pwn 0.5.66 → 0.5.67

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9943bae307e743e8dbb7bdb1a1ccdd1c0b61f29e8413bceb25350fc6023fd289
-  data.tar.gz: 2f32981b889d1e6e21591094b4781162239c36e7b67f7cd0e91eab0c5c400ed1
+  metadata.gz: 8fd794ce6149bca1bcacf6eb83e4116d26dddad3f7007829cec0ff4520eb9f59
+  data.tar.gz: 056c7e6727ec6afb5ec98563b912ab65fdca366067296f0aa12501d5d7ae63d1
 SHA512:
-  metadata.gz: 58eacda5cce4074c84615d5aee751ef4f642185521b641798563bbed6eb7348cf8a6cee5fe261084784b9c646a3c6cdddca8004f8fb157173861c75ea9e3d637
-  data.tar.gz: 958c25709cc837206df7d2890e06e2604a7d27fd61e97b30a48fe561306aacef3348d4e24f7eb23699ed371019adc28f31d688995f0451d414416b8992109226
+  metadata.gz: 0764f4c9956e10475675ed33769d07b94ba19090c2db59937ff45ed1f110dad1860a6c02b8eaca71d7e5269dacb4c460472777dfb3285d2ec963c4a0c59975e2
+  data.tar.gz: 651a021f5476d9e6735c08f126411c23c6cfba3b0d9455ad1561b0fa9a46793f1c1b4bf6025a49f1d0c50f557ed9e150cd339aefed44003298a5f3100fa85e94

data/README.md

@@ -37,7 +37,7 @@ $ cd /opt/pwn
 $ ./install.sh
 $ ./install.sh ruby-gem
 $ pwn
-pwn[v0.5.66]:001 >>> PWN.help
+pwn[v0.5.67]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.3.0@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.5.66]:001 >>> PWN.help
+pwn[v0.5.67]:001 >>> PWN.help
 ```
 
 If you're using a multi-user install of RVM do:
@@ -62,7 +62,7 @@ $ rvm use ruby-3.3.0@pwn
 $ rvmsudo gem uninstall --all --executables pwn
 $ rvmsudo gem install --verbose pwn
 $ pwn
-pwn[v0.5.66]:001 >>> PWN.help
+pwn[v0.5.67]:001 >>> PWN.help
 ```
 
 PWN periodically upgrades to the latest version of Ruby which is reflected in `/opt/pwn/.ruby-version`.  The easiest way to upgrade to the latest version of Ruby from a previous PWN installation is to run the following script:

data/bin/pwn

@@ -1,7 +1,6 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: true
 
-require 'base64'
 require 'optparse'
 require 'pwn'
 require 'pry'
@@ -32,24 +31,6 @@ OptionParser.new do |options|
 end.parse!
 
 begin
-  def yaml_config_encrypted?(opts = {})
-    config = opts[:config]
-
-    config_contents = File.read(config)
-    config_contents.is_a?(String) && Base64.strict_encode64(Base64.decode64(config_contents)) == config_contents
-  end
-
-  def cleanup_pids(opts = {})
-    pids_arr = opts[:pids_arr]
-
-    pids_arr.each do |pid_line|
-      pid = pid_line[2].to_i
-      Process.kill('TERM', pid)
-    rescue Errno::ESRCH
-      next
-    end
-  end
-
   def refresh_ps1_proc(opts = {})
     mode = opts[:mode]
 
@@ -90,7 +71,7 @@ begin
     end
   end
 
-  # Pry Monkey Patches \_(oo)_/
+  # Pry Monkey Patches \_(--)_/
   class Pry
     # Overwrite Pry::History.push method in History class to get duplicate history entries
     # in order to properly replay automation in this prototyping driver
@@ -308,7 +289,7 @@ begin
   Pry.config.hooks.add_hook(:before_session, :init_opts) do |_output, _binding, pi|
     if opts[:yaml_config_path] && File.exist?(opts[:yaml_config_path])
       yaml_config_path = opts[:yaml_config_path]
-      is_encrypted = yaml_config_encrypted?(config: yaml_config_path)
+      is_encrypted = PWN::Plugins::Vault.file_encrypted?(file: yaml_config_path)
 
       if is_encrypted
         # TODO: Implement "something you know, something you have, && something you are?"
@@ -321,12 +302,12 @@ begin
         iv = opts[:iv] ||= yaml_decryptor[:iv] ||= ENV.fetch('PWN_DECRYPTOR_IV')
         iv = PWN::Plugins::AuthenticationHelper.mask_password(prompt: 'Decryption IV') if iv.nil?
 
-        encrypted_config_dump = PWN::Plugins::Vault.dump(
+        decrypted_yaml_config = PWN::Plugins::Vault.dump(
           file: yaml_config_path,
           key: key,
           iv: iv
         )
-        yaml_config = YAML.load(encrypted_config_dump, symbolize_names: true)
+        yaml_config = YAML.load(decrypted_yaml_config, symbolize_names: true)
       else
         yaml_config = YAML.load_file(yaml_config_path, symbolize_names: true)
       end
@@ -439,6 +420,6 @@ ensure
   end
   # pp grandkid_pids_arr
 
-  cleanup_pids(pids_arr: grandkid_pids_arr)
-  cleanup_pids(pids_arr: kid_pids_arr)
+  PWN::Plugins::PS.cleanup_pids(pids_arr: grandkid_pids_arr)
+  PWN::Plugins::PS.cleanup_pids(pids_arr: kid_pids_arr)
 end

data/lib/pwn/plugins/ps.rb

@@ -47,6 +47,23 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::PS.cleanup_pids(
+      #   pids_arr: 'required - array of pids to kill'
+      # )
+      public_class_method def self.cleanup_pids(opts = {})
+        pids_arr = opts[:pids_arr]
+
+        pids_arr.each do |pid_line|
+          pid = pid_line[2].to_i
+          Process.kill('TERM', pid)
+        rescue Errno::ESRCH
+          next
+        end
+      rescue StandardError => e
+        raise e
+      end
+
       # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
 
       public_class_method def self.authors
@@ -61,6 +78,10 @@ module PWN
         puts "USAGE:
           proc_list_arr = #{self}.list
 
+          #{self}.cleanup_pids(
+            pids_arr: 'required - array of pids to kill'
+          )
+
           #{self}.authors
         "
       end

data/lib/pwn/plugins/vault.rb

@@ -184,6 +184,21 @@ module PWN
         raise e
       end
 
+      # Supported Method Parameters::
+      # PWN::Plugins::Vault.file_encrypted?(
+      #   file: 'required - file to check if encrypted'
+      # )
+      public_class_method def self.file_encrypted?(opts = {})
+        file = opts[:file].to_s.scrub if File.exist?(opts[:file].to_s.scrub)
+
+        raise 'ERROR: File does not exist.' unless File.exist?(file)
+
+        file_contents = File.read(file)
+        file_contents.is_a?(String) && Base64.strict_encode64(Base64.strict_decode64(file_contents)) == file_contents
+      rescue StandardError => e
+        raise e
+      end
+
       # Author(s):: 0day Inc. <request.pentest@0dayinc.com>
 
       public_class_method def self.authors
@@ -231,6 +246,10 @@ module PWN
             iv: 'required - iv to decrypt'
           )
 
+          #{self}.file_encrypted?(
+            file: 'required - file to check if encrypted'
+          )
+
           #{self}.authors
         "
       end

data/lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.5.66'
+  VERSION = '0.5.67'
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: pwn
 version: !ruby/object:Gem::Version
-  version: 0.5.66
+  version: 0.5.67
 platform: ruby
 authors:
 - 0day Inc.