rabid 0.0.1 → 0.0.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 98987fe496586fce7a2692ffa657b10bab969977ca1ff1cf4db5eac89d13ddc4
-  data.tar.gz: a3a8430704ea8b58e39a5fbe5f7b10371030261039e5f2874ce0f3104035d3d2
+  metadata.gz: a5699f2c4c79f71d44c6e7cd7dc3f89bb424bbcf7069293157ac0555d7270519
+  data.tar.gz: 7ec606ba5cd1e482edd19d32d519680137c3817197ae64cd67286b586cb8e721
 SHA512:
-  metadata.gz: 5c74ef56c2317560de1f2ebc0432393ee04eacc4a40ed7d2ad02bf47496386950e75b62ecce05fb1e2f635f3c95b795deeebf45cd3d6d094566a13e6199a55be
-  data.tar.gz: 62f44f2cfc9b1789dcf2dd82c8c5a9c8db302fb5b5a171f39376ab851b3f115844262799d908254633463b8d0647417f86de7204d6e9dd8dc7d6aaf05e46903c
+  metadata.gz: 8b062568f80e4d673e4bf99b20c9366cbd77bb0f1196897fe7d81cf6238a30332a32a63acfd2192ffdcaa2250c08cb02520445daf6065ad6af49a7acd7695f0a
+  data.tar.gz: 6ddee9719e5e74ca28a7188c5d68c60e44c7783879742fe1089dc7ea72a010b165e3055683f1baf135b9ecb32db4f63293147a1cd02a2f639a475ec5af131743

data/LICENSE.txt

@@ -1,6 +1,7 @@
 The MIT License (MIT)
 
-Copyright (c) 2019 Alexandre ZANNI
+Copyright (c) 2020-2020 Alexandre ZANNI
+Copyright (c) 2019-2020 Alexandre ZANNI at Orange Cyberdefense
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

data/bin/rabid

@@ -30,10 +30,12 @@ doc = <<~DOCOPT
     rabid 'rd5o00000000000000000000ffffc0000201o80'
     rabid 'CustomeCookieName=vi20010112000000000000000000000030.20480' --ipv6-long-format
     rabid 'BIGipServer~SuperPool=rd3o20010112000000000000000000000030o80' --debug
+    rabid 'BIGipServerhttp-pool=!LHmYFDA0qZyj4NoylBEaDn0/k2wesiGt0ANZhWaAohjULoWFXRc1b/yfibypy1qfBzD51kqvmwzfcy4='
 DOCOPT
 
 begin
   args = Docopt.docopt(doc, version: BigIPCookie::VERSION)
+  Paint.mode = 0 if args['--no-color']
   pp args if args['--debug']
   # use case 1, using the tool
   if args['<raw_cookie>']
@@ -42,16 +44,7 @@ begin
     opts[:ipv6compression] = 0 if args['--ipv6-long-format']
     bip.auto_decode(opts)
     # Display
-    if args['--no-color']
-      if args['--short']
-        puts bip.decoded_cookie
-      else
-        puts "Pool name: #{bip.pool_name}"
-        puts "Cookie type: #{bip.cookie_type}"
-        puts "Raw cookie: #{bip.raw_cookie}"
-        puts "Decoded cookie: #{bip.decoded_cookie}"
-      end
-    elsif args['--short']
+    if args['--short']
       puts Paint[bip.decoded_cookie, :green]
     else
       puts Paint['Pool name:', :white, :bold] + ' ' + bip.pool_name

data/lib/bigipcookie.rb

@@ -85,15 +85,17 @@ class BigIPCookie
         opts[:reverse] = 0
       end
 
-      if opts[:ipversion] == 4
+      case opts[:ipversion]
+      when 4
         opts[:joinchar] = '.'
         opts[:scanby] = 2
-      elsif opts[:ipversion] == 6
+      when 6
         opts[:joinchar] = ':'
         opts[:scanby] = 4
       end
 
       ip = format('%02x', ip) if opts[:ip2hex] == 1 # ip to hex
+      ip = '0' + ip if ip.size.odd? # prepend a 0 when we have an odd number
       ip = ip.scan(/.{#{opts[:scanby]}}/) # split by n
       ip.reverse! if opts[:reverse] == 1 # reverse array
       ip = ip.map { |i| i.to_i(16) } if opts[:hex2ip] == 1 # hex to ip
@@ -164,12 +166,19 @@ class BigIPCookie
       return "[#{ip}%#{id}]:#{port}"
     end
 
+    # Return that the cookie is encrypted
+    # @param cookie [String] raw cookie value
+    # @return [String] Encrypted cookie detection message
+    def encrypted(_cookie)
+      return 'Unknown:Encrypted'
+    end
+
     # Automatically detect the BigIP cookie type
     # @param cookie [String] raw cookie value
     # @return [Integer] detected cookie code (mapped with {decode_cookie})
     def detect_cookie_type(cookie)
       ## IPv4 pool members
-      return 400 if /[0-9]{10}\.[0-9]{5}\.0000/.match?(cookie)
+      return 400 if /[0-9]{1,10}\.[0-9]{1,7}\.0000/.match?(cookie)
 
       ## IPv4 pool members in non-default route domains
       return 401 if /rd([0-9]+)o00000000000000000000ffff([0-9a-zA-Z]{8})o
@@ -181,6 +190,9 @@ class BigIPCookie
       ## IPv6 pool members in non-default route domains
       return 601 if /rd([0-9]+)o([0-9a-zA-Z]{32})o([0-9]{1,5})/.match?(cookie)
 
+      ## Encrypted
+      return 999 if %r{!(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?}.match?(cookie)
+
       raise 'Unrecognized cookie'
     end
 
@@ -190,18 +202,22 @@ class BigIPCookie
     # @return [String] the decoded cookie value
     def decode_cookie(cookie, opts = {})
       number = detect_cookie_type(cookie)
-      if number == 400
+      case number
+      when 400
         @cookie_type = 'IPv4 pool members'
         ipv4_pm(cookie)
-      elsif number == 401
+      when 401
         @cookie_type = 'IPv4 pool members in non-default route domains'
         ipv4_pm_ndrd(cookie)
-      elsif number == 600
+      when 600
         @cookie_type = 'IPv6 pool members'
         ipv6_pm(cookie, opts)
-      elsif number == 601
+      when 601
         @cookie_type = 'IPv6 pool members in non-default route domains'
         ipv6_pm_ndrd(cookie, opts)
+      when 999
+        @cookie_type = 'Encrypted'
+        encrypted(cookie)
       else
         raise "Wrong cookie type numer: #{number}"
       end
@@ -211,7 +227,7 @@ class BigIPCookie
     #   cookie name is used or if no cookie key was provided
     # @return the pool name
     def retrieve_pool_name
-      pool_name = /BIGipServer(.+)=.+/.match(@raw_cookie).captures[0]
+      pool_name = /BIGipServer(.*?)=.+/.match(@raw_cookie).captures[0]
       return pool_name
     end
 
@@ -221,14 +237,14 @@ class BigIPCookie
     # @note
     #   .yardopts-dev must be used to get {decode_ip} documentation
     def auto_decode(opts = {})
-      if /\=/.match?(@raw_cookie) # if there is a key
+      if /=/.match?(@raw_cookie) # if there is a key
         if /^BIGipServer/.match?(@raw_cookie) # if default cookie name
           pool_name = retrieve_pool_name
-          cookie_value = /^BIGipServer.+=(.+)/.match(@raw_cookie).captures[0]
+          cookie_value = /^BIGipServer.*?=(.+)/.match(@raw_cookie).captures[0]
           decoded_cookie = decode_cookie(cookie_value, opts)
           @pool_name = pool_name
         else # custom cookie name
-          cookie_value = /.+=(.+)/.match(@raw_cookie).captures[0]
+          cookie_value = /.*?=(.+)/.match(@raw_cookie).captures[0]
           decoded_cookie = decode_cookie(cookie_value, opts)
           @pool_name = 'unknown'
         end
@@ -241,6 +257,6 @@ class BigIPCookie
 
     private :retrieve_pool_name, :decode_cookie, :detect_cookie_type,
             :ipv6_pm_ndrd, :ipv6_pm, :ipv4_pm_ndrd, :ipv4_pm, :decode_port,
-            :decode_ip
+            :decode_ip, :encrypted
   end
 end

data/lib/bigipcookie/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Version
-  VERSION = '0.0.1'
+  VERSION = '0.0.6'
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rabid
 version: !ruby/object:Gem::Version
-  version: 0.0.1
+  version: 0.0.6
 platform: ruby
 authors:
 - Alexandre ZANNI
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2019-07-16 00:00:00.000000000 Z
+date: 2020-07-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: docopt
@@ -30,42 +30,42 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '2.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.1'
+        version: '2.2'
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '2.1'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '2.0'
+        version: '2.1'
 - !ruby/object:Gem::Dependency
   name: commonmarker
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.18'
+        version: '0.21'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.18'
+        version: '0.21'
 - !ruby/object:Gem::Dependency
   name: github-markup
   requirement: !ruby/object:Gem::Requirement
@@ -100,14 +100,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '12.3'
+        version: '13.0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '12.3'
+        version: '13.0'
 - !ruby/object:Gem::Dependency
   name: redcarpet
   requirement: !ruby/object:Gem::Requirement
@@ -128,14 +128,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.63'
+        version: '0.80'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.63'
+        version: '0.80'
 - !ruby/object:Gem::Dependency
   name: yard
   requirement: !ruby/object:Gem::Requirement
@@ -155,77 +155,25 @@ email: alexandre.zanni@engineer.com
 executables:
 - rabid
 - rabid_console
-- rabid_setup
 extensions: []
 extra_rdoc_files: []
 files:
-- ".gitignore"
-- ".rubocop.yml"
-- ".yardopts"
-- ".yardopts-dev"
-- Gemfile
-- Gemfile.lock
 - LICENSE.txt
-- README.md
-- Rakefile
-- bigipcookie.gemspec
 - bin/rabid
 - bin/rabid_console
-- bin/rabid_setup
-- docs/.nojekyll
-- docs/About.md
-- docs/CHANGELOG.md
-- docs/README.md
-- docs/_coverpage.md
-- docs/_media/logo.png
-- docs/_navbar.md
-- docs/_sidebar.md
-- docs/index.html
-- docs/pages/demo.md
-- docs/pages/documentation.md
-- docs/pages/install.md
-- docs/pages/publishing.md
-- docs/pages/quick-start.md
-- docs/pages/usage.md
-- docs/vendor/docsify.js
-- docs/vendor/plugins/emoji.min.js
-- docs/vendor/plugins/search.min.js
-- docs/vendor/prismjs/components/prism-ruby.min.js
-- docs/vendor/themes/vue.css
-- docs/why.md
-- docs/yard/BigIPCookie.html
-- docs/yard/BigIPCookie/Decode.html
-- docs/yard/Version.html
-- docs/yard/_index.html
-- docs/yard/class_list.html
-- docs/yard/css/common.css
-- docs/yard/css/full_list.css
-- docs/yard/css/style.css
-- docs/yard/file.LICENSE.html
-- docs/yard/file.README.html
-- docs/yard/file_list.html
-- docs/yard/frames.html
-- docs/yard/index.html
-- docs/yard/js/app.js
-- docs/yard/js/full_list.js
-- docs/yard/js/jquery.js
-- docs/yard/method_list.html
-- docs/yard/top-level-namespace.html
 - lib/bigipcookie.rb
 - lib/bigipcookie/version.rb
-- package-lock.json
-- test/test_bigipcookie.rb
-homepage: https://orange-cyberdefense.github.io/rabid/
+homepage: https://noraj.github.io/rabid/
 licenses:
 - MIT
 metadata:
   yard.run: yard
-  bug_tracker_uri: https://github.com/Orange-Cyberdefense/rabid/issues
-  changelog_uri: https://github.com/Orange-Cyberdefense/rabid/blob/master/docs/CHANGELOG.md
-  documentation_uri: https://orange-cyberdefense.github.io/rabid/
-  homepage_uri: https://orange-cyberdefense.github.io/rabid/
-  source_code_uri: https://github.com/Orange-Cyberdefense/rabid/
-post_install_message: 
+  bug_tracker_uri: https://github.com/noraj/rabid/issues
+  changelog_uri: https://github.com/noraj/rabid/blob/master/docs/CHANGELOG.md
+  documentation_uri: https://noraj.github.io/rabid/
+  homepage_uri: https://noraj.github.io/rabid/
+  source_code_uri: https://github.com/noraj/rabid/
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -233,16 +181,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - "~>"
     - !ruby/object:Gem::Version
-      version: '2.4'
+      version: '2.7'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.1
-signing_key: 
+rubygems_version: 3.1.2
+signing_key:
 specification_version: 4
 summary: RApid Big IP Decoder
-test_files:
-- test/test_bigipcookie.rb
+test_files: []

data/.gitignore

@@ -1,7 +0,0 @@
-.yardoc
-*.gem
-/pkg
-/doc
-/vendor
-.bundle/
-/node_modules

data/.rubocop.yml

@@ -1,22 +0,0 @@
-# Metrics
-AllCops:
-  TargetRubyVersion: 2.4
-
-Layout/AlignHash:
-  Include:
-    - 'lib/**/*.rb'
-Metrics/AbcSize:
-  Enabled: false
-Metrics/ClassLength:
-  Max: 200
-Metrics/CyclomaticComplexity:
-  Enabled: false
-Metrics/LineLength:
-  Include:
-    - 'lib/**/*.rb'
-Metrics/MethodLength:
-  Max: 25
-Metrics/PerceivedComplexity:
-  Max: 10
-Style/RedundantReturn:
-  Enabled: false

data/.yardopts

@@ -1,4 +0,0 @@
---output-dir docs/yard
--
---main README.md
-LICENSE.txt

data/.yardopts-dev

@@ -1,6 +0,0 @@
---output-dir docs/yard
---protected
---private
--
---main README.md
-LICENSE.txt

data/Gemfile

@@ -1,6 +0,0 @@
-# frozen_string_literal: true
-
-source 'https://rubygems.org'
-
-# Specify your gem's dependencies in .gemspec
-gemspec

data/Gemfile.lock

@@ -1,56 +0,0 @@
-PATH
-  remote: .
-  specs:
-    rabid (0.0.1)
-      docopt (~> 0.6)
-      paint (~> 2.1)
-
-GEM
-  remote: https://rubygems.org/
-  specs:
-    ast (2.4.0)
-    commonmarker (0.20.1)
-      ruby-enum (~> 0.5)
-    concurrent-ruby (1.1.5)
-    docopt (0.6.1)
-    github-markup (3.0.4)
-    i18n (1.6.0)
-      concurrent-ruby (~> 1.0)
-    jaro_winkler (1.5.3)
-    minitest (5.11.3)
-    paint (2.1.0)
-    parallel (1.17.0)
-    parser (2.6.3.0)
-      ast (~> 2.4.0)
-    rainbow (3.0.0)
-    rake (12.3.2)
-    redcarpet (3.4.0)
-    rubocop (0.73.0)
-      jaro_winkler (~> 1.5.1)
-      parallel (~> 1.10)
-      parser (>= 2.6)
-      rainbow (>= 2.2.2, < 4.0)
-      ruby-progressbar (~> 1.7)
-      unicode-display_width (>= 1.4.0, < 1.7)
-    ruby-enum (0.7.2)
-      i18n
-    ruby-progressbar (1.10.1)
-    unicode-display_width (1.6.0)
-    yard (0.9.20)
-
-PLATFORMS
-  ruby
-
-DEPENDENCIES
-  bundler (~> 2.0)
-  commonmarker (~> 0.18)
-  github-markup (~> 3.0)
-  minitest (~> 5.11)
-  rabid!
-  rake (~> 12.3)
-  redcarpet (~> 3.4)
-  rubocop (~> 0.63)
-  yard (~> 0.9)
-
-BUNDLED WITH
-   2.0.1