aikido-zen 1.0.2.beta.2-aarch64-linux

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (116) hide show
  1. checksums.yaml +7 -0
  2. data/.aikido +6 -0
  3. data/.ruby-version +1 -0
  4. data/.simplecov +26 -0
  5. data/.standard.yml +3 -0
  6. data/LICENSE +674 -0
  7. data/README.md +146 -0
  8. data/Rakefile +67 -0
  9. data/benchmarks/README.md +23 -0
  10. data/benchmarks/rails7.1_sql_injection.js +70 -0
  11. data/docs/banner.svg +202 -0
  12. data/docs/config.md +125 -0
  13. data/docs/proxy.md +10 -0
  14. data/docs/rails.md +114 -0
  15. data/lib/aikido/zen/actor.rb +116 -0
  16. data/lib/aikido/zen/agent/heartbeats_manager.rb +66 -0
  17. data/lib/aikido/zen/agent.rb +179 -0
  18. data/lib/aikido/zen/api_client.rb +145 -0
  19. data/lib/aikido/zen/attack.rb +207 -0
  20. data/lib/aikido/zen/background_worker.rb +52 -0
  21. data/lib/aikido/zen/capped_collections.rb +68 -0
  22. data/lib/aikido/zen/collector/hosts.rb +15 -0
  23. data/lib/aikido/zen/collector/routes.rb +66 -0
  24. data/lib/aikido/zen/collector/sink_stats.rb +95 -0
  25. data/lib/aikido/zen/collector/stats.rb +111 -0
  26. data/lib/aikido/zen/collector/users.rb +30 -0
  27. data/lib/aikido/zen/collector.rb +144 -0
  28. data/lib/aikido/zen/config.rb +282 -0
  29. data/lib/aikido/zen/context/rack_request.rb +24 -0
  30. data/lib/aikido/zen/context/rails_request.rb +44 -0
  31. data/lib/aikido/zen/context.rb +112 -0
  32. data/lib/aikido/zen/detached_agent/agent.rb +78 -0
  33. data/lib/aikido/zen/detached_agent/front_object.rb +37 -0
  34. data/lib/aikido/zen/detached_agent/server.rb +78 -0
  35. data/lib/aikido/zen/detached_agent.rb +2 -0
  36. data/lib/aikido/zen/errors.rb +107 -0
  37. data/lib/aikido/zen/event.rb +71 -0
  38. data/lib/aikido/zen/internals.rb +103 -0
  39. data/lib/aikido/zen/libzen-v0.1.39-aarch64-linux.so +0 -0
  40. data/lib/aikido/zen/middleware/check_allowed_addresses.rb +26 -0
  41. data/lib/aikido/zen/middleware/middleware.rb +11 -0
  42. data/lib/aikido/zen/middleware/rack_throttler.rb +48 -0
  43. data/lib/aikido/zen/middleware/request_tracker.rb +192 -0
  44. data/lib/aikido/zen/middleware/set_context.rb +26 -0
  45. data/lib/aikido/zen/outbound_connection.rb +45 -0
  46. data/lib/aikido/zen/outbound_connection_monitor.rb +23 -0
  47. data/lib/aikido/zen/package.rb +22 -0
  48. data/lib/aikido/zen/payload.rb +50 -0
  49. data/lib/aikido/zen/rails_engine.rb +56 -0
  50. data/lib/aikido/zen/rate_limiter/breaker.rb +61 -0
  51. data/lib/aikido/zen/rate_limiter/bucket.rb +76 -0
  52. data/lib/aikido/zen/rate_limiter/result.rb +31 -0
  53. data/lib/aikido/zen/rate_limiter.rb +50 -0
  54. data/lib/aikido/zen/request/heuristic_router.rb +115 -0
  55. data/lib/aikido/zen/request/rails_router.rb +77 -0
  56. data/lib/aikido/zen/request/schema/auth_discovery.rb +86 -0
  57. data/lib/aikido/zen/request/schema/auth_schemas.rb +54 -0
  58. data/lib/aikido/zen/request/schema/builder.rb +121 -0
  59. data/lib/aikido/zen/request/schema/definition.rb +107 -0
  60. data/lib/aikido/zen/request/schema/empty_schema.rb +28 -0
  61. data/lib/aikido/zen/request/schema.rb +87 -0
  62. data/lib/aikido/zen/request.rb +122 -0
  63. data/lib/aikido/zen/route.rb +39 -0
  64. data/lib/aikido/zen/runtime_settings/endpoints.rb +49 -0
  65. data/lib/aikido/zen/runtime_settings/ip_set.rb +36 -0
  66. data/lib/aikido/zen/runtime_settings/protection_settings.rb +62 -0
  67. data/lib/aikido/zen/runtime_settings/rate_limit_settings.rb +47 -0
  68. data/lib/aikido/zen/runtime_settings.rb +65 -0
  69. data/lib/aikido/zen/scan.rb +75 -0
  70. data/lib/aikido/zen/scanners/path_traversal/helpers.rb +65 -0
  71. data/lib/aikido/zen/scanners/path_traversal_scanner.rb +63 -0
  72. data/lib/aikido/zen/scanners/shell_injection/helpers.rb +159 -0
  73. data/lib/aikido/zen/scanners/shell_injection_scanner.rb +64 -0
  74. data/lib/aikido/zen/scanners/sql_injection_scanner.rb +93 -0
  75. data/lib/aikido/zen/scanners/ssrf/dns_lookups.rb +27 -0
  76. data/lib/aikido/zen/scanners/ssrf/private_ip_checker.rb +97 -0
  77. data/lib/aikido/zen/scanners/ssrf_scanner.rb +265 -0
  78. data/lib/aikido/zen/scanners/stored_ssrf_scanner.rb +49 -0
  79. data/lib/aikido/zen/scanners.rb +7 -0
  80. data/lib/aikido/zen/sink.rb +118 -0
  81. data/lib/aikido/zen/sinks/action_controller.rb +83 -0
  82. data/lib/aikido/zen/sinks/async_http.rb +80 -0
  83. data/lib/aikido/zen/sinks/curb.rb +113 -0
  84. data/lib/aikido/zen/sinks/em_http.rb +83 -0
  85. data/lib/aikido/zen/sinks/excon.rb +118 -0
  86. data/lib/aikido/zen/sinks/file.rb +112 -0
  87. data/lib/aikido/zen/sinks/http.rb +93 -0
  88. data/lib/aikido/zen/sinks/httpclient.rb +95 -0
  89. data/lib/aikido/zen/sinks/httpx.rb +78 -0
  90. data/lib/aikido/zen/sinks/kernel.rb +33 -0
  91. data/lib/aikido/zen/sinks/mysql2.rb +31 -0
  92. data/lib/aikido/zen/sinks/net_http.rb +101 -0
  93. data/lib/aikido/zen/sinks/patron.rb +103 -0
  94. data/lib/aikido/zen/sinks/pg.rb +72 -0
  95. data/lib/aikido/zen/sinks/resolv.rb +62 -0
  96. data/lib/aikido/zen/sinks/socket.rb +78 -0
  97. data/lib/aikido/zen/sinks/sqlite3.rb +46 -0
  98. data/lib/aikido/zen/sinks/trilogy.rb +31 -0
  99. data/lib/aikido/zen/sinks/typhoeus.rb +78 -0
  100. data/lib/aikido/zen/sinks.rb +36 -0
  101. data/lib/aikido/zen/sinks_dsl.rb +250 -0
  102. data/lib/aikido/zen/synchronizable.rb +24 -0
  103. data/lib/aikido/zen/system_info.rb +84 -0
  104. data/lib/aikido/zen/version.rb +10 -0
  105. data/lib/aikido/zen/worker.rb +87 -0
  106. data/lib/aikido/zen.rb +246 -0
  107. data/lib/aikido-zen.rb +3 -0
  108. data/placeholder/.gitignore +4 -0
  109. data/placeholder/README.md +11 -0
  110. data/placeholder/Rakefile +75 -0
  111. data/placeholder/lib/placeholder.rb.template +3 -0
  112. data/placeholder/placeholder.gemspec.template +20 -0
  113. data/tasklib/bench.rake +94 -0
  114. data/tasklib/libzen.rake +133 -0
  115. data/tasklib/wrk.rb +88 -0
  116. metadata +205 -0
metadata ADDED
@@ -0,0 +1,205 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: aikido-zen
3
+ version: !ruby/object:Gem::Version
4
+ version: 1.0.2.beta.2
5
+ platform: aarch64-linux
6
+ authors:
7
+ - Aikido Security
8
+ autorequire:
9
+ bindir: exe
10
+ cert_chain: []
11
+ date: 2025-09-05 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: concurrent-ruby
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: '1.0'
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: '1.0'
27
+ force_ruby_platform: false
28
+ - !ruby/object:Gem::Dependency
29
+ name: rack
30
+ requirement: !ruby/object:Gem::Requirement
31
+ requirements:
32
+ - - ">="
33
+ - !ruby/object:Gem::Version
34
+ version: '0'
35
+ type: :runtime
36
+ prerelease: false
37
+ version_requirements: !ruby/object:Gem::Requirement
38
+ requirements:
39
+ - - ">="
40
+ - !ruby/object:Gem::Version
41
+ version: '0'
42
+ force_ruby_platform: false
43
+ - !ruby/object:Gem::Dependency
44
+ name: ffi
45
+ requirement: !ruby/object:Gem::Requirement
46
+ requirements:
47
+ - - ">="
48
+ - !ruby/object:Gem::Version
49
+ version: '0'
50
+ type: :runtime
51
+ prerelease: false
52
+ version_requirements: !ruby/object:Gem::Requirement
53
+ requirements:
54
+ - - ">="
55
+ - !ruby/object:Gem::Version
56
+ version: '0'
57
+ force_ruby_platform: false
58
+ description: Zen by Aikido is an embedded Web Application Firewall that autonomously
59
+ protects Ruby apps against common and critical attacks.
60
+ email:
61
+ - dev-admin@aikido.dev
62
+ executables: []
63
+ extensions: []
64
+ extra_rdoc_files: []
65
+ files:
66
+ - ".aikido"
67
+ - ".ruby-version"
68
+ - ".simplecov"
69
+ - ".standard.yml"
70
+ - LICENSE
71
+ - README.md
72
+ - Rakefile
73
+ - benchmarks/README.md
74
+ - benchmarks/rails7.1_sql_injection.js
75
+ - docs/banner.svg
76
+ - docs/config.md
77
+ - docs/proxy.md
78
+ - docs/rails.md
79
+ - lib/aikido-zen.rb
80
+ - lib/aikido/zen.rb
81
+ - lib/aikido/zen/actor.rb
82
+ - lib/aikido/zen/agent.rb
83
+ - lib/aikido/zen/agent/heartbeats_manager.rb
84
+ - lib/aikido/zen/api_client.rb
85
+ - lib/aikido/zen/attack.rb
86
+ - lib/aikido/zen/background_worker.rb
87
+ - lib/aikido/zen/capped_collections.rb
88
+ - lib/aikido/zen/collector.rb
89
+ - lib/aikido/zen/collector/hosts.rb
90
+ - lib/aikido/zen/collector/routes.rb
91
+ - lib/aikido/zen/collector/sink_stats.rb
92
+ - lib/aikido/zen/collector/stats.rb
93
+ - lib/aikido/zen/collector/users.rb
94
+ - lib/aikido/zen/config.rb
95
+ - lib/aikido/zen/context.rb
96
+ - lib/aikido/zen/context/rack_request.rb
97
+ - lib/aikido/zen/context/rails_request.rb
98
+ - lib/aikido/zen/detached_agent.rb
99
+ - lib/aikido/zen/detached_agent/agent.rb
100
+ - lib/aikido/zen/detached_agent/front_object.rb
101
+ - lib/aikido/zen/detached_agent/server.rb
102
+ - lib/aikido/zen/errors.rb
103
+ - lib/aikido/zen/event.rb
104
+ - lib/aikido/zen/internals.rb
105
+ - lib/aikido/zen/libzen-v0.1.39-aarch64-linux.so
106
+ - lib/aikido/zen/middleware/check_allowed_addresses.rb
107
+ - lib/aikido/zen/middleware/middleware.rb
108
+ - lib/aikido/zen/middleware/rack_throttler.rb
109
+ - lib/aikido/zen/middleware/request_tracker.rb
110
+ - lib/aikido/zen/middleware/set_context.rb
111
+ - lib/aikido/zen/outbound_connection.rb
112
+ - lib/aikido/zen/outbound_connection_monitor.rb
113
+ - lib/aikido/zen/package.rb
114
+ - lib/aikido/zen/payload.rb
115
+ - lib/aikido/zen/rails_engine.rb
116
+ - lib/aikido/zen/rate_limiter.rb
117
+ - lib/aikido/zen/rate_limiter/breaker.rb
118
+ - lib/aikido/zen/rate_limiter/bucket.rb
119
+ - lib/aikido/zen/rate_limiter/result.rb
120
+ - lib/aikido/zen/request.rb
121
+ - lib/aikido/zen/request/heuristic_router.rb
122
+ - lib/aikido/zen/request/rails_router.rb
123
+ - lib/aikido/zen/request/schema.rb
124
+ - lib/aikido/zen/request/schema/auth_discovery.rb
125
+ - lib/aikido/zen/request/schema/auth_schemas.rb
126
+ - lib/aikido/zen/request/schema/builder.rb
127
+ - lib/aikido/zen/request/schema/definition.rb
128
+ - lib/aikido/zen/request/schema/empty_schema.rb
129
+ - lib/aikido/zen/route.rb
130
+ - lib/aikido/zen/runtime_settings.rb
131
+ - lib/aikido/zen/runtime_settings/endpoints.rb
132
+ - lib/aikido/zen/runtime_settings/ip_set.rb
133
+ - lib/aikido/zen/runtime_settings/protection_settings.rb
134
+ - lib/aikido/zen/runtime_settings/rate_limit_settings.rb
135
+ - lib/aikido/zen/scan.rb
136
+ - lib/aikido/zen/scanners.rb
137
+ - lib/aikido/zen/scanners/path_traversal/helpers.rb
138
+ - lib/aikido/zen/scanners/path_traversal_scanner.rb
139
+ - lib/aikido/zen/scanners/shell_injection/helpers.rb
140
+ - lib/aikido/zen/scanners/shell_injection_scanner.rb
141
+ - lib/aikido/zen/scanners/sql_injection_scanner.rb
142
+ - lib/aikido/zen/scanners/ssrf/dns_lookups.rb
143
+ - lib/aikido/zen/scanners/ssrf/private_ip_checker.rb
144
+ - lib/aikido/zen/scanners/ssrf_scanner.rb
145
+ - lib/aikido/zen/scanners/stored_ssrf_scanner.rb
146
+ - lib/aikido/zen/sink.rb
147
+ - lib/aikido/zen/sinks.rb
148
+ - lib/aikido/zen/sinks/action_controller.rb
149
+ - lib/aikido/zen/sinks/async_http.rb
150
+ - lib/aikido/zen/sinks/curb.rb
151
+ - lib/aikido/zen/sinks/em_http.rb
152
+ - lib/aikido/zen/sinks/excon.rb
153
+ - lib/aikido/zen/sinks/file.rb
154
+ - lib/aikido/zen/sinks/http.rb
155
+ - lib/aikido/zen/sinks/httpclient.rb
156
+ - lib/aikido/zen/sinks/httpx.rb
157
+ - lib/aikido/zen/sinks/kernel.rb
158
+ - lib/aikido/zen/sinks/mysql2.rb
159
+ - lib/aikido/zen/sinks/net_http.rb
160
+ - lib/aikido/zen/sinks/patron.rb
161
+ - lib/aikido/zen/sinks/pg.rb
162
+ - lib/aikido/zen/sinks/resolv.rb
163
+ - lib/aikido/zen/sinks/socket.rb
164
+ - lib/aikido/zen/sinks/sqlite3.rb
165
+ - lib/aikido/zen/sinks/trilogy.rb
166
+ - lib/aikido/zen/sinks/typhoeus.rb
167
+ - lib/aikido/zen/sinks_dsl.rb
168
+ - lib/aikido/zen/synchronizable.rb
169
+ - lib/aikido/zen/system_info.rb
170
+ - lib/aikido/zen/version.rb
171
+ - lib/aikido/zen/worker.rb
172
+ - placeholder/.gitignore
173
+ - placeholder/README.md
174
+ - placeholder/Rakefile
175
+ - placeholder/lib/placeholder.rb.template
176
+ - placeholder/placeholder.gemspec.template
177
+ - tasklib/bench.rake
178
+ - tasklib/libzen.rake
179
+ - tasklib/wrk.rb
180
+ homepage: https://aikido.dev/zen
181
+ licenses:
182
+ - AGPL-3.0-or-later
183
+ metadata:
184
+ homepage_uri: https://aikido.dev/zen
185
+ source_code_uri: https://github.com/aikidosec/firewall-ruby
186
+ post_install_message:
187
+ rdoc_options: []
188
+ require_paths:
189
+ - lib
190
+ required_ruby_version: !ruby/object:Gem::Requirement
191
+ requirements:
192
+ - - ">="
193
+ - !ruby/object:Gem::Version
194
+ version: '2.7'
195
+ required_rubygems_version: !ruby/object:Gem::Requirement
196
+ requirements:
197
+ - - ">="
198
+ - !ruby/object:Gem::Version
199
+ version: '0'
200
+ requirements: []
201
+ rubygems_version: 3.5.22
202
+ signing_key:
203
+ specification_version: 4
204
+ summary: Embedded Web Application Firewall.
205
+ test_files: []