ctf-party 3.0.0 → 5.0.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6d68a7baddadfc1c9adb8db3c60d0fce83aa75017f49d6168d3e03139f9f9e85
-  data.tar.gz: c4f749b9f7ef10f876c3289f759e7f378736b825652b980220fc2bc039faf3bc
+  metadata.gz: d9413ed422b3e1da59bf459e2156421fae2025ec2ee516693ae64ccc0900f959
+  data.tar.gz: d02a82b63761515a32ac2bc8f026752bee898f2e3b0e270247cf46cd310c8b3b
 SHA512:
-  metadata.gz: 54ee6f0a6b99ae3c9c3fc1cda10cfb28c58f8afcd4d49bb60ec114296412035e328ab4e8d16ffabcb0478ef54e7b6f401b3847d1301e4aaa4f9c00e478bd897e
-  data.tar.gz: 4dddeed3a7f78f6ead11406dbca55969e69f7a371d29751dfb01cfd26b23b55ac52dca4c3fd8ccfbdd2c1198ee6510c43a53b487cdc6c4234f7b0f27ac4e1396
+  metadata.gz: ed6080f4edaf43af64aa5460cffa7992cec4e1e17b9bbc86b9c394fdacc6c6cd67fbcd4479c946e4211e68ffd863ee8cdd2c4e04073b0e07ed1365ffaa9031f8
+  data.tar.gz: 00f281a6dd25cb97807bc091838d516da2bafd2f190aac318a8e7fdf7a4f5a2fdda38b429eac086ad141aab442cf16bcb53724a961a7297119e40a5d5082b5a1

data/LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2020-2020 Alexandre ZANNI
+Copyright (c) 2020-2026 Alexandre ZANNI
 Copyright (c) 2019-2020 Alexandre ZANNI at Orange Cyberdefense
 
 Permission is hereby granted, free of charge, to any person obtaining a copy

data/bin/ctf-party

@@ -90,7 +90,7 @@ cmd_whitelist = {
 }
 
 doc = <<~DOCOPT
-  ctf-party v#{Version::VERSION} by noraj
+  ctf-party v#{CTFParty::VERSION} by noraj
 
   Usage:
     ctf-party <string> <cmd>... [--row --file] [--debug]
@@ -120,7 +120,7 @@ doc = <<~DOCOPT
 DOCOPT
 
 begin
-  args = Docopt.docopt(doc, version: Version::VERSION)
+  args = Docopt.docopt(doc, version: CTFParty::VERSION)
   # use case 1, using the tool
   puts args if args['--debug']
   if args['<string>']

data/lib/ctf_party/base64.rb

@@ -14,8 +14,7 @@ class String
   #   'Super lib!'.to_b64 # => "U3VwZXIgbGliIQ=="
   def to_b64(opts = {})
     opts[:mode] ||= :strict
-    return Base64.strict_encode64(self) if opts[:mode] == :strict ||
-                                           opts[:mode] == :rfc4648
+    return Base64.strict_encode64(self) if %i[strict rfc4648].include?(opts[:mode])
     return Base64.encode64(self) if opts[:mode] == :rfc2045
     return Base64.urlsafe_encode64(self) if opts[:mode] == :urlsafe
   end
@@ -40,8 +39,7 @@ class String
   #   'UnVieQ=='.from_b64 # => "Ruby"
   def from_b64(opts = {})
     opts[:mode] ||= :strict
-    return Base64.strict_decode64(self) if opts[:mode] == :strict ||
-                                           opts[:mode] == :rfc4648
+    return Base64.strict_decode64(self) if %i[strict rfc4648].include?(opts[:mode])
     return Base64.decode64(self) if opts[:mode] == :rfc2045
     return Base64.urlsafe_decode64(self) if opts[:mode] == :urlsafe
   end

data/lib/ctf_party/cgi.rb

@@ -11,7 +11,7 @@ class String
   #   'http://vulnerable.site/search.aspx?txt="><script>alert(/Rubyfu/.source)</script>'.urlencode # => "http://vulnerable.site/search.aspx?txt=%22%3E%3Cscript%3Ealert(/Rubyfu/.source)%3C/script%3E"
   #   "'Stop!' said Fred".urlencode # => "'Stop!'%20said%20Fred"
   def urlencode
-    URI::Parser.new.escape self
+    URI::RFC2396_PARSER.escape self
   end
 
   # URL-encode the string in place as described for {String#urlencode}.
@@ -41,7 +41,7 @@ class String
   #   "'Stop!'%20said%20Fred".urldecode # => "'Stop!' said Fred"
   #   '%27Stop%21%27+said+Fred'.urldecode # => "'Stop!'+said+Fred"
   def urldecode
-    URI::Parser.new.unescape self
+    URI::RFC2396_PARSER.unescape self
   end
 
   # URL-decode the string in place as described for {String#urldecode}.

data/lib/ctf_party/defang.rb

@@ -80,17 +80,6 @@ class String
       puts e
       return gsub('.', '[.]')
     end
-    begin
-      # temporary fix until backport for ruby 3.0 https://github.com/ruby/ruby/pull/7260
-      # rubocop:disable Lint/Void
-      URI::WS
-      URI::WSS
-      # rubocop:enable Lint/Void
-    rescue NameError => e
-      puts e
-      require 'uri/ws'
-      require 'uri/wss'
-    end
     case uri
     when URI::HTTP, URI::HTTPS, URI::FTP
       uri.scheme = uri.scheme.gsub(/t/i, 'x')

data/lib/ctf_party/hex.rb

@@ -5,18 +5,25 @@ class String
   # @param opts [Hash] optional parameters
   # @option opts [String] :prefix Prefix of the input. Default value is a void
   #   string. Example of values: `0x`, `\x`, `\\x`.
+  # @option opts [Symbol] :padding Minimum size of the decimal display
+  #   (number of characters) for the output. Default is no padding.
   # @return [String] the decimal encoded string
   # @example
   #   'ff'.hex2dec # => "255"
   #   '\xf3'.hex2dec(prefix: '\x') # => "243"
   #   '6e6f72616a'.hex2dec # => "474316169578"
   #   '\\x6e\\x6f\\x72\\x61\\x6a'.hex2dec(prefix: '\\x') # => "474316169578"
+  #   '41'.hex2dec(padding: 3) # => "065"
   def hex2dec(opts = {})
     opts[:prefix] ||= ''
+    opts[:padding] ||= 0
     # remove prefix
     out = gsub(opts[:prefix], '')
     # convert
-    return out.hex.to_s
+    out = out.hex.to_s
+    # padding
+    out = ('0' * (opts[:padding] - out.size)) + out if out.size < opts[:padding]
+    return out
   end
 
   # Encode an hexadecimal string to a decimal string in place as described
@@ -29,7 +36,7 @@ class String
     replace(hex2dec(opts))
   end
 
-  # Encode an decimal string to a hexadecimal string
+  # Encode a decimal string to a hexadecimal string
   # @param opts [Hash] optional parameters
   # @option opts [String] :prefix Prefix of the output. Default value is a void
   #   string. Example of values: `0x`, `\x`.
@@ -66,7 +73,7 @@ class String
     return opts[:prefix] + out
   end
 
-  # Encode an decimal string to a hexadecimal string in place as described
+  # Encode a decimal string to a hexadecimal string in place as described
   # for {String#dec2hex}.
   # @example
   #   a = '255'

data/lib/ctf_party/network.rb

@@ -35,22 +35,22 @@ class String
     ipv4? || ipv6?
   end
 
-  # Is the string a valid URI?
+  # Is the string a valid (RFC 2396) URI?
   # @param opts [Hash] optional parameters
   # @option opts [Symbol] :lax Default value: `false`.
   #   When `lax: false`, only URI matching common protocols (ftp http https ldap ldaps mailto ws wss) are recognized,
   #   but is still a bit lax (eg. `http://` is seen as valid).
   #   When `lax: true`, the parser will accept more types of URI (gopher magnet matrix), but will be very lax and accept
   #   nearly anything including `:`.
-  # @return [Boolean] `true` if the string is a valid URI, `false` else.
+  # @return [Boolean] `true` if the string is a valid (RFC 2396) URI, `false` else.
   # @example
   #   'ftp://ftp.ruby-lang.org/pub/ruby/3.2/ruby-3.2.0.tar.xz'.uri? # => true
   #   'a:'.uri? # => false
   #   'a:'.uri?(lax: true) # => true
   def uri?(opts = {})
     opts[:lax] ||= false
-    strict = URI::DEFAULT_PARSER.make_regexp(%w[ftp http https ldap ldaps mailto ws wss]).match?(self)
-    lax = URI::DEFAULT_PARSER.make_regexp.match?(self)
+    strict = URI::RFC2396_PARSER.make_regexp(%w[ftp http https ldap ldaps mailto ws wss]).match?(self)
+    lax = URI::RFC2396_PARSER.make_regexp.match?(self)
     if opts[:lax] == true
       strict || lax
     else

data/lib/ctf_party/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
-module Version
-  VERSION = '3.0.0'
+module CTFParty
+  VERSION = '5.0.0'
 end

data/lib/ctf_party.rb

@@ -1,5 +1,6 @@
 # frozen_string_literal: true
 
+require 'ctf_party/version'
 # Project internal
 require 'ctf_party/base64'
 require 'ctf_party/binary'

metadata

@@ -1,15 +1,42 @@
 --- !ruby/object:Gem::Specification
 name: ctf-party
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 5.0.0
 platform: ruby
 authors:
 - Alexandre ZANNI
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-01-02 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 0.2.0
+- !ruby/object:Gem::Dependency
+  name: cgi
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.4'
 - !ruby/object:Gem::Dependency
   name: docopt
   requirement: !ruby/object:Gem::Requirement
@@ -28,22 +55,16 @@ dependencies:
   name: uri
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.12.1
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.0
+        version: '1.1'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: 0.12.1
-    - - "<"
+    - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.14.0
+        version: '1.1'
 description: A CLI tool & library to enhance and speed up script/exploit writing for
   CTF players (or security researchers, bug bounty hunters, pentesters but mostly
   focused on CTF) by patching the String class to add a short syntax of usual code
@@ -86,8 +107,8 @@ metadata:
   documentation_uri: https://noraj.github.io/ctf-party/
   homepage_uri: https://noraj.github.io/ctf-party/
   source_code_uri: https://github.com/noraj/ctf-party/
+  funding_uri: https://github.com/sponsors/noraj
   rubygems_mfa_required: 'true'
-post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -95,18 +116,17 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 3.0.0
+      version: 3.2.0
   - - "<"
     - !ruby/object:Gem::Version
-      version: '4.0'
+      version: '5.0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.3
-signing_key:
+rubygems_version: 4.0.3
 specification_version: 4
 summary: A CLI tool & library to enhance and speed up script/exploit writing with
   string conversion/manipulation