pwn 0.5.445 → 0.5.446

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 86b71d678fe4babb731b7891b3c1760cd7ca8ee9ce980d19e433c6ba83c6390f
-  data.tar.gz: 6d47cc4ba4ae9455b4248c7a93baf85eb118b83070a1a3619335a4874d898aef
+  metadata.gz: a44431b941955353c7b0926e584ee754f3ef4cf02a22590dddf0613e4436545e
+  data.tar.gz: d7f6286a33c71a051ac1f06e688c4e81974e0dbac83fca90834945df08e1de6a
 SHA512:
-  metadata.gz: b379c7ab9c67cda3c5462c5418c1c558f14ead952a93cfb334c00e4ee17bab539a71d4664fa4cd6088c4faf076cad9a400d8d7bcaf072a102a0d1d4bb8cfb97f
-  data.tar.gz: 8b4a0333e4f6cb99c0364baa97183ba56b523d550d49007757c99d422d60054bcdab9fdd6da83fad65088cd701d8ba1d2f4e3889a47bb2f2d4d7fac253792df7
+  metadata.gz: d7b633237440b907fa46d66526d80b403c5e30649aa8411d5e39d1dcabe24f7fe5db4010c120994daef10b5ff6ae61c28865d9327bfd27c29d2987add8bf6b07
+  data.tar.gz: 01f0763257fd3e7f8404d0d5d2eadb08b5a50c5eb539f8d2eed70fe104b2f54c6cca65c46c2da2a55152a5c6fed5ca2acfc7a497b55c1d9eaa02e412495bb039

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.445]:001 >>> PWN.help
+pwn[v0.5.446]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.445]:001 >>> PWN.help
+pwn[v0.5.446]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.445]:001 >>> PWN.help
+pwn[v0.5.446]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/etc/pwn.yaml.EXAMPLE

@@ -34,6 +34,13 @@ asm:
   arch: 'x86_64'
   endian: 'little'
 
+blockchain:
+  bitcoin:
+    rpc_host: '127.0.0.1'
+    rpc_port: 8332
+    rpc_user: 'bitcoin rpc user'
+    rpc_pass: 'bitcoin rpc password'
+
 irc:
   ui_nick: '_human_'
   shared_chan: '#pwn'

data/lib/pwn/blockchain/btc.rb

@@ -1,5 +1,7 @@
 # frozen_string_literal: true
 
+require 'bitcoin'
+require 'base64'
 require 'json'
 require 'rest-client'
 require 'tty-spinner'
@@ -25,10 +27,20 @@ module PWN
                         opts[:http_method].to_s.scrub.to_sym
                       end
 
-        base_uri = 'https://api.blockcypher.com/v1/btc/'
+        rpc_host = PWN::Env[:blockchain][:bitcoin][:rpc_host] ||= '127.0.0.1'
+        rpc_port = PWN::Env[:blockchain][:bitcoin][:rpc_port] ||= '8332'
+        base_uri = "http://#{rpc_host}:#{rpc_port}"
         rest_call = opts[:rest_call].to_s.scrub
         params = opts[:params]
-        headers = { content_type: 'application/json; charset=UTF-8' }
+        rpc_user = PWN::Env[:blockchain][:bitcoin][:rpc_user] ||= PWN::Plugins::AuthenticationHelper.username(prompt: 'Bitcoin Node RPC Username')
+        rpc_pass = PWN::Env[:blockchain][:bitcoin][:rpc_pass] ||= PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Bitcoin Node RPC Password')
+
+        basic_auth = Base64.strict_encode64("#{rpc_user}:#{rpc_pass}")
+
+        headers = {
+          content_type: 'application/json; charset=UTF-8',
+          authorization: "Basic #{basic_auth}"
+        }
 
         http_body = opts[:http_body]
         http_body ||= {}
@@ -100,16 +112,20 @@ module PWN
       end
 
       # Supported Method Parameters::
-      # latest_block = PWN::Blockchain::BTC.get_latest_block(
-      #   token: 'optional - API token for higher rate limits'
-      # )
-
-      public_class_method def self.get_latest_block(opts = {})
-        params = {}
-        params[:token] = opts[:token] if opts[:token]
-
-        rest_call = 'main'
-        response = btc_rest_call(rest_call: rest_call, params: params)
+      # latest_block = PWN::Blockchain::BTC.get_latest_block
+
+      public_class_method def self.get_latest_block
+        http_body = {
+          jsonrpc: '1.0',
+          id: self,
+          method: 'getblockchaininfo',
+          params: []
+        }
+
+        response = btc_rest_call(
+          http_method: :post,
+          http_body: http_body
+        )
 
         JSON.parse(response.body, symbolize_names: true)
       rescue StandardError => e

data/lib/pwn/config.rb

@@ -51,6 +51,14 @@ module PWN
           }
         },
         asm: { arch: PWN::Plugins::DetectOS.arch, endian: PWN::Plugins::DetectOS.endian },
+        blockchain: {
+          bitcoin: {
+            rpc_host: 'localhost',
+            rpc_port: 8332,
+            rpc_user: 'bitcoin RPC Username',
+            rpc_pass: 'bitcoin RPC Password'
+          }
+        },
         irc: {
           ui_nick: '_human_',
           shared_chan: '#pwn',

data/lib/pwn/plugins/authentication_helper.rb

@@ -10,10 +10,13 @@ module PWN
     # of other SP plugins/modules.
     module AuthenticationHelper
       # Supported Method Parameters::
-      # PWN::Plugins::AuthenticationHelper.username
+      # PWN::Plugins::AuthenticationHelper.username(
+      #   prompt: 'optional - string to display at prompt (Default: Username)'
+      # )
 
       public_class_method def self.username
-        user = TTY::Prompt.new.ask('Username: ')
+        prompt = opts[:prompt] ||= 'Username'
+        user = TTY::Prompt.new.ask("#{prompt}: ")
         user.to_s.strip.chomp.scrub
       rescue StandardError => e
         raise e
@@ -21,11 +24,11 @@ module PWN
 
       # Supported Method Parameters::
       # PWN::Plugins::AuthenticationHelper.mask_password(
-      #   prompt: 'optional - string to display at prompt'
+      #   prompt: 'optional - string to display at prompt (Default: Password)'
       # )
 
       public_class_method def self.mask_password(opts = {})
-        opts[:prompt].nil? ? prompt = 'Password' : prompt = opts[:prompt].to_s.scrub.strip.chomp
+        prompt = opts[:prompt] ||= 'Password'
 
         pass = TTY::Prompt.new.mask("#{prompt}: ")
         pass.to_s.strip.chomp.scrub
@@ -37,11 +40,11 @@ module PWN
 
       # Supported Method Parameters::
       # PWN::Plugins::AuthenticationHelper.mfa(
-      #   prompt: 'optional - string to display at prompt'
+      #   prompt: 'optional - string to display at prompt (Default: MFA Token)'
       # )
 
       public_class_method def self.mfa(opts = {})
-        opts[:prompt].nil? ? prompt = 'MFA Token' : prompt = opts[:prompt].to_s.scrub.strip.chomp
+        prompt = opts[:prompt] ||= 'MFA Token'
 
         mfa = TTY::Prompt.new.ask("#{prompt}: ")
         mfa.to_s.strip.chomp.scrub
@@ -63,9 +66,13 @@ module PWN
 
       public_class_method def self.help
         puts "USAGE:
-          #{self}.username
+          #{self}.username(
+            prompt: 'optional - string to display at prompt'
+          )
 
-          #{self}.mask_password
+          #{self}.mask_password(
+            prompt: 'optional - string to display at prompt'
+          )
 
           #{self}.mfa(
             prompt: 'optional - string to display at prompt'

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.445'
+  VERSION = '0.5.446'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.445
+  version: 0.5.446
 platform: ruby
 authors:
 - 0day Inc.