passdb 0.1.0

data/LICENSE.txt

@@ -0,0 +1,20 @@
+Copyright (c) 2011 Security Roots (@securityroots)
+
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of this software and associated documentation files (the
+"Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish,
+distribute, sublicense, and/or sell copies of the Software, and to
+permit persons to whom the Software is furnished to do so, subject to
+the following conditions:
+
+The above copyright notice and this permission notice shall be
+included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

data/README.md

@@ -0,0 +1,76 @@
+passdb
+======
+
+This library can be used to search the default password database from cirt.net: http://cirt.net/passwords
+
+Usage
+-----
+
+You can use the provided binary to search the password database by vendor:
+
+    ./bin/passdb search --vendor Apc
+    7 entries were found:
+      AP9606 SmartSlot Web/SNMP Management Card
+        Version => AOS 3.2.1 and AOS 3.0.3
+        Method => telnet
+        User ID => (any)
+        Password => TENmanUFactOryPOWER
+      Call-UPS
+        Version => AP9608
+        Method => Console
+        Password => serial number of the Call-UPS
+        Level => Admin
+        Notes => (Access menu Control+P)
+    [...]
+
+or by a free-form criteria
+
+    ./bin/passdb search --criteria FTP
+    17 entries were found:
+      Intuity Audix
+        User ID => Craft
+        Password => crftpw
+      Axis Network Camera
+        Version => 2120, 2110, 2100, 200+, 200
+        Method => ftp, telnet, http
+        User ID => root
+        Password => pass
+        Level => Admin
+      CADSLR4
+        Method => FTP
+        User ID => anonymous
+        Password => password
+        Level => Anonymous
+        Notes => Default IP 192.168.1.254
+    [...]
+
+You can also use the library inside your tools:
+
+    irb > require 'passdb'
+     => true 
+    irb > Passdb::search(:vendor => 'Zyxel').each do |entry|
+    irb >   puts entry.name
+    irb > end
+    Generic Routers
+    Prestige 652HW-31
+    Prestige
+    Prestige
+
+
+Contributing to passdb
+----------------------
+ 
+* Check out the latest master to make sure the feature hasn't been implemented or the bug hasn't been fixed yet
+* Check out the issue tracker to make sure someone already hasn't requested it and/or contributed it
+* Fork the project
+* Start a feature/bugfix branch
+* Commit and push until you are happy with your contribution
+* Make sure to add tests for it. This is important so I don't break it in a future version unintentionally.
+* Please try not to mess with the Rakefile, version, or history. If you want to have your own version, or is otherwise necessary, that is fine, but please isolate to its own commit so I can cherry-pick around it.
+
+Copyright
+---------
+
+Copyright (c) 2011 Security Roots. See LICENSE.txt for
+further details.
+

data/Rakefile

@@ -0,0 +1,22 @@
+# encoding: utf-8
+
+require File.expand_path('../lib/passdb/version', __FILE__)
+
+require 'bundler'
+Bundler::GemHelper.install_tasks
+
+require 'rspec/core/rake_task'
+RSpec::Core::RakeTask.new(:spec)
+
+require 'rdoc/task'
+if defined?(RDoc)
+  RDoc::Task.new do |rdoc|
+    rdoc.main     = 'README.md'
+    rdoc.rdoc_dir = 'rdoc'
+    rdoc.title    = "passdb #{Passdb::VERSION::STRING}"
+    rdoc.rdoc_files.include('README.md', 'LICENSE.txt')
+    rdoc.rdoc_files.include('lib/**/*.rb')
+    rdoc.options << '--line-numbers' << '--inline-source'
+  end
+end
+

data/bin/passdb

@@ -0,0 +1,18 @@
+#!/usr/bin/env ruby
+
+source_root = File.expand_path(File.dirname(__FILE__) + "/..")
+$LOAD_PATH.unshift("#{source_root}/lib")
+
+require 'passdb/cli'
+
+begin
+  Passdb::CLI.start
+#rescue Exception => e
+#  puts e.message
+#  puts e.backtrace.join("\n")
+#  exit e.status_code
+#rescue Interrupt => e
+#  puts "\nQuitting..."
+#  exit 1
+end
+

data/lib/passdb.rb

@@ -0,0 +1,43 @@
+require 'open-uri'
+require 'nokogiri'
+
+require 'passdb/entry'
+require 'passdb/version'
+
+module Passdb
+  URL = 'http://cirt.net/passwords'
+
+  def self.search(args={})
+    type, query = args.first
+
+    if ![:vendor, :criteria].include?(type) || query.nil?
+      raise ArgumentError, "Either :vendor or :criteria are required!"
+    end
+
+    results = []
+    entry = nil
+    url = "#{URL}?#{type}=#{query}"
+    doc = Nokogiri::HTML(open(url))
+
+    doc.xpath('/html/body/div/div[2]/div[3]/div/center/table/tr').each do |tr|
+      next if tr.search('script').any?
+
+      if tr.search('td').size == 1
+        if entry
+          results << entry
+        end
+        entry = Entry.new
+        entry.name = tr.search('td').search('i').text
+      else
+        name, value = tr.search('td')
+        entry.attributes[ name.search('b').text ] = value.text 
+      end
+    end
+
+    if entry
+      results << entry
+    end
+
+    return results
+  end
+end

data/lib/passdb/cli.rb

@@ -0,0 +1,54 @@
+require 'thor'
+require 'thor/actions'
+
+require 'passdb'
+
+module Passdb
+  class CLI < Thor
+    include Thor::Actions
+    map "-v" => :version
+
+    def initialize(*)
+      super
+      Thor::Shell::Basic.new
+    end
+
+    method_option "vendor", :type => :string, :banner => 
+      "Name of the vendor as especified in http://cirt.net/passwords"
+    method_option "criteria", :type => :string, :banner => 
+      "Free-form criteria to submit to cirt.net's password database"
+    desc "search", "Search cirt.net's database for default passwords by vendor or in free from"
+    def search
+      opts = options.dup
+      if opts["vendor"] && opts["criteria"]
+        puts "You can't specify both a vendor and a free-form criteria"
+        exit 1
+      end
+
+      if !(opts["vendor"] || opts["criteria"])
+        puts "You need to specify either --vendor or --criteria"
+        exit 1
+      end
+      
+      results = nil
+      if opts["vendor"]
+        results = Passdb.search(:vendor => opts["vendor"])
+      else
+        results = Passdb.search(:criteria => opts["criteria"])
+      end
+
+      puts "#{results.size} entries were found:"
+      results.each do |entry|
+        puts "  #{entry.name}"
+        entry.attributes.each do |name, value|
+          puts "    #{name} => #{value}"
+        end
+      end
+    end
+
+    desc "version", "Show Passdb version"
+    def version
+      say "Passdb #{Passdb::VERSION::STRING}"
+    end
+  end
+end

data/lib/passdb/entry.rb

@@ -0,0 +1,9 @@
+
+module Passdb
+  class Entry
+    attr_accessor :vendor, :name, :attributes
+    def initialize()
+      self.attributes = {}
+    end
+  end
+end

data/lib/passdb/version.rb

@@ -0,0 +1,9 @@
+module Passdb
+  module VERSION #:nodoc:
+    MAJOR = 0
+    MINOR = 1
+    TINY = 0
+
+    STRING = [MAJOR, MINOR, TINY].join('.')
+  end
+end

data/spec/passdb_spec.rb

@@ -0,0 +1,11 @@
+require File.expand_path(File.dirname(__FILE__) + '/spec_helper')
+
+describe "Passdb: vendor search" do
+  it "should fail if the vendor is empty" do
+    lambda{ Passdb::search(:vendor => nil) }.should raise_error(ArgumentError)
+  end
+
+  it "should fail if criteria is empty" do
+    lambda{ Passdb::search(:criteria => nil) }.should raise_error(ArgumentError)
+  end
+end

data/spec/spec_helper.rb

@@ -0,0 +1,12 @@
+$LOAD_PATH.unshift(File.join(File.dirname(__FILE__), '..', 'lib'))
+$LOAD_PATH.unshift(File.dirname(__FILE__))
+require 'rspec'
+require 'passdb'
+
+# Requires supporting files with custom matchers and macros, etc,
+# in ./support/ and its subdirectories.
+Dir["#{File.dirname(__FILE__)}/support/**/*.rb"].each {|f| require f}
+
+RSpec.configure do |config|
+  
+end

metadata

@@ -0,0 +1,122 @@
+--- !ruby/object:Gem::Specification 
+name: passdb
+version: !ruby/object:Gem::Version 
+  prerelease: 
+  version: 0.1.0
+platform: ruby
+authors: 
+- Daniel Martin
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2011-05-04 00:00:00 +01:00
+default_executable: passdb
+dependencies: 
+- !ruby/object:Gem::Dependency 
+  name: nokogiri
+  prerelease: false
+  requirement: &id001 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :runtime
+  version_requirements: *id001
+- !ruby/object:Gem::Dependency 
+  name: thor
+  prerelease: false
+  requirement: &id002 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :runtime
+  version_requirements: *id002
+- !ruby/object:Gem::Dependency 
+  name: rspec
+  prerelease: false
+  requirement: &id003 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ">="
+      - !ruby/object:Gem::Version 
+        version: "0"
+  type: :development
+  version_requirements: *id003
+- !ruby/object:Gem::Dependency 
+  name: bundler
+  prerelease: false
+  requirement: &id004 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        version: 1.0.0
+  type: :development
+  version_requirements: *id004
+- !ruby/object:Gem::Dependency 
+  name: jeweler
+  prerelease: false
+  requirement: &id005 !ruby/object:Gem::Requirement 
+    none: false
+    requirements: 
+    - - ~>
+      - !ruby/object:Gem::Version 
+        version: 1.6.0
+  type: :development
+  version_requirements: *id005
+description: Ruby library and command line tool to search and contribute to cirt.net's default password database at http://cirt.net/passwords
+email: <daniel-at securityroots.com>
+executables: 
+- passdb
+extensions: []
+
+extra_rdoc_files: 
+- LICENSE.txt
+- README.md
+- Rakefile
+files: 
+- bin/passdb
+- lib/passdb.rb
+- lib/passdb/cli.rb
+- lib/passdb/entry.rb
+- lib/passdb/version.rb
+- spec/passdb_spec.rb
+- spec/spec_helper.rb
+- LICENSE.txt
+- README.md
+- Rakefile
+has_rdoc: true
+homepage: http://github.com/securityroots/passdb
+licenses: 
+- MIT
+post_install_message: 
+rdoc_options: 
+- --charset=UTF-8
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  none: false
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.6.1
+signing_key: 
+specification_version: 3
+summary: Ruby interface to cirt.net's default password database
+test_files: 
+- spec/passdb_spec.rb
+- spec/spec_helper.rb