RubyGems - pwn - Versions diffs - 0.5.388 → 0.5.390 - Mend

pwn 0.5.388 → 0.5.390

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

checksums.yaml +4 -4
data/.rubocop.yml +2 -2
data/README.md +3 -3
data/lib/pwn/reports/html_header.rb +255 -0
data/lib/pwn/reports/sast.rb +58 -179
data/lib/pwn/reports.rb +1 -0
data/lib/pwn/version.rb +1 -1
data/pwn.gemspec +3 -0
data/spec/lib/pwn/reports/html_header_spec.rb +15 -0
data/third_party/pwn_rdoc.jsonl +1 -3
metadata +3 -1

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 83eff2a7a3a7bb75e65d7df503f9d773e7e9e9fcb8fa3c8527f5dc7bd66e5596
-  data.tar.gz: 46699a59f9b2dc261bd284c88b6f208a4ea5ab595e6fa4daa08cbdb6bc3a913f
+  metadata.gz: 29455d0f44118f016d59ba4370e80b883a189d960697d2ad98f1c6d36b6b953d
+  data.tar.gz: bda5ff363c12e7b054daf8f71936d8d83ccf973c7e927333331e6107ddb9e4df
 SHA512:
-  metadata.gz: 8a10d8b6ec39c6ab136c87e6e940aa25dd5e22b6afcb93edaf3e4ff844f3460d1136aa70a4f659cab119a63bf39d1f5cbdf0048c76df69c424ef2e2df94808f7
-  data.tar.gz: 84c8c21cd15963b576b0206b90ebc70f6606416e03219b6beec601ef868100f8be6e6d3bb09f272552bc640bb55e28b2f740653a579c44cceaf869196b1b5275
+  metadata.gz: 885789f3328900c0e0cfee3c69a868a54851b9b156c61399a32f789daa767e1f33d5a1f4846d197832f76f8916da525cd40e564666691ed2489b495e0e47cc06
+  data.tar.gz: b25394c00e67546058cc7cc0b8da9cdf2b93a1165f4305ed056c5959907273f4b884607be987550095fd9fcae14bdacfd81a58a7e08c6381742cca2be6c947ee

data/.rubocop.yml CHANGED Viewed

@@ -2,7 +2,7 @@ AllCops:
   UseCache: false
   NewCops: enable
 Layout/LineLength:
-  Max: 874
+  Max: 1620
 Lint/UselessRescue:
   Enabled: false
 Metrics/AbcSize:
@@ -16,7 +16,7 @@ Metrics/ClassLength:
 Metrics/CyclomaticComplexity:
   Max: 157
 Metrics/MethodLength:
-  Max: 666
+  Max: 564
 Metrics/ModuleLength:
   Max: 1000
 Metrics/PerceivedComplexity:

data/README.md CHANGED Viewed

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.388]:001 >>> PWN.help
+pwn[v0.5.390]:001 >>> PWN.help
 ```
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.388]:001 >>> PWN.help
+pwn[v0.5.390]:001 >>> PWN.help
 ```
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.388]:001 >>> PWN.help
+pwn[v0.5.390]:001 >>> PWN.help
 ```
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/reports/html_header.rb ADDED Viewed

@@ -0,0 +1,255 @@
+# frozen_string_literal: true
+require 'cgi'
+require 'json'
+require 'tty-spinner'
+module PWN
+  module Reports
+    # This plugin generates the HTML header and includes external JS/CSS libraries for PWN reports.
+    module HTMLHeader
+      # Supported Method Parameters::
+      # PWN::Reports::HTMLHeader.generate(
+      #   column_names: 'required - array of column names to use in the report table',
+      #   driver_src_uri: 'required - pwn driver source code uri',
+      # )
+      public_class_method def self.generate(opts = {})
+        column_names = opts[:column_names] || []
+        driver_src_uri = opts[:driver_src_uri]
+        raise 'ERROR: :driver_src_uri must be provided' if driver_src_uri.nil? || driver_src_uri.strip == ''
+        driver_src_name = "~ #{driver_src_uri.to_s.split('/').last.gsub('_', ' ')}"
+        external_css_libraries = [
+          {
+            src: 'https://cdn.datatables.net/plug-ins/2.3.3/features/searchHighlight/dataTables.searchHighlight.css',
+            integrity: 'sha384-3FGcHDS9wKlVV/Pu4y1kojpLsNxlE3jQjdm1N0p7RC9f6xPdRAj78js3ELGiGP/j'
+          },
+          {
+            src: 'https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.css',
+            integrity: 'sha384-51NLFpi/9qR2x0LAjQHiFAjV765f0g9+05EmKQ/QWINR/y3qonty8mPy68vEbo0z'
+          }
+        ]
+        external_js_libraries = [
+          {
+            src: 'https://code.jquery.com/jquery-3.7.1.min.js',
+            integrity: 'sha256-/JqT3SQfawRcv/BIHPThkBvs0OEvtFFmqPF/lYI/Cxo='
+          },
+          {
+            src: 'https://cdn.jsdelivr.net/npm/datatables.mark.js@2.1.0/dist/datatables.mark.min.js',
+            integrity: 'sha384-1NNYvadWgPeE3tcSCdnI+3HB9iVqXwDBQsQUCUJTygTR3Whmz3HFkMn1kdevXe/F'
+          },
+          {
+            src: 'https://bartaz.github.io/sandbox.js/jquery.highlight.js',
+            integrity: 'sha384-COfjQfuLZw+Zvx+XMsYIVqsBHXPaUJnu/nwutbZvnI3zys8lUt3N3SUDsR6yu7ud'
+          },
+          {
+            src: 'https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js',
+            integrity: 'sha384-VFQrHzqBh5qiJIU0uGU5CIW3+OWpdGGJM9LBnGbuIH2mkICcFZ7lPd/AAtI7SNf7'
+          },
+          {
+            src: 'https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js',
+            integrity: 'sha384-/RlQG9uf0M2vcTw3CX7fbqgbj/h8wKxw7C3zu9/GxcBPRKOEcESxaxufwRXqzq6n'
+          },
+          {
+            src: 'https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.js',
+            integrity: 'sha384-jvnxkXTB++rTO/pbg6w5nj0jm5HiSGtTcBW5vnoLGRfmSxw3eyqNA0bJ+m6Skjw/'
+          },
+          {
+            src: 'https://cdn.datatables.net/plug-ins/2.3.3/features/searchHighlight/dataTables.searchHighlight.min.js',
+            integrity: 'sha384-XDdmvsWg5e1/POTILjMFvB3KtrBqRk5W1CG9aoi1+K6bBMPHQAvlKEiekndU6CTp'
+          },
+          {
+            src: 'https://unpkg.com/exceljs@4.4.0/dist/exceljs.min.js',
+            integrity: 'sha384-Pqp51FUN2/qzfxZxBCtF0stpc9ONI6MYZpVqmo8m20SoaQCzf+arZvACkLkirlPz'
+          }
+        ]
+        markup = %(<!DOCTYPE HTML>
+        <html>
+          <head>
+            <!-- favicon.ico from https://0dayinc.com -->
+            <link rel="icon" href="data:image/x-icon;base64,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" type="image/x-icon" />
+            <style>
+              body {
+                font-family: Verdana, Geneva, sans-serif;
+                font-size: 11px;
+                background-color: #FFFFFF;
+                color: #084B8A !important;
+              }
+              a:link {
+                color: #0174DF;
+                text-decoration: none;
+              }
+              a:visited {
+                color: #B40404;
+                text-decoration: none;
+              }
+              a:hover {
+                color: #01A9DB;
+                text-decoration: underline;
+              }
+              a:active {
+                color: #610B5E;
+                text-decoration: underline;
+              }
+              div.toggle_col_and_button_group {
+                display: flex; /* Makes the container a flex container */
+                justify-content: none; /* Aligns items along the main axis */
+                align-items: flex-start; /* Aligns items to the start of the cross-axis */
+                width: 1275px !important;
+              }}
+              div.cols_to_toggle {
+                width: 300px !important;
+                text-align: left !important;
+                vertical-align: middle !important;
+              }
+              div.dt-buttons {
+                width: 420px !important;
+                text-align: right !important;
+              }
+              div.dt-container {
+                width: 1275px !important;
+              }
+              div.dt-scroll-body {
+                width: 1275px !important;
+              }
+              span.highlight {
+                background-color: cyan  !important;
+              }
+              table {
+                width: 100%;
+                border-spacing:0px;
+              }
+              table.squish {
+                table-layout: fixed;
+              }
+              td {
+                vertical-align: top;
+                word-wrap: break-word !important;
+                border: none !important;
+              }
+              table.multi_line_select tr.odd {
+                background-color: #dedede !important;  /* Gray for odd rows */
+              }
+              table.multi_line_select tr.even {
+                background-color: #ffffff !important;  /* White for even rows */
+              }
+              tr.highlighted td {
+                background-color: #FFF396 !important;
+              }
+            </style>
+        )
+        external_css_libraries.each do |css_lib_hash|
+          css_lib = css_lib_hash[:src]
+          css_integrity = css_lib_hash[:integrity]
+          markup += %(
+            <link href="#{css_lib}" rel="stylesheet" integrity="#{css_integrity}" crossorigin="anonymous">
+          )
+        end
+        external_js_libraries.each do |js_lib|
+          js_src = js_lib[:src]
+          js_integrity = js_lib[:integrity]
+          markup += %(
+            <script type="text/javascript" src="#{js_src}" integrity="#{js_integrity}" crossorigin="anonymous"></script>
+          )
+        end
+        markup += %(
+          </head>
+          <body id="pwn_body">
+            <h1 style="display:inline">
+              <img src="data:image/png;base64,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" type="image/png" style="iheight:70px;width:70px;"/>
+              <a href="#{driver_src_uri}" target="_blank">#{driver_src_name}</a>
+            </h1>
+            <h2 id="report_name"></h2><br />
+            <div id="toggle_col_and_button_group" class="toggle_col_and_button_group">
+              <div class="cols_to_toggle">
+                <b>Toggle Column(s) Visibility:</b>&nbsp;
+        )
+        last_column_idx = column_names.length - 1
+        column_names.each_with_index do |col, idx|
+          dat_col = idx + 1
+          encoded_col = CGI.escape_html(col)
+          if idx < last_column_idx
+            markup += %(
+                <a class="toggle-vis" data-column="#{dat_col}" href="#">#{encoded_col}</a>&nbsp;|&nbsp;
+            )
+          else
+            markup += %(
+                <a class="toggle-vis" data-column="#{dat_col}" href="#">#{encoded_col}</a>
+            )
+          end
+        end
+        markup += %(
+              </div>
+            </div>
+            <div class="dt-container">
+              <table id="pwn_results" class="display" cellspacing="0">
+                <thead>
+                  <tr>
+                    <th>#</th>
+        )
+        column_names.each do |col|
+          markup += %(
+            <th>#{col}</th>
+          )
+        end
+        markup += %(
+                  </tr>
+                </thead>
+                <!-- DataTables <tbody> -->
+              </table>
+            </div>
+        )
+      rescue StandardError => e
+        raise e
+      end
+      # Author(s):: 0day Inc. <support@0dayinc.com>
+      public_class_method def self.authors
+        "AUTHOR(S):
+          0day Inc. <support@0dayinc.com>
+        "
+      end
+      # Display Usage for this Module
+      public_class_method def self.help
+        puts "USAGE:
+          #{self}.generate(
+            column_names: 'Array of Column Names to use in the report table',
+            driver_src_uri: 're
+          #{self}.authors
+        "
+      end
+    end
+  end
+end

data/lib/pwn/reports/sast.rb CHANGED Viewed

@@ -127,133 +127,18 @@ module PWN
           JSON.pretty_generate(results_hash)
         )
-        html_report = %{<!DOCTYPE HTML>
-        <html>
-          <head>
-            <!-- favicon.ico from https://0dayinc.com -->
-            <link rel="icon" href="data:image/x-icon;base64,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" type="image/x-icon" />
-            <style>
-              body {
-                font-family: Verdana, Geneva, sans-serif;
-                font-size: 11px;
-                background-color: #FFFFFF;
-                color: #084B8A !important;
-              }
-              a:link {
-                color: #0174DF;
-                text-decoration: none;
-              }
-              a:visited {
-                color: #B40404;
-                text-decoration: none;
-              }
-              a:hover {
-                color: #01A9DB;
-                text-decoration: underline;
-              }
-              a:active {
-                color: #610B5E;
-                text-decoration: underline;
-              }
-              div.dt-container {
-                width: 1275px !important;
-              }
-              div.dt-scroll-body {
-                width: 1275px !important;
-              }
-              table {
-                width: 100%;
-                border-spacing:0px;
-              }
-              table.squish {
-                table-layout: fixed;
-              }
-              td {
-                vertical-align: top;
-                word-wrap: break-word !important;
-                border: none !important;
-              }
-              table.multi_line_select tr.odd {
-                background-color: #dedede !important;  /* Gray for odd rows */
-              }
-              table.multi_line_select tr.even {
-                background-color: #ffffff !important;  /* White for even rows */
-              }
-              tr.highlighted td {
-                background-color: #FFF396 !important;
-              }
-            </style>
-            <!-- jQuery & DataTables -->
-            <script type="text/javascript" src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
-            <link href="https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.css" rel="stylesheet" integrity="sha384-51NLFpi/9qR2x0LAjQHiFAjV765f0g9+05EmKQ/QWINR/y3qonty8mPy68vEbo0z" crossorigin="anonymous">
-            <script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/pdfmake.min.js" integrity="sha384-VFQrHzqBh5qiJIU0uGU5CIW3+OWpdGGJM9LBnGbuIH2mkICcFZ7lPd/AAtI7SNf7" crossorigin="anonymous"></script>
-            <script src="https://cdnjs.cloudflare.com/ajax/libs/pdfmake/0.2.7/vfs_fonts.js" integrity="sha384-/RlQG9uf0M2vcTw3CX7fbqgbj/h8wKxw7C3zu9/GxcBPRKOEcESxaxufwRXqzq6n" crossorigin="anonymous"></script>
-            <script src="https://cdn.datatables.net/v/dt/jszip-3.10.1/dt-2.3.3/b-3.2.4/b-colvis-3.2.4/b-html5-3.2.4/b-print-3.2.4/fc-5.0.4/fh-4.0.3/kt-2.12.1/r-3.0.6/rg-1.5.2/rr-1.5.0/sc-2.4.3/sb-1.8.3/sp-2.3.5/sl-3.1.0/datatables.min.js" integrity="sha384-jvnxkXTB++rTO/pbg6w5nj0jm5HiSGtTcBW5vnoLGRfmSxw3eyqNA0bJ+m6Skjw/" crossorigin="anonymous"></script>
-            <script src="https://unpkg.com/exceljs@4.4.0/dist/exceljs.min.js"></script>
-          </head>
-          <body id="pwn_body">
-            <h1 style="display:inline">
-              <img src="data:image/png;base64,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" type="image/png" style="iheight:100px;width:100px;"/>
-              <a href="https://github.com/0dayInc/pwn/blob/master/bin/pwn_sast" target="_blank">~ pwn sast</a>
-            </h1>
-            <h2 id="report_name"></h2><br />
-            <div class="dt-buttons" id="button_group">
-              <!--<button type="button" id="debug_rows_selected">Rows Selected</button>-->
-            </div>
-            <div>
-              <b>Toggle Column(s) Visibility:</b>&nbsp;
-              <a class="toggle-vis" data-column="1" href="#">Timestamp</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="2" href="#">Test Case / Security References</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="3" href="#">Path</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="4" href="#">Line#, Formatted Content, AI Analysis, &amp; Last Committed By</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="5" href="#">Raw Content</a>&nbsp;|&nbsp;
-              <a class="toggle-vis" data-column="6" href="#">Test Case (Anti-Pattern) Filter</a>
-            </div>
-            <br /><br />
-            <div>
-              Search tips: Use space-separated keywords for AND search, prefix with - to exclude (e.g., "security -password"), or enclose in / / for regex (e.g., "/^important.*$/i").
-            </div><br />
-            <div>
-              <table id="pwn_scan_git_source_results" class="display" cellspacing="0">
-                <thead>
-                  <tr>
-                    <th>#</th>
-                    <th>Timestamp</th>
-                    <th>Test Case / Security References</th>
-                    <th>Path</th>
-                    <th>Line#, Formatted Content, AI Analysis, &amp; Last Committed By</th>
-                    <th>Raw Content</th>
-                    <th>Test Case (Anti-Pattern) Filter</th>
-                  </tr>
-                </thead>
-                <!-- DataTables <tbody> -->
-              </table>
-            </div>
+        column_names = [
+          'Timestamp',
+          'Test Case / Security References',
+          'Path',
+          'Line# | Source | AI Analysis | Author',
+          'Raw Content',
+          'Test Case'
+        ]
+        driver_src_uri = 'https://github.com/0dayinc/pwn/blob/master/bin/pwn_sast'
+        html_report = %(#{PWN::Reports::HTMLHeader.generate(column_names: column_names, driver_src_uri: driver_src_uri)}
             <script>
               var htmlEntityEncode = $.fn.dataTable.render.text().display;
@@ -266,10 +151,11 @@ module PWN
                 var offset = 400;
                 var min_scroll_height = 100;
                 var scrollYHeight = Math.max(min_scroll_height, windowHeight - offset);  // Ensure minimum of 600px
-                var table = $('#pwn_scan_git_source_results').DataTable( {
+                var table = $('#pwn_results').DataTable( {
                   "order": [[2, 'asc']],
                   "scrollY": scrollYHeight + "px",
                   "scrollCollapse": true,
+                  "searchHighlight": true,
                   "paging": true,
                   "lengthMenu": [25, 50, 100, 250, 500, 1000, 2500, 5000],
                   "drawCallback": function () {
@@ -442,61 +328,52 @@ module PWN
                       ]
                     });
-                    table.buttons().container().insertAfter('#button_group');
+                    table.buttons().container().appendTo('#toggle_col_and_button_group');
                   }
                 });
-                $('#pwn_scan_git_source_results tbody').on('click', '.multi_line_select tr', function () {
+                $('#pwn_results tbody').on('click', '.multi_line_select tr', function () {
                   $(this).toggleClass('highlighted');
                 });
+                // Dynamically create the smart toggle label and input
+                var smartLabel = $('<label for="smart-toggle">Smart Search (e.g., "security !password")</label>');
+                var smartInput = $('<input type="radio" id="smart-toggle" name="searchMode" value="" checked>');
+                smartLabel.prepend(smartInput);  // Prepend input inside label for proper association
+                // Dynamically create the regex toggle label and input
+                var regexLabel = $('<label for="regex-toggle">Regex Search (e.g., "^important.*$")</label>');
+                var regexInput = $('<input type="radio" id="regex-toggle" name="searchMode" value="">');
+                regexLabel.prepend(regexInput);  // Prepend input inside label
+                // Now relocate them as before (insert before the search input)
+                smartLabel.insertBefore('#dt-search-0');
+                regexLabel.insertBefore('#dt-search-0');
+                // Style for inline display and spacing
+                smartLabel.css({ display: 'inline-block', marginRight: '10px' });
+                regexLabel.css({ display: 'inline-block', marginRight: '10px' });
+                // Optional: Hide the default "Search:" label if not needed
+                $('.dt-search label:first-of-type').hide();
                 // Custom advanced search handling
-                $('.dataTables_filter input').unbind();
-                $('.dataTables_filter input').on('keyup', function() {
-                  var search = $(this).val();
-                  var filterFunc;
-                  if (search.match(/^\\/.*\\/$/)) {
-                    try {
-                      var regex = new RegExp(search.slice(1, -1), 'i');
-                      filterFunc = function(settings, data, dataIndex) {
-                        var rowData = data.join(' ');
-                        return regex.test(rowData);
-                      };
-                    } catch (e) {
-                      filterFunc = function(settings, data, dataIndex) {
-                        return true;
-                      };
-                    }
-                  } else {
-                    var positives = [];
-                    var negatives = [];
-                    var terms = search.split(/\\s+/).filter(function(t) { return t.length > 0; });
-                    for (var i = 0; i < terms.length; i++) {
-                      var term = terms[i];
-                      if (term.startsWith('-')) {
-                        var cleanTerm = term.substring(1).toLowerCase();
-                        if (cleanTerm) negatives.push(cleanTerm);
-                      } else {
-                        positives.push(term.toLowerCase());
-                      }
-                    }
-                    filterFunc = function(settings, data, dataIndex) {
-                      var rowData = data.join(' ').toLowerCase();
-                      for (var j = 0; j < positives.length; j++) {
-                        if (!rowData.includes(positives[j])) return false;
-                      }
-                      for (var k = 0; k < negatives.length; k++) {
-                        if (rowData.includes(negatives[k])) return false;
-                      }
-                      return true;
-                    };
-                  }
+                $('#dt-search-0').unbind();
+                $('#dt-search-0').on('input', function() {
+                  var table = $('#pwn_results').DataTable();
+                  var searchTerm = this.value;
+                  var isRegex = $('#regex-toggle').prop('checked');
+                  var isSmart = $('#smart-toggle').prop('checked');
+                  table.search(searchTerm, isRegex, isSmart).draw();
+                });
-                  $.fn.dataTable.ext.search.pop();
-                  $.fn.dataTable.ext.search.push(filterFunc);
-                  table.search('');
-                  table.draw();
+                // Additionally, reapply search on toggle changes (assuming radios exist in HTML)
+                $('#regex-toggle, #smart-toggle').on('input', function() {
+                  var table = $('#pwn_results').DataTable();
+                  var searchTerm = this.value;
+                  var isRegex = $('#regex-toggle').prop('checked');
+                  var isSmart = $('#smart-toggle').prop('checked');
+                  table.search(searchTerm, isRegex, isSmart).draw();
                 });
                 // Toggle Columns
@@ -516,10 +393,12 @@ module PWN
                 // Select All and Deselect All
                 function select_deselect_all() {
-                  if ($('.multi_line_select tr.highlighted').length === $('.multi_line_select tr').length) {
-                    $('.multi_line_select tr.highlighted').removeClass('highlighted');
+                  var visible_multi_line_trs = $('#pwn_results tbody tr:visible .multi_line_select tr');
+                  var highlighted_in_visible = visible_multi_line_trs.filter('.highlighted');
+                  if (highlighted_in_visible.length === visible_multi_line_trs.length) {
+                    highlighted_in_visible.removeClass('highlighted');
                   } else {
-                    $('.multi_line_select tr:not(.highlighted)').addClass('highlighted');
+                    visible_multi_line_trs.filter(':not(.highlighted)').addClass('highlighted');
                   }
                 }
@@ -774,7 +653,7 @@ module PWN
             </script>
           </body>
         </html>
-        }
+        )
         File.open("#{dir_path}/#{report_name}.html", 'w') do |f|
           f.print(html_report)

data/lib/pwn/reports.rb CHANGED Viewed

@@ -9,6 +9,7 @@ module PWN
     # autoload :JSON, 'pwn/reports/json'
     # autoload :PDF, 'pwn/reports/pdf'
     autoload :Fuzz, 'pwn/reports/fuzz'
+    autoload :HTMLHeader, 'pwn/reports/html_header'
     autoload :Phone, 'pwn/reports/phone'
     autoload :SAST, 'pwn/reports/sast'
     autoload :URIBuster, 'pwn/reports/uri_buster'

data/lib/pwn/version.rb CHANGED Viewed

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 module PWN
-  VERSION = '0.5.388'
+  VERSION = '0.5.390'
 end

data/pwn.gemspec CHANGED Viewed

@@ -59,6 +59,9 @@ Gem::Specification.new do |spec|
     gem_name = columns[1].delete("'").delete(',')
     gem_version = columns.last.delete("'")
+    # Good for debugging issues in Gemfile
+    # puts "pwn.gemspec: Adding dependency: #{gem_name} #{gem_version}"
     if dev_dependency_arr.include?(gem_name.to_sym)
       spec.add_development_dependency(
         gem_name,

data/spec/lib/pwn/reports/html_header_spec.rb ADDED Viewed

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+require 'spec_helper'
+describe PWN::Reports::HTMLHeader do
+  it 'should display information for authors' do
+    authors_response = PWN::Reports::HTMLHeader
+    expect(authors_response).to respond_to :authors
+  end
+  it 'should display information for existing help method' do
+    help_response = PWN::Reports::HTMLHeader
+    expect(help_response).to respond_to :help
+  end
+end

data/third_party/pwn_rdoc.jsonl CHANGED Viewed

@@ -901,7 +901,7 @@
 {"messages":[{"role":"user","content":"PWN::Plugins::SSN.generate Usage"},{"role":"assistant","content":"`PWN::Plugins::SSN.generate`: Supported Method Parameters\n\nPWN::Plugins::SSN.generate(\n\ncount: 'required - number of SSN numbers to generate'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::SSN.help Usage"},{"role":"assistant","content":"`PWN::Plugins::SSN.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
-{"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.generate Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.generate`: Supported Method Parameters\n\nresponse = PWN::Plugins::ScannableCodes.generate(\n\ndata: 'required - data to encode',\ntype: 'optional - :barcode || :qrcode (defaults to :qrcode)',\npath: 'optional - path to save image (defaults to \"./#{data}.png\")'\n\n)\n"}]}
+{"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.generate Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.generate`: Supported Method Parameters\n\nresponse = PWN::Plugins::ScannableCodes.generate(\n\ndata: 'required - data to encode',\ntype: 'optional - :barcode || :qrcode (defaults to :qrcode)',\nsize: 'optional - size of the image when type is :qrcode (defaults to 200)',\npath: 'optional - path to save image (defaults to \"./#{data}.png\")'\nreturn_type: 'optional - :base64 || :file (defaults to :file)'\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::ScannableCodes.help Usage"},{"role":"assistant","content":"`PWN::Plugins::ScannableCodes.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Serial.authors Usage"},{"role":"assistant","content":"`PWN::Plugins::Serial.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Plugins::Serial.connect Usage"},{"role":"assistant","content":"`PWN::Plugins::Serial.connect`: Supported Method Parameters\n\nserial_obj = PWN::Plugins::Serial.connect(\n\nblock_dev: 'optional - serial block device path (defaults to /dev/ttyUSB0)',\nbaud: 'optional - (defaults to 9600)',\ndata_bits: 'optional - (defaults to 8)',\nstop_bits: 'optional - (defaults to 1)',\nparity: 'optional - :even|:mark|:odd|:space|:none (defaults to :none)'\n\n)\n"}]}
@@ -1053,9 +1053,7 @@
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.authors Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.generate Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.generate`: Supported Method Parameters\n\nPWN::Reports::Phone.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::Phone.help Usage"},{"role":"assistant","content":"`PWN::Reports::Phone.help`: "}]}
-{"messages":[{"role":"user","content":"PWN::Reports::SAST.authors Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::SAST.generate Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.generate`: Supported Method Parameters\n\nPWN::Reports::SAST.generate(\n\ndir_path: 'optional - Directory path to save the report (defaults to .)',\nresults_hash: 'optional - Hash containing the results of the SAST analysis (defaults to empty hash structure)',\nreport_name: 'optional - Name of the report file (defaults to current directory name)',\nai_engine: 'optional - AI engine to use for analysis (:grok, :ollama, or :openai)',\nai_model: 'optionnal - AI Model to Use for Respective AI Engine (e.g., grok-4i-0709, chargpt-4o-latest, llama-3.1, etc.)',\nai_key: 'optional -  AI Key/Token for Respective AI Engine',\nai_fqdn: 'optional -  AI FQDN (Only Required for \"ollama\" AI Engine)',\nai_system_role_content: 'optional - AI System Role Content (Defaults to \"Is this code vulnerable or a false positive?  Valid responses are only: \"VULNERABLE\" or \"FALSE+\". DO NOT PROVIDE ANY OTHER TEXT OR EXPLANATIONS.\")',\nai_temp: 'optional - AI Temperature (Defaults to 0.9)'\n\n)\n"}]}
-{"messages":[{"role":"user","content":"PWN::Reports::SAST.help Usage"},{"role":"assistant","content":"`PWN::Reports::SAST.help`: "}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.authors Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.authors`: Author(s)\n\n0day Inc. <support@0dayinc.com>\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.generate Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.generate`: Supported Method Parameters\n\nPWN::Reports::URIBuster.generate(\n\ndir_path: dir_path,\nresults_hash: results_hash\n\n)\n"}]}
 {"messages":[{"role":"user","content":"PWN::Reports::URIBuster.help Usage"},{"role":"assistant","content":"`PWN::Reports::URIBuster.help`: "}]}

metadata CHANGED Viewed

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.388
+  version: 0.5.390
 platform: ruby
 authors:
 - 0day Inc.
@@ -1900,6 +1900,7 @@ files:
 - lib/pwn/plugins/xxd.rb
 - lib/pwn/reports.rb
 - lib/pwn/reports/fuzz.rb
+- lib/pwn/reports/html_header.rb
 - lib/pwn/reports/phone.rb
 - lib/pwn/reports/sast.rb
 - lib/pwn/reports/uri_buster.rb
@@ -2242,6 +2243,7 @@ files:
 - spec/lib/pwn/plugins/xxd_spec.rb
 - spec/lib/pwn/plugins_spec.rb
 - spec/lib/pwn/reports/fuzz_spec.rb
+- spec/lib/pwn/reports/html_header_spec.rb
 - spec/lib/pwn/reports/phone_spec.rb
 - spec/lib/pwn/reports/sast_spec.rb
 - spec/lib/pwn/reports/uri_buster_spec.rb