module PWN::Plugins::AnsibleVault

def self.authors
st.pentest@0dayinc.com>

def self.decrypt(opts = {})
[:yaml_config].to_s.scrub if File.exist?(opts[:yaml_config].to_s.scrub)
vpassfile].to_s.scrub if File.exist?(opts[:vpassfile].to_s.scrub)
ml_config) == '.yaml'
ML.safe_load(`sudo ansible-vault view #{yaml_config} --vault-password-file #{vpassfile}`)
udo ansible-vault view #{yaml_config} --vault-password-file #{vpassfile}`
 => e

def self.encrypt(opts = {})
[:yaml_config].to_s.scrub if File.exist?(opts[:yaml_config].to_s.scrub)
vpassfile].to_s.scrub if File.exist?(opts[:vpassfile].to_s.scrub)
t encrypt #{yaml_config} --vault-password-file #{vpassfile}`
 => e

def self.help

required - yaml config to encrypt',
quired - path to anisble-vault pass file'

required - yaml config to decrypt',
quired - path to anisble-vault pass file'