pwn 0.5.719 → 0.5.720

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 898622177b06081e32121144c9ae5461d510482e70a85b62de425967933e4e24
-  data.tar.gz: ddfe5cac2e3db9bab8ab9cafdb1f48a2e2191545a2d0ad5bb7245cb7f45ab45f
+  metadata.gz: 0dd0d654d48c9ead7f9a92893f88443e1cfd7cd9a867c53cb2ffc25cbb60fe27
+  data.tar.gz: 3960e8501cbd0139184cd0981569a28a4f9b37e47ddddeb5dab001b2d0eefb1b
 SHA512:
-  metadata.gz: 2751aa2984fe13fe852a6f12577bd840f097e5d84f240a05642e374938bbf8fe9095dcaee15a607b0b1c3c4b90d65b787f041ffbda26ec3868f26f68a400b28b
-  data.tar.gz: db70fe6f75eaa22625849d30ab0e1a73dec982e160db005cce3096e625346eaea5d68653a4fb27a6e452f4ba01c63ab0313a5bd484b54a874f95bf44944ea149
+  metadata.gz: defca7be52f6960bbaa318f5e40e4927cafa8a1e679ce27dd8e74b73feae4b89a9766b725a5731b2e2fa5a8e93c58a2fa3622f0c37df6b0355bf6b12e9affbae
+  data.tar.gz: 29de8ee9497ec7004c4752ddaf3fc359016c6007368e051e891e191ad18bf069a3a44d32aa73ed480dc60cb30bba46551efa2f636009b8d50752e0101917900b

data/etc/default_skills/pwn/ai/agent/engagement/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: pwn-ai-agent-engagement
+description: Drive PWN::AI::Agent::Engagement from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::AI::Agent::Engagement
+  source: pwn/ai/agent/engagement.rb
+---
+
+# PWN::AI::Agent::Engagement
+
+First-class engagement scope, RoE, and findings pointer.
+
+## When to use
+
+Call `PWN::AI::Agent::Engagement` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/agent/engagement.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::AI::Agent::Engagement.help
+PWN::AI::Agent::Engagement.open(opts)
+```
+
+## Public methods
+
+- `open`
+- `close`
+- `status`
+- `current_name`
+- `in_scope`
+- `deny_if_out_of_scope`
+- `authors`
+- `help`
+- `in_scope?`
+
+## Source
+
+`pwn/ai/agent/engagement.rb`
+
+## Verification
+
+`PWN::AI::Agent::Engagement.respond_to?(:open)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/agent/learning/SKILL.md

@@ -54,8 +54,12 @@ PWN::AI::Agent::Learning.note_outcome(opts)
 - `lesson_record`
 - `lesson_observe`
 - `lesson_prompt`
+- `list_conflicted`
+- `requeue_conflicted`
+- `compact`
 - `authors`
 - `help`
+- `compact!`
 - `gc_stores!`
 - `lean!`
 - `prune_outcomes!`

data/etc/default_skills/pwn/ai/agent/loop/SKILL.md

@@ -41,6 +41,7 @@ PWN::AI::Agent::Loop.debug_on(opts)
 - `openai_wire_messages`
 - `request_intent`
 - `run`
+- `budget_status`
 - `authors`
 - `help`
 - `catalog_lookup?`

data/etc/default_skills/pwn/ai/agent/swarm/SKILL.md

@@ -46,6 +46,7 @@ PWN::AI::Agent::Swarm.personas(opts)
 - `map_targets`
 - `fact_record`
 - `facts_prompt`
+- `claim`
 - `authors`
 - `help`
 

data/etc/default_skills/pwn/ai/agent/tool_guard/SKILL.md

@@ -60,6 +60,7 @@ PWN::AI::Agent::ToolGuard.present(opts)
 - `timeout_prior_count`
 - `refuse_copied_persist`
 - `scope_refusal`
+- `policy_decision`
 - `rfc1918`
 - `ip_in_cidr`
 - `command_class`

data/etc/default_skills/pwn/ai/agent/tools/debug_lane/SKILL.md

@@ -0,0 +1,45 @@
+---
+name: pwn-ai-agent-tools-debuglane
+description: Drive PWN::Ai::Agent::Tools::DebugLane from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Ai::Agent::Tools::DebugLane
+  source: pwn/ai/agent/tools/debug_lane.rb
+---
+
+# PWN::Ai::Agent::Tools::DebugLane
+
+Public API for PWN::Ai::Agent::Tools::DebugLane.
+
+## When to use
+
+Call `PWN::Ai::Agent::Tools::DebugLane` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/agent/tools/debug_lane.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Ai::Agent::Tools::DebugLane.help
+PWN::Ai::Agent::Tools::DebugLane.help(opts)
+```
+
+## Public methods
+
+- _(no public class methods parsed)_
+
+## Source
+
+`pwn/ai/agent/tools/debug_lane.rb`
+
+## Verification
+
+`PWN::Ai::Agent::Tools::DebugLane.respond_to?(:help)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/agent/tools/engagement/SKILL.md

@@ -0,0 +1,45 @@
+---
+name: pwn-ai-agent-tools-engagement
+description: Drive PWN::Ai::Agent::Tools::Engagement from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Ai::Agent::Tools::Engagement
+  source: pwn/ai/agent/tools/engagement.rb
+---
+
+# PWN::Ai::Agent::Tools::Engagement
+
+Public API for PWN::Ai::Agent::Tools::Engagement.
+
+## When to use
+
+Call `PWN::Ai::Agent::Tools::Engagement` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/ai/agent/tools/engagement.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Ai::Agent::Tools::Engagement.help
+PWN::Ai::Agent::Tools::Engagement.help(opts)
+```
+
+## Public methods
+
+- _(no public class methods parsed)_
+
+## Source
+
+`pwn/ai/agent/tools/engagement.rb`
+
+## Verification
+
+`PWN::Ai::Agent::Tools::Engagement.respond_to?(:help)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/ai/agent/turn_finalizer/SKILL.md

@@ -41,6 +41,8 @@ PWN::AI::Agent::TurnFinalizer.enter_user_path(opts)
 - `finalize`
 - `join_all`
 - `pending`
+- `arbitrate`
+- `evidence_ledger`
 - `authors`
 - `help`
 - `enter_user_path!`

data/etc/default_skills/pwn/plugins/bin_workspace/SKILL.md

@@ -0,0 +1,49 @@
+---
+name: pwn-plugins-binworkspace
+description: Drive PWN::Plugins::BinWorkspace from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::BinWorkspace
+  source: pwn/plugins/bin_workspace.rb
+---
+
+# PWN::Plugins::BinWorkspace
+
+Persistent per-binary analysis workspace keyed by sha256.
+
+## When to use
+
+Call `PWN::Plugins::BinWorkspace` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/bin_workspace.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::BinWorkspace.help
+PWN::Plugins::BinWorkspace.for(opts)
+```
+
+## Public methods
+
+- `for`
+- `annotate`
+- `notes`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/bin_workspace.rb`
+
+## Verification
+
+`PWN::Plugins::BinWorkspace.respond_to?(:for)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/binary_parser/SKILL.md

@@ -42,6 +42,7 @@ PWN::Plugins::BinaryParser.required_bins(opts)
 - `exports`
 - `relocations`
 - `triage`
+- `diff`
 - `authors`
 - `help`
 

data/etc/default_skills/pwn/plugins/capability/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: pwn-plugins-capability
+description: Drive PWN::Plugins::Capability from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Capability
+  source: pwn/plugins/capability.rb
+---
+
+# PWN::Plugins::Capability
+
+Operator-approved capability elevation (never auto-sudo).
+
+## When to use
+
+Call `PWN::Plugins::Capability` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/capability.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Capability.help
+PWN::Plugins::Capability.request(opts)
+```
+
+## Public methods
+
+- `request`
+- `grantable_caps`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/capability.rb`
+
+## Verification
+
+`PWN::Plugins::Capability.respond_to?(:request)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/detonate/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-plugins-detonate
+description: Drive PWN::Plugins::Detonate from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Detonate
+  source: pwn/plugins/detonate.rb
+---
+
+# PWN::Plugins::Detonate
+
+Isolated sample detonation. Refuses if podman/isolation is missing.
+
+## When to use
+
+Call `PWN::Plugins::Detonate` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/detonate.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Detonate.help
+PWN::Plugins::Detonate.detonate(opts)
+```
+
+## Public methods
+
+- `detonate`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/detonate.rb`
+
+## Verification
+
+`PWN::Plugins::Detonate.respond_to?(:detonate)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/emulator/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-plugins-emulator
+description: Drive PWN::Plugins::Emulator from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Plugins::Emulator
+  source: pwn/plugins/emulator.rb
+---
+
+# PWN::Plugins::Emulator
+
+Unicorn-backed single-function emulation with a stub backend for tests.
+
+## When to use
+
+Call `PWN::Plugins::Emulator` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/plugins/emulator.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Plugins::Emulator.help
+PWN::Plugins::Emulator.emulate(opts)
+```
+
+## Public methods
+
+- `emulate`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/plugins/emulator.rb`
+
+## Verification
+
+`PWN::Plugins::Emulator.respond_to?(:emulate)` after the
+module is loaded. Read the source for parameter names.

data/etc/default_skills/pwn/plugins/findings/SKILL.md

@@ -35,6 +35,7 @@ PWN::Plugins::Findings.required_bins(opts)
 
 - `required_bins`
 - `record`
+- `evidence_verify`
 - `report`
 - `query`
 - `chain`

data/etc/default_skills/pwn/plugins/gdb/SKILL.md

@@ -40,6 +40,8 @@ PWN::Plugins::GDB.required_bins(opts)
 - `mitigations`
 - `core`
 - `breakpoints`
+- `crash_info`
+- `debug_session`
 - `authors`
 - `help`
 

data/etc/default_skills/pwn/plugins/packet/SKILL.md

@@ -44,6 +44,7 @@ PWN::Plugins::Packet.open_pcap_file(opts)
 - `construct_tcp`
 - `construct_udp`
 - `send`
+- `tcp_connect_scan`
 - `authors`
 - `help`
 

data/etc/default_skills/pwn/plugins/repl/SKILL.md

@@ -56,6 +56,7 @@ PWN::Plugins::REPL.ready_tty(opts)
 - `pwn_ai_run_cron`
 - `pwn_ai_run_sessions`
 - `pwn_ai_run_memory`
+- `pwn_ai_run_learning`
 - `pwn_ai_run_skills`
 - `enable_autocomplete`
 - `start`

data/etc/default_skills/pwn/plugins/vault/SKILL.md

@@ -40,6 +40,10 @@ PWN::Plugins::Vault.refresh_encryption_secrets(opts)
 - `edit`
 - `encrypt`
 - `file_encrypted`
+- `store`
+- `fetch`
+- `expand`
+- `redact`
 - `authors`
 - `help`
 - `file_encrypted?`

data/etc/default_skills/pwn/reports/engagement/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: pwn-reports-engagement
+description: Drive PWN::Reports::Engagement from pwn_eval.
+license: MIT
+allowed-tools: [pwn, pwn_eval]
+metadata:
+  bundled: true
+  generated: true
+  module: PWN::Reports::Engagement
+  source: pwn/reports/engagement.rb
+---
+
+# PWN::Reports::Engagement
+
+Compile engagement findings into a client-ready HTML/Markdown report.
+
+## When to use
+
+Call `PWN::Reports::Engagement` from `pwn_eval` when the task needs this module.
+Do not reimplement it in shell.
+
+## Methodologies
+
+Generated from `pwn/reports/engagement.rb`. Prefer the public class methods below.
+Class methods take `(opts = {})` and read `opts`.
+
+## How to call
+
+```ruby
+PWN::Reports::Engagement.help
+PWN::Reports::Engagement.generate(opts)
+```
+
+## Public methods
+
+- `generate`
+- `authors`
+- `help`
+
+## Source
+
+`pwn/reports/engagement.rb`
+
+## Verification
+
+`PWN::Reports::Engagement.respond_to?(:generate)` after the
+module is loaded. Read the source for parameter names.

data/lib/pwn/ai/agent/dispatch.rb

@@ -46,6 +46,20 @@ module PWN
           args = parse_args(raw: raw, entry: entry)
           required = Array(entry.schema&.dig(:parameters, :required))
           args = ToolGuard.coerce_args(args: args, required: required) if defined?(ToolGuard)
+          blob = args.inspect
+          if defined?(PWN::Plugins::Vault)
+            blob = PWN::Plugins::Vault.expand(text: blob)
+            args = expand_vault_args(args: args)
+          end
+          if defined?(Engagement)
+            denied = Engagement.deny_if_out_of_scope(args: args, command: blob)
+            return JSON.generate(denied) if denied
+          end
+          if defined?(ToolGuard) && ToolGuard.respond_to?(:policy_decision)
+            pol = ToolGuard.policy_decision(name: entry.name, args: args)
+            return JSON.generate(pol) if pol.is_a?(Hash) && pol[:action] == 'deny'
+          end
+          return JSON.generate(success: false, error: 'taint: tool-output instruction in args', code: 'TAINT_DENY') if taint_blocked?(name: entry.name, args: args)
           if defined?(ToolGuard) && ToolGuard.respond_to?(:canary_leak?) &&
              ToolGuard.canary_leak?(text: args.inspect)
             return JSON.generate(success: false, error: 'refused: session canary in outbound args', code: 'CANARY_DENY', rule_id: 'canary')
@@ -59,6 +73,12 @@ module PWN
           end
           result = entry.handler.call(args)
           result = ToolGuard.quarantine_output(text: result) if defined?(ToolGuard) && result.is_a?(String) && ToolGuard.respond_to?(:quarantine_output)
+          note_taint(text: result)
+          if defined?(PWN::Plugins::Vault) && result.is_a?(String)
+            result = PWN::Plugins::Vault.redact(text: result)
+          elsif defined?(PWN::Plugins::Vault) && result.is_a?(Hash)
+            result = JSON.parse(PWN::Plugins::Vault.redact(text: JSON.generate(result)))
+          end
           JSON.generate(success: true, result: result, effect: effect(name: entry.name, args: args))
         rescue StandardError => e
           JSON.generate(
@@ -348,6 +368,53 @@ module PWN
           hash.each_with_object({}) { |(k, v), m| m[k.to_sym] = v }
         end
 
+        private_class_method def self.expand_vault_args(opts = {})
+          args = opts[:args]
+          return args unless args.is_a?(Hash)
+
+          args.transform_values do |v|
+            v.is_a?(String) ? PWN::Plugins::Vault.expand(text: v) : v
+          end
+        rescue StandardError
+          opts[:args]
+        end
+
+        private_class_method def self.note_taint(opts = {})
+          text = opts[:text].to_s
+          grams = text.scan(/.{12,}/).first(20)
+          store = Thread.current[:pwn_taint] ||= []
+          grams.each { |g| store << g[0, 64] }
+          store.shift while store.length > 200
+          store
+        end
+
+        private_class_method def self.taint_blocked?(opts = {})
+          mode = taint_mode
+          return false if mode == 'off'
+
+          blob = opts[:args].inspect
+          return false if blob.length < 12
+          return false if opts[:args].is_a?(Hash) && (opts[:args][:taint_ack] == true || opts[:args]['taint_ack'] == true)
+
+          hit = Array(Thread.current[:pwn_taint]).any? { |g| g.length >= 12 && blob.include?(g) }
+          return false unless hit
+          return false unless blob.match?(/curl |bash -c|sh -c|\|\s*sh\b/i)
+
+          mode == 'enforce'
+        rescue StandardError
+          false
+        end
+
+        private_class_method def self.taint_mode(opts = {})
+          override = opts[:mode]
+          return override.to_s unless override.to_s.empty?
+          return 'enforce' unless defined?(PWN::Env)
+
+          (PWN::Env.dig(:ai, :taint, :mode) || 'enforce').to_s
+        rescue StandardError
+          'enforce'
+        end
+
         # Author(s):: 0day Inc. <support@0dayinc.com>
 
         public_class_method def self.authors