pwn 0.5.493 → 0.5.494

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f77880b0e335c1f554ab63cc6f639edd72839ae9c64fdad241d89f2f341aa41c
-  data.tar.gz: e7fcb412903e2f718aafa08288b3e059f1f2fe36764e11b2747a8a5c56d6138e
+  metadata.gz: 6a226c1c12aee43a0797ac73395608686c8d3af0c22d00ae91ae4a32963cdeab
+  data.tar.gz: 1aaac65edd8e5b056fa62e6a78038de56bbca3bec7191431ed164d07db93bba4
 SHA512:
-  metadata.gz: e196bc3ae6c8701e9ee04424ad1578675c1d87586ceb09d05ee779b2d78cacc58e1a4c2d462288b09931699a5ed05c9978d0efe2bd1c8f6992a9404912fd75e6
-  data.tar.gz: 10e500973b37a48f24b275d3aa2ceff00b9535210f4abdf245edc7b4bf72465386a98115060dab449640c2b46fbf6a1b83a4ae4a4080113a9842c669a7cfe4e6
+  metadata.gz: e033ff70444b1d95a997435ab995aea33648e2ac76ad3b28c0c5ee287519e812cadb4bd59f7b9d38d0e7fbe7ac56190c617599b8cc68291d5dcb4b067b718b88
+  data.tar.gz: 75e791c0ed1dfe955697c23505ccdb75f74c216b89adf5e021e66687e7329ebef33350cbc2f63cfe9411d735785d3f44a5a0b445017dc9136b8b4e83708b13b3

data/Gemfile

@@ -88,8 +88,8 @@ gem 'ruby-nmap', '1.0.3'
 gem 'ruby-saml', '1.18.1'
 gem 'rvm', '1.11.3.9'
 gem 'savon', '2.15.1'
-gem 'selenium-devtools', '0.141.0'
-gem 'selenium-webdriver', '4.37.0'
+gem 'selenium-devtools', '0.142.0'
+gem 'selenium-webdriver', '4.38.0'
 gem 'slack-ruby-client', '3.0.0'
 gem 'socksify', '1.8.1'
 gem 'spreadsheet', '1.3.4'

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.493]:001 >>> PWN.help
+pwn[v0.5.494]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.4.4@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.493]:001 >>> PWN.help
+pwn[v0.5.494]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.4.4@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.493]:001 >>> PWN.help
+pwn[v0.5.494]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/lib/pwn/plugins/transparent_browser.rb

@@ -1150,43 +1150,60 @@ module PWN
         devtools = browser_obj[:devtools]
         debugger_state = devtools.instance_variable_get(:@debugger_state)
 
+        method = nil
         case action
         when :enable
-          if debugger_state.is_a?(Hash)
-            debugger_state = devtools.instance_variable_get(:@debugger_state)
-            devtools.remove_instance_variable(:@debugger_state) if debugger_state.is_a?(Hash)
-            devtools.debugger.disable
+          while method != 'Debugger.scriptParsed'
+            if debugger_state.is_a?(Hash)
+              debugger_state = devtools.instance_variable_get(:@debugger_state)
+              devtools.remove_instance_variable(:@debugger_state) unless debugger_state.nil?
+              devtools.debugger.disable
+            end
+            debugger_state = {}
+            breakpoint_arr = []
+
+            devtools.debugger.enable
+            ws_msg = devtools_websocket_messages(browser_obj: browser_obj)
+            method = ws_msg['method']
+
+            bcmd = 'EventBreakpoints.setInstrumentationBreakpoint'
+            event = 'load'
+            breakpoint = devtools.send_cmd(bcmd, eventName: event)
+            breakpoint['result']['breakpointId'] = "#{bcmd}.#{event}.#{SecureRandom.uuid}"
+            # bcmd = 'Debugger.setInstrumentationBreakpoint'
+            # instrumentation = 'beforeScriptExecution'
+            # breakpoint = devtools.send_cmd(bcmd, instrumentation: instrumentation)
+            # breakpoint['result']['breakpointId'] = "#{bcmd}.#{instrumentation}.#{SecureRandom.uuid}"
+            breakpoint_arr.push(breakpoint)
+            debugger_state[:breakpoints] = breakpoint_arr
+
+            devtools.runtime.disable
+            devtools.log.disable
+            devtools.network.disable
+            devtools.page.disable
+            puts debugger_state.inspect
           end
-          debugger_state = {}
-          breakpoint_arr = []
-
-          # breakpoint = devtools.debugger.set_instrumentation_breakpoint(instrumentation: 'beforeScriptExecution')
-          bcmd = 'EventBreakpoints.setInstrumentationBreakpoint'
-          event = 'load'
-          breakpoint = devtools.send_cmd(bcmd, eventName: event)
-          breakpoint['result']['breakpointId'] = "#{bcmd}.#{event}.#{SecureRandom.uuid}"
-          breakpoint_arr.push(breakpoint)
-          debugger_state[:breakpoints] = breakpoint_arr
-
-          devtools.runtime.disable
-          devtools.log.disable
-          devtools.network.disable
-          devtools.page.disable
-          devtools.debugger.enable
         when :pause
-          devtools.debugger.pause
-          Timeout.timeout(5) { browser_obj[:browser].refresh }
+          while method != 'Debugger.paused'
+            Timeout.timeout(9) { browser_obj[:browser].refresh }
+            devtools.debugger.pause
+            ws_msg = devtools_websocket_messages(browser_obj: browser_obj)
+            method = ws_msg['method']
+          end
         when :resume
-          devtools.debugger.resume
+          while method != 'Debugger.resumed'
+            devtools.debugger.resume
+            ws_msg = devtools_websocket_messages(browser_obj: browser_obj)
+            method = ws_msg['method']
+          end
         when :disable
           debugger_state = devtools.instance_variable_get(:@debugger_state)
           devtools.remove_instance_variable(:@debugger_state) if debugger_state.is_a?(Hash)
           devtools.debugger.disable
         end
 
-        devtools_websocket_messages = devtools_websocket_messages(browser_obj: browser_obj)
-        debugger_state[:method] = devtools_websocket_messages['method']
-        devtools.instance_variable_set(:@debugger_state, debugger_state)
+        debugger_state[:method] = method
+        devtools.instance_variable_set(:@debugger_state, debugger_state) if debugger_state.is_a?(Hash)
         devtools
       rescue Timeout::Error
         devtools
@@ -1226,6 +1243,8 @@ module PWN
           return devtools
         end
 
+        system_role_content = 'Being an expert penetration tester skilled in code analysis, debugging, and exploitation while stepping through JavaScript in a Chrome DevTools debugging session:  1. Your sole purpose is to analyze each JavaScript step and generate an Exploit Prediction Scoring System (EPSS) score between 0% - 100%.  2. If the score is >= 75%, generate a JavaScript proof-of-concept that would allow a threat actor to directly exploit or target a user for exploitation (i.e. no self-exploit).  3. If the EPSS score is >= 75% also provide a code fix. *** If the EPSS score is < 75%, no explanations or summaries - just the EPSS score.'
+
         page_state_arr = []
         steps.times do |s|
           step_num = s + 1
@@ -1257,12 +1276,17 @@ module PWN
             source_lines = source_code.split("\n")
             source_lines_str = source_lines[from_line_num..to_line_num].join("\n")
             source_to_review = source_lines_str[from_column_num..to_column_num]
-
-            puts source_to_review
-            request = source_lines_str[from_column_num..to_column_num]
-            ai_analysis = PWN::AI::Introspection.reflect_on(request: request)
-            puts "^^^ #{ai_analysis}" unless ai_analysis.nil?
-            # gets
+            source_before = source_to_review.dup
+
+            if source_to_review.length.positive?
+              puts source_to_review
+              ai_analysis = PWN::AI::Introspection.reflect_on(
+                system_role_content: system_role_content,
+                request: source_to_review
+              )
+              puts "^^^ #{ai_analysis}" unless ai_analysis.nil?
+              # gets
+            end
           end
 
           case action
@@ -1299,12 +1323,17 @@ module PWN
             source_lines = source_code.split("\n")
             source_lines_str = source_lines[from_line_num..to_line_num].join("\n")
             source_to_review = source_lines_str[from_column_num..to_column_num]
-
-            puts source_to_review
-            request = source_lines_str[from_column_num..to_column_num]
-            ai_analysis = PWN::AI::Introspection.reflect_on(request: request)
-            puts "^^^ #{ai_analysis}" unless ai_analysis.nil?
-            # gets
+            source_after = source_to_review.dup
+
+            if source_to_review.length.positive? && source_to_review != source_before
+              puts source_to_review
+              ai_analysis = PWN::AI::Introspection.reflect_on(
+                system_role_content: system_role_content,
+                request: source_to_review
+              )
+              puts "^^^ #{ai_analysis}" unless ai_analysis.nil?
+              # gets
+            end
           end
           puts "\n" * 6
 

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.493'
+  VERSION = '0.5.494'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.493
+  version: 0.5.494
 platform: ruby
 authors:
 - 0day Inc.
@@ -1079,28 +1079,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.141.0
+        version: 0.142.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 0.141.0
+        version: 0.142.0
 - !ruby/object:Gem::Dependency
   name: selenium-webdriver
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.37.0
+        version: 4.38.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 4.37.0
+        version: 4.38.0
 - !ruby/object:Gem::Dependency
   name: slack-ruby-client
   requirement: !ruby/object:Gem::Requirement