bd7e5ad74ec165f2f9884ed615b

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.193]:001 >>> PWN.help
+pwn[v0.5.194]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.3@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.193]:001 >>> PWN.help
+pwn[v0.5.194]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.3@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.193]:001 >>> PWN.help
+pwn[v0.5.194]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -149,7 +149,7 @@ module PWN
           end
 
           if devtools
-            # args.push('--auto-open-devtools-for-tabs')
+            args.push('--auto-open-devtools-for-tabs')
             args.push('--disable-hang-monitor')
           end
 
@@ -158,7 +158,8 @@ module PWN
             accept_insecure_certs: true
           )
 
-          options.web_socket_url = true
+          # This is for bidi, once it's ready
+          # options.web_socket_url = true
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -218,7 +219,8 @@ module PWN
             accept_insecure_certs: true
           )
 
-          options.web_socket_url = true
+          # This is for bidi, once it's ready
+          # options.web_socket_url = true
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:firefox, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -240,7 +242,8 @@ module PWN
             accept_insecure_certs: true
           )
 
-          options.web_socket_url = true
+          # This is for bidi, once it's ready
+          # options.web_socket_url = true
           options.profile = this_profile
           driver = Selenium::WebDriver.for(:chrome, options: options)
           browser_obj[:browser] = Watir::Browser.new(driver)
@@ -299,10 +302,12 @@ module PWN
               browser_obj[:devtools].send_cmd('DOMSnapshot.enable')
             end
 
-            browser_obj[:bidi] = driver.bidi
+            # Future BiDi API that's more universally supported across browsers
+            # browser_obj[:bidi] = driver.bidi
 
             jmp_devtools_panel(browser_obj: browser_obj, panel: :elements)
           end
+
           new_tab(browser_obj: browser_obj, first_tab: true)
         end
 
@@ -450,7 +455,8 @@ module PWN
       # Supported Method Parameters::
       # tab = PWN::Plugins::TransparentBrowser.jmp_tab(
       #   browser_obj: 'required - browser_obj returned from #open method)',
-      #   keyword: 'required - keyword in title or url used to switch tabs'
+      #   keyword: 'required - keyword in title or url used to switch tabs',
+      #   explicit: 'optional - boolean to indicate if the keyword is an exact match (Defaults to false)'
       # )
 
       public_class_method def self.jmp_tab(opts = {})
@@ -460,9 +466,16 @@ module PWN
         keyword = opts[:keyword]
         raise 'ERROR: keyword parameter is required' if keyword.nil?
 
+        explicit = opts[:explicit] ||= false
+
         browser = browser_obj[:browser]
         all_tabs = browser.windows
-        tab_sel = all_tabs.select { |tab| tab.use if tab.title.include?(keyword) || tab.url.include?(keyword) }
+        if explicit
+          tab_sel = all_tabs.select { |tab| tab.use if tab.title == keyword || tab.url == keyword }
+        else
+          tab_sel = all_tabs.select { |tab| tab.use if tab.title.include?(keyword) || tab.url.include?(keyword) }
+        end
+
         { title: tab_sel.last.title, url: tab_sel.last.url, state: :active } if tab_sel.any?
       rescue StandardError => e
         raise e
@@ -478,6 +491,8 @@ module PWN
         browser_obj = opts[:browser_obj]
         verify_devtools_browser(browser_obj: browser_obj)
 
+        chrome_types = %i[chrome headless_chrome]
+
         first_tab = opts[:first_tab] ||= false
 
         browser = browser_obj[:browser]
@@ -489,10 +504,13 @@ module PWN
         end
 
         rand_tab = SecureRandom.hex(8)
-        url = "about:about##{rand_tab}"
+        url = 'about:about'
+        url = 'chrome://chrome-urls/' if chrome_types.include?(browser_type)
         browser.goto(url)
-        browser.execute_script("document.title = '#{rand_tab}'")
-        toggle_devtools(browser_obj: browser_obj) if devtools
+        # TODO: replace sleep with something more reliable like an event listener
+        sleep 1
+        browser.execute_script("document.title = 'about:about-#{rand_tab}'")
+        toggle_devtools(browser_obj: browser_obj, first_tab: first_tab) if devtools
 
         { title: browser.title, url: browser.url, state: :active }
       rescue StandardError => e
@@ -642,21 +660,29 @@ module PWN
 
       # Supported Method Parameters::
       # PWN::Plugins::TransparentBrowser.toggle_devtools(
-      #   browser_obj: 'required - browser_obj returned from #open method)'
+      #   browser_obj: 'required - browser_obj returned from #open method)',
+      #   first_tab: 'optional - boolean to indicate if this is the first tab (Defaults to false)',
       # )
 
       public_class_method def self.toggle_devtools(opts = {})
         browser_obj = opts[:browser_obj]
         verify_devtools_browser(browser_obj: browser_obj)
 
-        total_tabs = list_tabs(browser_obj: browser_obj).length
+        first_tab = opts[:first_tab] ||= false
 
         browser = browser_obj[:browser]
+        tab_id = browser.title.split('-').last.strip
+        devtools_tab_title = "DevTools-#{tab_id}"
+        jmp_tab(browser_obj: browser_obj, keyword: 'DevTools', explicit: true)
+        browser.execute_script("document.title = '#{devtools_tab_title}'")
         browser.send_keys(:f12)
-        if total_tabs < 2
+        if first_tab
+          # TODO: replace sleep with something more reliable like an event listener
           sleep 1
           browser.send_keys(:escape)
         end
+        tab_tied_to_devtools = "about:about-#{devtools_tab_title.split('-').last.strip}"
+        jmp_tab(browser_obj: browser_obj, keyword: tab_tied_to_devtools, explicit: true)
       rescue StandardError => e
         raise e
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.193'
+  VERSION = '0.5.194'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.193
+  version: 0.5.194
 platform: ruby
 authors:
 - 0day Inc.