librex 0.0.13 → 0.0.15

data/lib/rex/exploitation/opcodedb.rb.ut.rb

@@ -1,279 +0,0 @@
-#!/usr/bin/env ruby
-
-$:.unshift(File.join(File.dirname(__FILE__), '..', '..'))
-
-require 'test/unit'
-require 'rex/exploitation/opcodedb'
-require 'rex/socket'
-
-class Rex::Exploitation::OpcodeDb::UnitTest < Test::Unit::TestCase
-
-	Klass = Rex::Exploitation::OpcodeDb::Client
-	SrvPort = 60000
-
-	def test_meta_types
-		srv_cli
-
-		begin
-			proc_req_resp(%q{<Array><Hash><Entry name="id">1</Entry><Entry name="name">foo</Entry></Hash><Hash><Entry name="id">2</Entry><Entry name="name">dog</Entry></Hash></Array>})
-
-			mt = @r.meta_types
-
-			assert_kind_of(Array, mt)
-			assert_equal(2, mt.length)
-			assert_equal(1, mt[0].id)
-			assert_equal("foo", mt[0].name)
-			assert_equal(2, mt[1].id)
-			assert_equal("dog", mt[1].name)
-		ensure
-			@s.close
-		end
-	end
-
-	def test_groups
-		srv_cli
-
-		begin
-			proc_req_resp(%q{<Array><Hash><Entry name="id">47</Entry><Entry name="name">foo</Entry></Hash><Hash><Entry name="id">2</Entry><Entry name="name">dog</Entry></Hash></Array>})
-
-			mt = @r.groups
-
-			assert_kind_of(Array, mt)
-			assert_equal(2, mt.length)
-			assert_equal(47, mt[0].id)
-			assert_equal("foo", mt[0].name)
-			assert_equal(2, mt[1].id)
-			assert_equal("dog", mt[1].name)
-		ensure
-			@s.close
-		end
-	end
-
-	def test_platforms
-		srv_cli
-		
-		begin
-			proc_req_resp(%q{<Array><Hash><Entry name="id">12</Entry><Entry name="name">Windows XP SP2</Entry><Entry name="desc">Windows Coolness</Entry><Entry name="maj_ver">5</Entry><Entry name="min_ver">1</Entry><Entry name="maj_patch_level">2</Entry><Entry name="min_patch_level">0</Entry><Entry name="modules">10</Entry></Hash></Array>})
-
-			osv = @r.platforms
-
-			assert_kind_of(Array, osv)
-			assert_equal(1, osv.length)
-			assert_equal(12, osv[0].id)
-			assert_equal("Windows XP SP2", osv[0].name)
-			assert_equal("Windows Coolness", osv[0].desc)
-			assert_equal(5, osv[0].maj_ver)
-			assert_equal(1, osv[0].min_ver)
-			assert_equal(2, osv[0].maj_patch_level)
-			assert_equal(0, osv[0].min_patch_level)
-			assert_equal(10, osv[0].modules)
-		ensure
-			@s.close
-		end
-	end
-
-	def test_modules
-		srv_cli
-
-		begin
-			proc_req_resp(%q{<Array><Hash>
-				<Entry name="id">1</Entry>
-				<Entry name="name">kernel32.dll</Entry>
-				<Entry name="locale">
-					<Hash>
-						<Entry name="id">4</Entry>
-						<Entry name="name">English</Entry>
-					</Hash>
-				</Entry>
-				<Entry name="maj_maj_ver">4</Entry>
-				<Entry name="maj_min_ver">100</Entry>
-				<Entry name="min_maj_ver">2</Entry>
-				<Entry name="min_min_ver">7</Entry>
-				<Entry name="timestamp">403242822</Entry>
-				<Entry name="base_address">100000000</Entry>
-				<Entry name="image_size">40000</Entry>
-				<Entry name="segments">
-					<Array>
-						<Hash>
-							<Entry name="type">text</Entry>
-							<Entry name="base_address">3228094</Entry>
-							<Entry name="segment_size">4000</Entry>
-							<Entry name="writable">true</Entry>
-							<Entry name="readable">true</Entry>
-							<Entry name="executable">false</Entry>
-						</Hash>
-					</Array>
-				</Entry>
-				<Entry name="imports">
-					<Array>
-						<Hash>
-							<Entry name="name">FoolFunction</Entry>
-							<Entry name="address">3242344</Entry>
-							<Entry name="ordinal">5</Entry>
-						</Hash>
-					</Array>
-				</Entry>
-				<Entry name="exports">
-					<Array>
-						<Hash>
-							<Entry name="name">FoolFunctionExport</Entry>
-							<Entry name="address">32423445</Entry>
-							<Entry name="ordinal">51</Entry>
-						</Hash>
-					</Array>
-				</Entry>
-				</Hash></Array>})
-
-			m = @r.modules
-
-			assert_kind_of(Array, m)
-			assert_equal(1, m[0].id)
-			assert_equal("kernel32.dll", m[0].name)
-			assert_equal(4, m[0].locale.id)
-			assert_equal("English", m[0].locale.name)
-			assert_equal(4, m[0].maj_maj_ver)
-			assert_equal(100, m[0].maj_min_ver)
-			assert_equal(2, m[0].min_maj_ver)
-			assert_equal(7, m[0].min_min_ver)
-			assert_equal(403242822, m[0].timestamp.to_i)
-			assert_equal(100000000, m[0].base_address)
-			assert_equal(40000, m[0].image_size)
-			assert_kind_of(Array, m[0].segments)
-			assert_equal("text", m[0].segments[0].type)
-			assert_equal(3228094, m[0].segments[0].base_address)
-			assert_equal(4000, m[0].segments[0].size)
-			assert_equal(true, m[0].segments[0].writable)
-			assert_equal(true, m[0].segments[0].readable)
-			assert_equal(false, m[0].segments[0].executable)
-			assert_kind_of(Array, m[0].imports)
-			assert_equal("FoolFunction", m[0].imports[0].name)
-			assert_equal(3242344, m[0].imports[0].address)
-			assert_equal(5, m[0].imports[0].ordinal)
-			assert_kind_of(Array, m[0].exports)
-			assert_equal("FoolFunctionExport", m[0].exports[0].name)
-			assert_equal(32423445, m[0].exports[0].address)
-			assert_equal(51, m[0].exports[0].ordinal)
-		ensure
-			@s.close
-		end
-	end
-
-	def test_locales
-		srv_cli
-
-		begin
-			proc_req_resp(%q{<Array><Hash>
-				<Entry name="id">4</Entry>
-				<Entry name="name">English</Entry>
-			</Hash>
-			<Hash>
-				<Entry name="id">5</Entry>
-				<Entry name="name">French</Entry>
-			</Hash></Array>})
-		
-			l = @r.locales
-
-			assert_kind_of(Array, l)
-			assert_equal(2, l.length)
-			assert_equal(4, l[0].id)
-			assert_equal("English", l[0].name)
-			assert_equal(5, l[1].id)
-			assert_equal("French", l[1].name)
-		ensure
-			@s.close
-		end
-	end
-
-	def test_search
-		srv_cli
-
-		begin
-			proc_req_resp(%q{
-				<Array>
-					<Hash>
-						<Entry name="id">400</Entry>
-						<Entry name="address">34242324</Entry>
-						<Entry name="type">
-							<Hash>
-								<Entry name="id">4</Entry>
-								<Entry name="name">jmp esp</Entry>
-						<Entry name="group">
-							<Hash>
-								<Entry name="id">40</Entry>
-								<Entry name="name">reg</Entry>
-							</Hash>
-						</Entry>
-							</Hash>
-						</Entry>
-					</Hash>
-				</Array>})
-
-			o = @r.search
-
-			assert_kind_of(Array, o)
-			assert_equal(1, o.length)
-			assert_equal(400, o[0].id)
-			assert_equal(34242324, o[0].address)
-			assert_equal(4, o[0].type.id)
-			assert_equal("jmp esp", o[0].type.name)
-			assert_equal(40, o[0].group.id)
-			assert_equal("reg", o[0].group.name)
-		ensure
-			@s.close
-		end
-	end
-
-	def test_statistics
-		srv_cli
-
-		begin
-			proc_req_resp(%q{
-				<Hash>
-					<Entry name="modules">40</Entry>
-					<Entry name="opcodes">50</Entry>
-					<Entry name="opcode_types">60</Entry>
-					<Entry name="platforms">70</Entry>
-					<Entry name="architectures">80</Entry>
-					<Entry name="module_segments">90</Entry>
-					<Entry name="module_imports">100</Entry>
-					<Entry name="module_exports">110</Entry>
-					<Entry name="last_update">120</Entry>
-				</Hash>
-				})
-
-			s = @r.statistics
-
-			assert_equal(40, s.modules)
-			assert_equal(50, s.opcodes)
-			assert_equal(60, s.opcode_types)
-			assert_equal(70, s.platforms)
-			assert_equal(80, s.architectures)
-			assert_equal(90, s.module_segments)
-			assert_equal(100, s.module_imports)
-			assert_equal(110, s.module_exports)
-			assert_equal(120, s.last_update.to_i)
-		ensure
-			@s.close
-		end
-	end
-
-protected
-
-	def srv_cli
-		@r = Klass.new('127.0.0.1', SrvPort)
-		@s = Rex::Socket::TcpServer.create(
-			'LocalHost' => '127.0.0.1',
-			'LocalPort' => SrvPort)
-	end
-
-	def proc_req_resp(buf)
-		thr = Thread.new {
-			cli = @s.accept
-			@buffer = cli.get
-
-			cli.put("HTTP/1.0 200 OK\r\nConnection: close\r\n\r\n#{buf}")
-			cli.close
-		}
-	end
-
-end

data/lib/rex/exploitation/seh.rb

@@ -1,92 +0,0 @@
-require 'rex/text'
-require 'rex/arch/x86'
-
-module Rex
-module Exploitation
-
-###
-#
-# This class provides methods for generating SEH registration records
-# in a dynamic and flexible fashion.  The records can be generated with
-# the short jump at a random offset into the next pointer and with random
-# padding in between the handler and the attacker's payload.
-#
-###
-class Seh
-
-	#
-	# Creates a new instance of the class and initializes it with the supplied
-	# bad character list.  The space argument denotes how much room is
-	# available for random padding and the NOP argument can be used to generate
-	# a random NOP sled that is better than 0x90.
-	#
-	def initialize(badchars = nil, space = nil, nop = nil)
-		self.badchars = badchars || ''
-		self.space    = (space && space > 121) ? 121 : space
-		self.nop      = nop
-	end
-
-	#
-	# Generates an SEH record
-	#
-	def generate_seh_record(handler, dynamic=false)
-		if (dynamic)
-			generate_dynamic_seh_record(handler)
-		else
-			generate_static_seh_record(handler)
-		end
-	end
-
-	#
-	# Generates a fake SEH registration record with the supplied handler
-	# address for the handler, and a nop generator to use when generating
-	# padding inside the next pointer.  The NOP generator must implement the
-	# 'generate_sled' method that takes a length and a list of bad 
-	# characters.
-	#
-	def generate_dynamic_seh_record(handler)
-
-		# Generate the padding up to the size specified or 121 characters
-		# maximum to account for the maximum range of a short jump plus the
-		# record size.
-		pad    = rand(space || 121)
-		rsize  = pad + 8
-
-		# Calculate the random index into the next ptr to store the short jump
-		# instruction
-		jmpidx = rand(3)
-
-		# Build the prefixed sled for the bytes that come before the short jump
-		# instruction
-		sled = (nop) ? nop.generate_sled(jmpidx, badchars) : ("\x90" * jmpidx)
-
-		# Seed the record and any space after the record with random text
-		record = Rex::Text.rand_text(rsize, badchars)
-
-		# Build the next pointer and short jump instruction
-		record[jmpidx, 2] = Rex::Arch::X86.jmp_short((rsize - jmpidx) - 2)
-		record[0, jmpidx] = sled
-
-		# Set the handler in the registration record
-		record[4, 4]      = [ handler ].pack('V')
-
-		# Return the generated record to the caller
-		record
-	end
-
-	#
-	# Generates a static SEH registration record with a specific handler and
-	# next pointer.
-	#
-	def generate_static_seh_record(handler)
-		"\xeb\x06" + Rex::Text.rand_text(2, badchars) + [ handler ].pack('V')
-	end
-
-protected
-
-	attr_accessor :badchars, :space, :nop # :nodoc:
-
-end
-
-end
-end

data/lib/rex/exploitation/seh.rb.ut.rb

@@ -1,19 +0,0 @@
-#!/usr/bin/env ruby
-
-$:.unshift(File.join(File.dirname(__FILE__), '..', '..'))
-
-require 'test/unit'
-require 'rex/exploitation/seh'
-
-class Rex::Exploitation::Seh::UnitTest < Test::Unit::TestCase
-
-	Klass = Rex::Exploitation::Seh
-
-	def test_static_record
-		r = Klass.new
-		record = r.generate_static_seh_record(0x41414141)
-		assert_equal("\xeb\x06", record[0, 2])
-		assert_equal("\x41\x41\x41\x41", record[4, 4])
-	end
-
-end

data/lib/rex/file.rb

@@ -1,112 +0,0 @@
-require 'find'
-require 'rex/compat'
-require 'tempfile'
-
-module Rex
-
-###
-#
-# This class provides helper methods for dealing with files that are not
-# supplied by the standard ruby API.
-#
-###
-module FileUtils
-
-	#
-	# This methods cleans the supplied path of directory traversal sequences
-	# It must accept path/with/..a/folder../starting/or/ending/in/two/dots
-	# but clean ../something as well as path/with/..\traversal
-	#
-	def self.clean_path(old)
-		path = old
-		while(path.index(/\/..\/|\/..\\|\\..\\|\\..\/|\A..\\|\A..\//) != nil)
-			path.gsub!(/\A..\\|\A..\//,'') #eliminate starting ..\ or ../
-			path.gsub!(/\/..\/|\/..\\/,'/') #clean linux style
-			path.gsub!(/\\..\\|\\..\//,'\\') #clean windows style
-		end
-		path
-	end
-
-	#
-	# This method searches the PATH environment variable for
-	# a fully qualified path to the supplied file name.
-	#
-	def self.find_full_path(file_name)
-	
-		# Check for the absolute fast first
-		if (file_name[0,1] == "/" and ::File.exists?(file_name) and ::File::Stat.new(file_name))
-			return file_name
-		end
-	
-		path = Rex::Compat.getenv('PATH')
-		if (path)
-			path.split(::File::PATH_SEPARATOR).each { |base|
-				begin
-					# Deal with Windows paths surrounded by quotes.  Prevents
-					# silliness like trying to look for
-					# '"C:\\framework\\nmap"\\nmap.exe' which will always fail.
-					base = $1 if base =~ /^"(.*)"$/
-					path = base + ::File::SEPARATOR + file_name
-					if (::File::Stat.new(path) and not ::File.directory?(path))
-						return path
-					end
-				rescue
-				end
-			}
-		end
-		return nil
-	end
-
-end
-
-class Quickfile < ::Tempfile
-	def initialize(*args)
-		super(*args)
-		self.binmode
-		ObjectSpace.undefine_finalizer(self)	
-	end
-end
-
-module Find
-  #
-  # Identical to Find.find from Ruby, but follows symlinks to directories.
-  # See http://blade.nagaokaut.ac.jp/cgi-bin/scat.rb/ruby/ruby-talk/68671
-  #
-  def self.find(*paths)
-    paths.collect!{|d| d.dup}
-    while file = paths.shift
-      catch(:prune) do
-        yield file.dup.taint
-        next unless File.exist? file
-        begin
-          if File.stat(file).directory? then
-            d = Dir.open(file)
-            begin
-              for f in d
-                next if f == "." or f == ".."
-                if File::ALT_SEPARATOR and file =~ /^(?:[\/\\]|[A-Za-z]:[\/\\]?)$/ then
-                  f = file + f
-                elsif file == "/" then
-                  f = "/" + f
-                else
-                  f = File.join(file, f)
-                end
-                paths.unshift f.untaint
-              end
-            ensure
-              d.close
-            end
-          end
-        rescue Errno::ENOENT, Errno::EACCES
-        end
-      end
-    end
-  end
-
-  def self.prune
-    throw :prune
-  end
-
-end
-
-end