pwn_bdba_scan Driver - #bugfix when looking for parent id of file name that contains non-conforming HTTP chars (e.g. SPACES)

Author: ninp0

Gemfile

@@ -18,7 +18,7 @@ gem 'aws-sdk', '3.1.0'
 # gem 'bettercap', '1.6.2'
 gem 'brakeman', '6.0.0'
 gem 'bson', '4.15.0'
-gem 'bundler', '>=2.4.15'
+gem 'bundler', '>=2.4.16'
 gem 'bundler-audit', '0.9.1'
 gem 'bunny', '2.22.0'
 gem 'colorize', '1.1.0'

README.md

@@ -37,7 +37,7 @@ $ rvm use ruby-3.2.2@pwn
 $ rvm list gemsets
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.788]:001 >>> PWN.help
+pwn[v0.4.789]:001 >>> PWN.help
 ```
 
 [![Installing the pwn Security Automation Framework](https://raw.githubusercontent.com/0dayInc/pwn/master/documentation/pwn_install.png)](https://youtu.be/G7iLUY4FzsI)
@@ -52,7 +52,7 @@ $ rvm use ruby-3.2.2@pwn
 $ gem uninstall --all --executables pwn
 $ gem install --verbose pwn
 $ pwn
-pwn[v0.4.788]:001 >>> PWN.help
+pwn[v0.4.789]:001 >>> PWN.help
 ```
 
 

bin/pwn_bdba_scan

@@ -1,6 +1,7 @@
 #!/usr/bin/env ruby
 # frozen_string_literal: false
 
+require 'cgi'
 require 'optparse'
 require 'pwn'
 require 'yaml'
@@ -101,7 +102,7 @@ begin
     break if scan_progress_resp[:products].none? { |p| p[:status] == 'B' }
   end
 
-  product_id = scan_progress_resp[:products].find { |p| p[:name] == File.basename(target_file) }[:product_id]
+  product_id = scan_progress_resp[:products].find { |p| p[:name] == File.basename(CGI.escape(target_file)) }[:product_id]
 
   scan_report_resp = PWN::Plugins::BlackDuckBinaryAnalysis.generate_product_report(
     token: token,

lib/pwn/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module PWN
-  VERSION = '0.4.788'
+  VERSION = '0.4.789'
 end