evil_faker 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. checksums.yaml +7 -0
  2. data/CHANGELOG.md +62 -0
  3. data/GENERATORS.md +164 -0
  4. data/LICENSE.txt +21 -0
  5. data/NOTICE.md +196 -0
  6. data/README.md +156 -0
  7. data/Rakefile +12 -0
  8. data/lib/evil_faker/base.rb +50 -0
  9. data/lib/evil_faker/data/blns.txt +742 -0
  10. data/lib/evil_faker/data/groups/blns/emoji/emoji.txt +10 -0
  11. data/lib/evil_faker/data/groups/blns/emoji/emoticons.txt +12 -0
  12. data/lib/evil_faker/data/groups/blns/emoji/regional.txt +3 -0
  13. data/lib/evil_faker/data/groups/blns/exploits/cves.txt +4 -0
  14. data/lib/evil_faker/data/groups/blns/exploits/human.txt +1 -0
  15. data/lib/evil_faker/data/groups/blns/exploits/ios.txt +3 -0
  16. data/lib/evil_faker/data/groups/blns/exploits/irc.txt +1 -0
  17. data/lib/evil_faker/data/groups/blns/filenames.txt +14 -0
  18. data/lib/evil_faker/data/groups/blns/injection/command.txt +6 -0
  19. data/lib/evil_faker/data/groups/blns/injection/file_inclusion.txt +2 -0
  20. data/lib/evil_faker/data/groups/blns/injection/interpolation.txt +9 -0
  21. data/lib/evil_faker/data/groups/blns/injection/jinja2.txt +2 -0
  22. data/lib/evil_faker/data/groups/blns/injection/script.txt +236 -0
  23. data/lib/evil_faker/data/groups/blns/injection/server_code.txt +9 -0
  24. data/lib/evil_faker/data/groups/blns/injection/sql.txt +8 -0
  25. data/lib/evil_faker/data/groups/blns/injection/xxe.txt +1 -0
  26. data/lib/evil_faker/data/groups/blns/numeric/numeric.txt +71 -0
  27. data/lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt +2 -0
  28. data/lib/evil_faker/data/groups/blns/profanity.txt +22 -0
  29. data/lib/evil_faker/data/groups/blns/reserved.txt +19 -0
  30. data/lib/evil_faker/data/groups/blns/rtl.txt +7 -0
  31. data/lib/evil_faker/data/groups/blns/terminal.txt +3 -0
  32. data/lib/evil_faker/data/groups/blns/unicode/accents.txt +4 -0
  33. data/lib/evil_faker/data/groups/blns/unicode/bom.txt +2 -0
  34. data/lib/evil_faker/data/groups/blns/unicode/controls.txt +3 -0
  35. data/lib/evil_faker/data/groups/blns/unicode/font.txt +8 -0
  36. data/lib/evil_faker/data/groups/blns/unicode/lowercase.txt +2 -0
  37. data/lib/evil_faker/data/groups/blns/unicode/quotes.txt +11 -0
  38. data/lib/evil_faker/data/groups/blns/unicode/scripts.txt +2 -0
  39. data/lib/evil_faker/data/groups/blns/unicode/special.txt +4 -0
  40. data/lib/evil_faker/data/groups/blns/unicode/symbols.txt +12 -0
  41. data/lib/evil_faker/data/groups/blns/unicode/trick.txt +5 -0
  42. data/lib/evil_faker/data/groups/blns/unicode/two_byte.txt +10 -0
  43. data/lib/evil_faker/data/groups/blns/unicode/upsidedown.txt +2 -0
  44. data/lib/evil_faker/data/groups/blns/unicode/whitespace.txt +1 -0
  45. data/lib/evil_faker/data/groups/blns/zalgo.txt +5 -0
  46. data/lib/evil_faker/data/groups/fuzzdb/email/invalid.txt +26 -0
  47. data/lib/evil_faker/data/groups/fuzzdb/email/valid.txt +32 -0
  48. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt +8 -0
  49. data/lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt +11 -0
  50. data/lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt +3 -0
  51. data/lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt +1 -0
  52. data/lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt +1864 -0
  53. data/lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt +357 -0
  54. data/lib/evil_faker/data/groups/fuzzdb/injection/command.txt +1115 -0
  55. data/lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt +536 -0
  56. data/lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt +906 -0
  57. data/lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt +371 -0
  58. data/lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt +67 -0
  59. data/lib/evil_faker/data/groups/fuzzdb/injection/generic.txt +584 -0
  60. data/lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt +12 -0
  61. data/lib/evil_faker/data/groups/fuzzdb/injection/json.txt +89 -0
  62. data/lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt +35 -0
  63. data/lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt +24 -0
  64. data/lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt +17 -0
  65. data/lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt +37 -0
  66. data/lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt +2241 -0
  67. data/lib/evil_faker/data/groups/fuzzdb/injection/script.txt +930 -0
  68. data/lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt +78 -0
  69. data/lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt +18 -0
  70. data/lib/evil_faker/data/groups/fuzzdb/injection/sql.txt +661 -0
  71. data/lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt +56 -0
  72. data/lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt +329 -0
  73. data/lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt +13 -0
  74. data/lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt +65 -0
  75. data/lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt +157 -0
  76. data/lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt +15 -0
  77. data/lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt +26 -0
  78. data/lib/evil_faker/data/groups/fuzzdb/rtl.txt +5 -0
  79. data/lib/evil_faker/data/groups/fuzzdb/terminal.txt +3 -0
  80. data/lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt +15 -0
  81. data/lib/evil_faker/data/groups/fuzzdb/unicode/special.txt +31 -0
  82. data/lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt +5 -0
  83. data/lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt +9 -0
  84. data/lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt +2 -0
  85. data/lib/evil_faker/data/groups/intruder_payloads/filenames.txt +124 -0
  86. data/lib/evil_faker/data/groups/intruder_payloads/injection/command.txt +445 -0
  87. data/lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt +2578 -0
  88. data/lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt +698 -0
  89. data/lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt +1401 -0
  90. data/lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt +36 -0
  91. data/lib/evil_faker/data/groups/intruder_payloads/injection/script.txt +61 -0
  92. data/lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt +18 -0
  93. data/lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt +753 -0
  94. data/lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt +66 -0
  95. data/lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt +1 -0
  96. data/lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt +1125 -0
  97. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt +496 -0
  98. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt +22607 -0
  99. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt +4787 -0
  100. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt +60 -0
  101. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt +26 -0
  102. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt +305 -0
  103. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt +2165 -0
  104. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt +1354 -0
  105. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt +105 -0
  106. data/lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt +102 -0
  107. data/lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt +52 -0
  108. data/lib/evil_faker/groups/email.rb +11 -0
  109. data/lib/evil_faker/groups/emoji.rb +12 -0
  110. data/lib/evil_faker/groups/exploits.rb +13 -0
  111. data/lib/evil_faker/groups/filenames.rb +8 -0
  112. data/lib/evil_faker/groups/headers.rb +12 -0
  113. data/lib/evil_faker/groups/injection.rb +35 -0
  114. data/lib/evil_faker/groups/numeric.rb +11 -0
  115. data/lib/evil_faker/groups/profanity.rb +8 -0
  116. data/lib/evil_faker/groups/reserved.rb +8 -0
  117. data/lib/evil_faker/groups/routes.rb +13 -0
  118. data/lib/evil_faker/groups/rtl.rb +8 -0
  119. data/lib/evil_faker/groups/terminal.rb +8 -0
  120. data/lib/evil_faker/groups/unicode.rb +23 -0
  121. data/lib/evil_faker/groups/zalgo.rb +8 -0
  122. data/lib/evil_faker/source_base.rb +30 -0
  123. data/lib/evil_faker/sources/blns.rb +8 -0
  124. data/lib/evil_faker/sources/fuzzdb.rb +8 -0
  125. data/lib/evil_faker/sources/intruder_payloads.rb +8 -0
  126. data/lib/evil_faker/sources/payloads_all_the_things.rb +8 -0
  127. data/lib/evil_faker/version.rb +5 -0
  128. data/lib/evil_faker.rb +13 -0
  129. data/scripts/blns_build_corpus.rb +159 -0
  130. data/scripts/fuzzdb_build_corpus.rb +166 -0
  131. data/scripts/generate_namespaces.rb +87 -0
  132. data/scripts/intruder_payloads_build_corpus.rb +112 -0
  133. data/scripts/payloads_all_the_things_build_corpus.rb +74 -0
  134. data/sig/evil_faker.rbs +4 -0
  135. metadata +181 -0
metadata ADDED
@@ -0,0 +1,181 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: evil_faker
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.0
5
+ platform: ruby
6
+ authors:
7
+ - AFornio
8
+ bindir: exe
9
+ cert_chain: []
10
+ date: 1980-01-02 00:00:00.000000000 Z
11
+ dependencies: []
12
+ description: |
13
+ EvilFaker gives you a curated corpus of adversarial strings (emoji, RTL overrides,
14
+ zalgo, SQL/script injection, unicode edge cases) as a Faker-style generator, plus
15
+ an audit that feeds them through your ActiveRecord models and reports what crashes,
16
+ what gets silently corrupted, and what round-trips cleanly.
17
+ email:
18
+ - agustinfornio@gmail.com
19
+ executables: []
20
+ extensions: []
21
+ extra_rdoc_files: []
22
+ files:
23
+ - CHANGELOG.md
24
+ - GENERATORS.md
25
+ - LICENSE.txt
26
+ - NOTICE.md
27
+ - README.md
28
+ - Rakefile
29
+ - lib/evil_faker.rb
30
+ - lib/evil_faker/base.rb
31
+ - lib/evil_faker/data/blns.txt
32
+ - lib/evil_faker/data/groups/blns/emoji/emoji.txt
33
+ - lib/evil_faker/data/groups/blns/emoji/emoticons.txt
34
+ - lib/evil_faker/data/groups/blns/emoji/regional.txt
35
+ - lib/evil_faker/data/groups/blns/exploits/cves.txt
36
+ - lib/evil_faker/data/groups/blns/exploits/human.txt
37
+ - lib/evil_faker/data/groups/blns/exploits/ios.txt
38
+ - lib/evil_faker/data/groups/blns/exploits/irc.txt
39
+ - lib/evil_faker/data/groups/blns/filenames.txt
40
+ - lib/evil_faker/data/groups/blns/injection/command.txt
41
+ - lib/evil_faker/data/groups/blns/injection/file_inclusion.txt
42
+ - lib/evil_faker/data/groups/blns/injection/interpolation.txt
43
+ - lib/evil_faker/data/groups/blns/injection/jinja2.txt
44
+ - lib/evil_faker/data/groups/blns/injection/script.txt
45
+ - lib/evil_faker/data/groups/blns/injection/server_code.txt
46
+ - lib/evil_faker/data/groups/blns/injection/sql.txt
47
+ - lib/evil_faker/data/groups/blns/injection/xxe.txt
48
+ - lib/evil_faker/data/groups/blns/numeric/numeric.txt
49
+ - lib/evil_faker/data/groups/blns/numeric/unicode_numbers.txt
50
+ - lib/evil_faker/data/groups/blns/profanity.txt
51
+ - lib/evil_faker/data/groups/blns/reserved.txt
52
+ - lib/evil_faker/data/groups/blns/rtl.txt
53
+ - lib/evil_faker/data/groups/blns/terminal.txt
54
+ - lib/evil_faker/data/groups/blns/unicode/accents.txt
55
+ - lib/evil_faker/data/groups/blns/unicode/bom.txt
56
+ - lib/evil_faker/data/groups/blns/unicode/controls.txt
57
+ - lib/evil_faker/data/groups/blns/unicode/font.txt
58
+ - lib/evil_faker/data/groups/blns/unicode/lowercase.txt
59
+ - lib/evil_faker/data/groups/blns/unicode/quotes.txt
60
+ - lib/evil_faker/data/groups/blns/unicode/scripts.txt
61
+ - lib/evil_faker/data/groups/blns/unicode/special.txt
62
+ - lib/evil_faker/data/groups/blns/unicode/symbols.txt
63
+ - lib/evil_faker/data/groups/blns/unicode/trick.txt
64
+ - lib/evil_faker/data/groups/blns/unicode/two_byte.txt
65
+ - lib/evil_faker/data/groups/blns/unicode/upsidedown.txt
66
+ - lib/evil_faker/data/groups/blns/unicode/whitespace.txt
67
+ - lib/evil_faker/data/groups/blns/zalgo.txt
68
+ - lib/evil_faker/data/groups/fuzzdb/email/invalid.txt
69
+ - lib/evil_faker/data/groups/fuzzdb/email/valid.txt
70
+ - lib/evil_faker/data/groups/fuzzdb/emoji/emoji.txt
71
+ - lib/evil_faker/data/groups/fuzzdb/emoji/emoticons.txt
72
+ - lib/evil_faker/data/groups/fuzzdb/emoji/regional.txt
73
+ - lib/evil_faker/data/groups/fuzzdb/exploits/ios.txt
74
+ - lib/evil_faker/data/groups/fuzzdb/headers/mimetypes.txt
75
+ - lib/evil_faker/data/groups/fuzzdb/headers/protocol.txt
76
+ - lib/evil_faker/data/groups/fuzzdb/injection/command.txt
77
+ - lib/evil_faker/data/groups/fuzzdb/injection/directory_traversal.txt
78
+ - lib/evil_faker/data/groups/fuzzdb/injection/file_inclusion.txt
79
+ - lib/evil_faker/data/groups/fuzzdb/injection/file_upload_bypass.txt
80
+ - lib/evil_faker/data/groups/fuzzdb/injection/format_strings.txt
81
+ - lib/evil_faker/data/groups/fuzzdb/injection/generic.txt
82
+ - lib/evil_faker/data/groups/fuzzdb/injection/integer_overflow.txt
83
+ - lib/evil_faker/data/groups/fuzzdb/injection/json.txt
84
+ - lib/evil_faker/data/groups/fuzzdb/injection/ldap.txt
85
+ - lib/evil_faker/data/groups/fuzzdb/injection/magic_hashes.txt
86
+ - lib/evil_faker/data/groups/fuzzdb/injection/nosql.txt
87
+ - lib/evil_faker/data/groups/fuzzdb/injection/open_redirect.txt
88
+ - lib/evil_faker/data/groups/fuzzdb/injection/rfi.txt
89
+ - lib/evil_faker/data/groups/fuzzdb/injection/script.txt
90
+ - lib/evil_faker/data/groups/fuzzdb/injection/server_side_include.txt
91
+ - lib/evil_faker/data/groups/fuzzdb/injection/source_disclosure.txt
92
+ - lib/evil_faker/data/groups/fuzzdb/injection/sql.txt
93
+ - lib/evil_faker/data/groups/fuzzdb/injection/ssrf.txt
94
+ - lib/evil_faker/data/groups/fuzzdb/injection/type_confusion.txt
95
+ - lib/evil_faker/data/groups/fuzzdb/injection/xpath.txt
96
+ - lib/evil_faker/data/groups/fuzzdb/injection/xxe.txt
97
+ - lib/evil_faker/data/groups/fuzzdb/routes/debug_params.txt
98
+ - lib/evil_faker/data/groups/fuzzdb/routes/directory_indexing.txt
99
+ - lib/evil_faker/data/groups/fuzzdb/routes/local_paths.txt
100
+ - lib/evil_faker/data/groups/fuzzdb/rtl.txt
101
+ - lib/evil_faker/data/groups/fuzzdb/terminal.txt
102
+ - lib/evil_faker/data/groups/fuzzdb/unicode/bad_chars.txt
103
+ - lib/evil_faker/data/groups/fuzzdb/unicode/special.txt
104
+ - lib/evil_faker/data/groups/fuzzdb/unicode/trick.txt
105
+ - lib/evil_faker/data/groups/fuzzdb/unicode/two_byte.txt
106
+ - lib/evil_faker/data/groups/fuzzdb/unicode/upsidedown.txt
107
+ - lib/evil_faker/data/groups/intruder_payloads/filenames.txt
108
+ - lib/evil_faker/data/groups/intruder_payloads/injection/command.txt
109
+ - lib/evil_faker/data/groups/intruder_payloads/injection/directory_traversal.txt
110
+ - lib/evil_faker/data/groups/intruder_payloads/injection/file_inclusion.txt
111
+ - lib/evil_faker/data/groups/intruder_payloads/injection/generic.txt
112
+ - lib/evil_faker/data/groups/intruder_payloads/injection/overflow.txt
113
+ - lib/evil_faker/data/groups/intruder_payloads/injection/script.txt
114
+ - lib/evil_faker/data/groups/intruder_payloads/injection/server_side_include.txt
115
+ - lib/evil_faker/data/groups/intruder_payloads/injection/sql.txt
116
+ - lib/evil_faker/data/groups/intruder_payloads/injection/xxe.txt
117
+ - lib/evil_faker/data/groups/intruder_payloads/unicode/bad_chars.txt
118
+ - lib/evil_faker/data/groups/payloads_all_the_things/headers/cache_deception.txt
119
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/command.txt
120
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/directory_traversal.txt
121
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/file_inclusion.txt
122
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/ldap.txt
123
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/nosql.txt
124
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/open_redirect.txt
125
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/script.txt
126
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/sql.txt
127
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/ssti.txt
128
+ - lib/evil_faker/data/groups/payloads_all_the_things/injection/xxe.txt
129
+ - lib/evil_faker/data/groups/payloads_all_the_things/routes/admin_interfaces.txt
130
+ - lib/evil_faker/groups/email.rb
131
+ - lib/evil_faker/groups/emoji.rb
132
+ - lib/evil_faker/groups/exploits.rb
133
+ - lib/evil_faker/groups/filenames.rb
134
+ - lib/evil_faker/groups/headers.rb
135
+ - lib/evil_faker/groups/injection.rb
136
+ - lib/evil_faker/groups/numeric.rb
137
+ - lib/evil_faker/groups/profanity.rb
138
+ - lib/evil_faker/groups/reserved.rb
139
+ - lib/evil_faker/groups/routes.rb
140
+ - lib/evil_faker/groups/rtl.rb
141
+ - lib/evil_faker/groups/terminal.rb
142
+ - lib/evil_faker/groups/unicode.rb
143
+ - lib/evil_faker/groups/zalgo.rb
144
+ - lib/evil_faker/source_base.rb
145
+ - lib/evil_faker/sources/blns.rb
146
+ - lib/evil_faker/sources/fuzzdb.rb
147
+ - lib/evil_faker/sources/intruder_payloads.rb
148
+ - lib/evil_faker/sources/payloads_all_the_things.rb
149
+ - lib/evil_faker/version.rb
150
+ - scripts/blns_build_corpus.rb
151
+ - scripts/fuzzdb_build_corpus.rb
152
+ - scripts/generate_namespaces.rb
153
+ - scripts/intruder_payloads_build_corpus.rb
154
+ - scripts/payloads_all_the_things_build_corpus.rb
155
+ - sig/evil_faker.rbs
156
+ homepage: https://github.com/AFornio/evil_faker
157
+ licenses:
158
+ - MIT
159
+ metadata:
160
+ homepage_uri: https://github.com/AFornio/evil_faker
161
+ source_code_uri: https://github.com/AFornio/evil_faker
162
+ changelog_uri: https://github.com/AFornio/evil_faker/blob/main/CHANGELOG.md
163
+ rubygems_mfa_required: 'true'
164
+ rdoc_options: []
165
+ require_paths:
166
+ - lib
167
+ required_ruby_version: !ruby/object:Gem::Requirement
168
+ requirements:
169
+ - - ">="
170
+ - !ruby/object:Gem::Version
171
+ version: 3.2.0
172
+ required_rubygems_version: !ruby/object:Gem::Requirement
173
+ requirements:
174
+ - - ">="
175
+ - !ruby/object:Gem::Version
176
+ version: '0'
177
+ requirements: []
178
+ rubygems_version: 4.0.16
179
+ specification_version: 4
180
+ summary: 'Adversarial input for Ruby: like Faker, but evil.'
181
+ test_files: []