rex-random_identifier 0.1.15 → 0.1.18

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fb07b709a8731f3de8bfc0415fb123f7ed415a81c197fd563b92cf5653a5b48f
-  data.tar.gz: 548c78b01c445d123dfa5c9b87f48ec859b2262fb0f09b6b736a9fedd616ee4d
+  metadata.gz: 615a0a02f3a8f12d617828ee1875a52c6aee60d81ce8a22268ee0dd405846eec
+  data.tar.gz: 55279a15cd3270f734fa402795581021a272492fd46e24234a9932448d139154
 SHA512:
-  metadata.gz: c34bd0299242fb0afaf0e4ef8580e5c40f07f350cffac62e2042d389c299ed10eb76fb0004ef78621c046b510ebed536d9c2552d5f28c0dcecd19b5d73743343
-  data.tar.gz: ea324d638a0e70e5d8b8c0c42b46607120d275ed7c9923c114fda9717f76b53b702a5a44b8fdbcb4f2f24e7314328e7f73cbf33f7efb4eec82aa57127a07284e
+  metadata.gz: a2984829ed7d831d0322bf3680d1b96f0428604f66b25c4170e99d9ae87000c898bfa022c2f7478afa7364351c664c1019748a9293625b46bae7300fa3a99609
+  data.tar.gz: fc10df6eaa64992e75dab3c55cb8353545d7c57c56a316b37b0abdd9216c95e8c47729ad6900a7b39953c27358242f4dbb73e8c10e0f9615de21d176937da53f

data/.github/workflows/verify.yml

@@ -9,44 +9,5 @@ on:
       - '*'
 
 jobs:
-  test:
-    runs-on: ${{ matrix.os }}
-    timeout-minutes: 40
-
-    strategy:
-      fail-fast: true
-      matrix:
-        ruby:
-          - '2.7'
-          - '3.0'
-          - '3.1'
-          - '3.2'
-        os:
-          - ubuntu-20.04
-          - ubuntu-latest
-        exclude:
-          - { os: ubuntu-latest, ruby: '2.7' }
-          - { os: ubuntu-latest, ruby: '3.0' }
-        test_cmd:
-          - bundle exec rspec
-
-    env:
-      RAILS_ENV: test
-
-    name: ${{ matrix.os }} - Ruby ${{ matrix.ruby }} - ${{ matrix.test_cmd }}
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v4
-
-      - name: Setup Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: true
-
-      - name: ${{ matrix.test_cmd }}
-        run: |
-          echo "${CMD}"
-          bash -c "${CMD}"
-        env:
-          CMD: ${{ matrix.test_cmd }}
+  build:
+    uses: rapid7/metasploit-framework/.github/workflows/shared_gem_verify.yml@master

data/lib/rex/random_identifier/generator.rb

@@ -34,7 +34,8 @@ class Rex::RandomIdentifier::Generator
     # This should be pretty universal for identifier rules
     :char_set => Rex::Text::AlphaNumeric+"_",
     :first_char_set => Rex::Text::LowerAlpha,
-    :forbidden => [].freeze
+    :forbidden => [].freeze,
+    :prefix => ''
   }
 
   JavaOpts = DefaultOpts.merge(
@@ -111,12 +112,164 @@ class Rex::RandomIdentifier::Generator
     ).freeze
   )
 
+  PHPOpts = DefaultOpts.merge(
+    prefix: '$',
+    first_char_set: Rex::Text::Alpha + '_',
+    # see: https://www.php.net/manual/en/reserved.php
+    # see: https://www.php.net/manual/en/reserved.variables.php
+    forbidden: (
+      %w[
+        $GLOBALS $_SERVER $_GET $_POST $_FILES $_REQUEST $_SESSION $_ENV $_COOKIE
+        $HTTP_GET_VARS $HTTP_POST_VARS $HTTP_COOKIE_VARS $HTTP_SERVER_VARS
+        $HTTP_ENV_VARS $HTTP_SESSION_VARS $HTTP_POST_FILES $HTTP_RAW_POST_DATA
+        $php_errormsg $http_response_header $argc $argv $this
+      ]
+    )
+  )
+
+  PowershellOpts = DefaultOpts.merge(
+    forbidden: (
+      # PowerShell reserved words and language keywords
+      # https://docs.microsoft.com/en-us/powershell/scripting/lang-spec/chapter-02
+      # https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_reserved_words
+      %w[
+        assembly base begin break catch class command configuration continue data define do dynamicparam else elseif
+        end enum exit filter finally for foreach from function hidden if in inlinescript interface module namespace
+        parallel param private process public return sequence static switch throw trap try type until using var while
+        workflow bool byte char decimal double float int long object sbyte short string uint ulong ushort
+      ] +
+        # Common .NET type names used in PowerShell
+        # https://learn.microsoft.com/en-us/dotnet/api/system#classes
+        %w[
+        accessviolationexception activator aggregateexception appcontext appdomain appdomainsetup appdomainunloadedexception
+        applicationexception applicationid argumentexception argumentnullexception argumentoutofrangeexception
+        arithmeticexception array arraytypemismatchexception assemblyloadeventargs attribute attributeusageattribute
+        badimageformatexception bitconverter buffer cannotunloadappdomainexception charenumerator clscompliantattribute
+        console consolecanceleventargs contextboundobject contextmarshalexception contextstaticattribute convert
+        datamisalignedexception dbnull delegate dividebyzeroexception dllnotfoundexception duplicatewaitobjectexception
+        entrypointnotfoundexception enum environment eventargs exception executionengineexception fieldaccessexception
+        filestyleuriparser flagsattribute formatexception formattablestring ftpstyleuriparser gc genericheruriparser
+        gopherstyleuriparser httpstyleuriparser indexoutofrangeexception insufficientexecutionstackexception
+        insufficientmemoryexception invalidcastexception invalidoperationexception invalidprogramexception
+        invalidtimezoneexception lazy ldapstyleuriparser loaderoptimizationattribute localdatastoreslot
+        marshalbyrefobject math mathf memberaccessexception memoryextensions methodaccessexception missingfieldexception
+        missingmemberexception missingmethodexception mtathreadattribute multicastdelegate multicastnotsupportedexception
+        netpipestyleuriparser nettcpstyleuriparser newsstyleuriparser nonserializedattribute notfinitenumberexception
+        notimplementedexception notsupportedexception nullable nullreferenceexception object objectdisposedexception
+        obsoleteattribute operatingsystem operationcanceledexception outofmemoryexception overflowexception
+        paramarrayattribute platformnotsupportedexception progress random rankexception resolveeventargs
+        serializableattribute stackoverflowexception stathreadattribute string stringcomparer stringnormalizationextensions
+        systemexception threadstaticattribute timeoutexception timeprovider timezone timezoneinfo
+        timezonenotfoundexception tuple tupleextensions type typeaccessexception typeinitializationexception
+        typeloadexception typeunloadedexception unauthorizedaccessexception unhandledexceptioneventargs uri uribuilder
+        uriformatexception uriparser uritypeconverter valuetype version weakreference
+        array datetime hashtable psobject scriptblock timespan void xml
+      ] +
+        # Common .NET struct types used in PowerShell
+        # https://learn.microsoft.com/en-us/dotnet/api/system#structs
+        %w[
+        argiterator boolean byte char consolekey consolekeyinfo datetime datetimeoffset dayofweek decimal double
+        guid int16 int32 int64 intptr memory nullable range rune runtime sbyte single timeonly timespan
+        typedreference uint16 uint32 uint64 uintptr valuetuple void arithmeticexception argumentexception
+        argumentnullexception argumentoutofrangeexception badimageformatexception cannotunloadappdomainexception
+        contextmarshalexception datamisalignedexception dividebyzeroexception dllnotfoundexception
+        duplicatewaitobjectexception entrypointnotfoundexception executionengineexception fieldaccessexception
+        formatexception indexoutofrangeexception insufficientexecutionstackexception insufficientmemoryexception
+        invalidcastexception invalidoperationexception invalidprogramexception invalidtimezoneexception
+        memberaccessexception methodaccessexception missingfieldexception missingmemberexception
+        missingmethodexception multicastnotsupportedexception notfinitenumberexception notimplementedexception
+        notsupportedexception nullreferenceexception objectdisposedexception operationcanceledexception
+        outofmemoryexception overflowexception platformnotsupportedexception rankexception stackoverflowexception
+        systemexception timeoutexception typeaccessexception typeinitializationexception typeloadexception
+        typeunloadedexception unauthorizedaccessexception
+      ] +
+        # Common .NET interface types used in PowerShell
+        # https://learn.microsoft.com/en-us/dotnet/api/system#interfaces
+        %w[
+        iasyncresult icloneable icomparable icomparer iconvertible icustomformatter idisposable iequalitycomparer
+        iformattable iformatprovider iserviceprovider ienumerable ienumerator icollection ilist idictionary
+        ireadonlycollection ireadonlylist ireadonlydictionary iset iproducerconsumercollection
+        iconcurrentcollection inotifypropertychanged inotifycollectionchanged iobserver iobservable
+        ituple istructuralcomparable istructuralequatable ispanformattable ibinaryinteger ibinaryfloatingpoint
+        ibitwiseoperators icomparisonoperators iequalityoperators iincrementoperators iminmaxvalue
+        inumberbase iadditionoperators isubtractionoperators imultiplicationoperators idivisionoperators
+        imodaoperators ishiftoperators iunaryoperators iparsable ispanparsable iformatable
+      ] +
+        # Common .NET enum types used in PowerShell
+        # https://learn.microsoft.com/en-us/dotnet/api/system#enums
+        %w[
+        attributetargets base64formattingoptions consolecolor datetimekind dayofweek environmentspecialfolder
+        environmentvariabletarget gctype gcgeneration genotificationstatus globalizationmode
+        loaderoption midsreamstarttype normalizedform operatingsystem platformid processorarchitecture
+        stringcomparison stringsplitopions typecode urikind uricomponents urihostnametype uriformat
+        comparetoptions culturedupinfallbackstyles datetimestyles numberstyles runtimeidentifiertype
+        securityruleset targetframeworkmoniker timezonefindtype unmanagedfunctionpointercallingconvention
+        fileattributes fileaccess filemode fileshare fileaction filetype searchoption directoryoption
+        consolecanceltype consolespecialkey consolemodifiers
+      ] +
+        # Common .NET delegate types used in PowerShell
+        # https://learn.microsoft.com/en-us/dotnet/api/system#delegates
+        %w[
+        action func predicate comparison converter eventhandler asynccallback crossapplicationstringproc
+        waitortimercallback timerproc unhandledexceptioneventhandler assemblybindingprovider resolvehandler
+        convolecallback appdomainunloadhandler assemblyhandler modulehandler contexthandler
+        loadeventhandler unloadeventhandler begininvokedelegate endinvokedelegate asyncresultdelegate
+        predefineddelegate delegateserial multidelgate singletondelegate
+      ] +
+        # PowerShell variable scope keywords
+        # https://docs.microsoft.com/en-us/powershell/scripting/lang-spec/chapter-02
+        %w[
+        global local private script using workflow
+      ] +
+        # PowerShell automatic variables
+        # https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_automatic_variables
+        %w[
+        args consolefilename error executioncontext false home host input lastexitcode matches myinvocation nestedpromptlevel
+        null pid profile pscmdlet pscommandpath pshome psscriptroot psversiontable pwd shellid stacktrace true
+      ] +
+        # PowerShell preference variables
+        # https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_preference_variables
+        %w[
+        confirmpreference debugpreference erroractionpreference errorview formatenumerationlimit informationpreference
+        logcommandhealthevent logcommandlifecycleevent lopenginehealthevent logenginelifecycleevent logproviderhealthevent
+        logproviderlifecycleevent maximumhistorycount ofs outputencoding progresspreference psdefaultparametervalues
+        psemailserver psmoduleautoloadingpreference psnativecommandargumentpassing psnativecommanduseerroractionpreference
+        pssessionapplicationname pssessionconfigurationname pssessionoption psstyle transcript verbosepreference
+       specsapreference whatifpreference
+      ] +
+        # Common PowerShell cmdlets that should be avoided as identifiers
+        # https://docs.microsoft.com/en-us/powershell/scripting/developer/cmdlet/approved-verbs-for-windows-powershell-commands
+        %w[
+        add clear copy export find format get import invoke join move new out read remove rename select set sort
+        split start stop test where write compare group measure tee convertfrom convertto foreach object sort unique
+        first last skip skipuntil takewhile
+      ] +
+        # Common PowerShell cmdlet aliases and shortnames
+        # https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_aliases
+        %w[
+        cat cd chdir clc clhy cli clp cls clv cnsn compare copy cp cpi cpp curl cwmi dbp del diff dir echo epal epcsv
+        fc fhx fl foreach ft fw gal gbp gc gci gcm gcs gdr ghy gi gjb gl gm gmo gp gps gpv group gsn gsnp gsv gtz gu gv
+        gwmi h history icm iex ihy ii ipal ipcsv irm ise iwmi iwr kill lp ls man md measure mi mount move mp mv nal ndr
+        ni nmo npssc nsn nv ogv oh popd pushd pwd r rcjb rcsn rd rdr ren ri rjb rm rmdir rmo rni rnp rp rsn rsnp rv
+        rvpa rwmi sajb sal saps sasv sbp sc scb select set shcm si sl sleep sls sort sp spjb spps spsv start sv swmi
+        tee type wget where wjb write
+      ] +
+        # PowerShell operators (word-based)
+        # https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_operators
+        %w[
+        and band bnot bor bxor not or xor eq ne gt ge lt le like notlike match notmatch contains notcontains in notin
+        replace split join is isnot as
+      ]
+    ).uniq.freeze
+  )
+
   Opts = {
     default: DefaultOpts,
     java: JavaOpts,
     jsp: JSPOpts,
     javascript: JavaScriptOpts,
-    python: PythonOpts
+    python: PythonOpts,
+    powershell: PowershellOpts
   }
 
   # @param opts [Hash] Options, see {DefaultOpts} for default values
@@ -247,12 +400,14 @@ class Rex::RandomIdentifier::Generator
     # pick a random length within the limits
     len ||= rand(@opts[:min_length] .. (@opts[:max_length]))
 
-    ident = ""
+    ident = ''
 
     # XXX: Infinite loop if block returns only values we've already
     # generated.
     loop do
-      ident  = Rex::Text.rand_base(1, "", @opts[:first_char_set])
+      ident  = +''
+      ident << @opts[:prefix]
+      ident << Rex::Text.rand_base(1, "", @opts[:first_char_set])
       ident << Rex::Text.rand_base(len-1, "", @opts[:char_set])
       if block_given?
         ident = yield ident

data/lib/rex/random_identifier/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module RandomIdentifier
-    VERSION = "0.1.15"
+    VERSION = "0.1.18"
   end
 end

data/rex-random_identifier.gemspec

@@ -23,4 +23,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "rspec"
 
   spec.add_runtime_dependency "rex-text"
+
+  # bigdecimal is not part of the default gems starting from Ruby 3.4.0: https://www.ruby-lang.org/en/news/2023/12/25/ruby-3-3-0-released/
+  spec.add_runtime_dependency 'bigdecimal'
 end

metadata

@@ -1,40 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rex-random_identifier
 version: !ruby/object:Gem::Version
-  version: 0.1.15
+  version: 0.1.18
 platform: ruby
 authors:
 - Metasploit Hackers
-autorequire: 
+autorequire:
 bindir: bin
-cert_chain:
-- |
-  -----BEGIN CERTIFICATE-----
-  MIIERDCCAqygAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBttc2Zk
-  ZXYvREM9bWV0YXNwbG9pdC9EQz1jb20wHhcNMjMxMDMwMTYwNDI1WhcNMjUxMDI5
-  MTYwNDI1WjAmMSQwIgYDVQQDDBttc2ZkZXYvREM9bWV0YXNwbG9pdC9EQz1jb20w
-  ggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDZN/EKv+yVjwiKWvjAVhjF
-  aWNYI0E9bJ5d1qKd29omRYX9a+OOKBCu5+394fyF5RjwU4mYGr2iopX9ixRJrWXH
-  ojs70tEvV1CmvP9rhz7JKzQQoJOkinrz4d+StIylxVxVdgm7DeiB3ruTwvl7qKUv
-  piWzhrBFiVU6XIEAwq6wNEmnv2D+Omyf4h0Tf99hc6G0QmBnU3XydqvnZ+AzUbBV
-  24RH3+NQoigLbvK4M5aOeYhk19di58hznebOw6twHzNczshrBeMFQp985ScNgsvF
-  rL+7HNNwpcpngERwZfzDNn7iYN5X3cyvTcykShtsuPMa5zXsYo42LZrsTF87DW38
-  D8sxL6Dgdqu25Mltdw9m+iD4rHSfb1KJYEoNO+WwBJLO2Y4d6G1CR66tVeWsZspb
-  zneOVC+sDuil7hOm+6a7Y2yrrRyT6IfL/07DywjPAIRUp5+Jn8ZrkWRNo2AOwWBG
-  k5gz7SfJPHuyVnPlxoMA0MTFCUnnnbyHu882TGoJGgMCAwEAAaN9MHswCQYDVR0T
-  BAIwADALBgNVHQ8EBAMCBLAwHQYDVR0OBBYEFIQfNa4E889ZE334cwU7eNu2hScH
-  MCAGA1UdEQQZMBeBFW1zZmRldkBtZXRhc3Bsb2l0LmNvbTAgBgNVHRIEGTAXgRVt
-  c2ZkZXZAbWV0YXNwbG9pdC5jb20wDQYJKoZIhvcNAQELBQADggGBAMfzvKcV27p7
-  pctmpW2JmIXLMrjNLyGJAxELH/t9pJueXdga7uj2fJkYQDbwGw5x4MGyFqhqJLH4
-  l/qsUF3PyAXDTSWLVaqXQVWO+IIHxecG0XjPXTNudzMU0hzqbqiBKvsW7/a3V5BP
-  SWlFzrFkoXWlPouFpoakyYMJjpW4SGdPzRv7pM4OhXtkXpHiRvx5985FrHgHlI89
-  NSIuIUbp8zqk4hP1i9MV0Lc/vTf2gOmo+RHnjqG1NiYfMCYyY/Mcd4W36kGOl468
-  I8VDTwgCufkAzFu7BJ5yCOueqtDcuq+d3YhAyU7NI4+Ja8EwazOnB+07sWhKpg7z
-  yuQ1mWYPmZfVQpoSVv1CvXsoqJYXVPBBLOacKKSj8ArVG6pPn9Bej7IOQdblaFjl
-  DgscAao7wB3xW2BWEp1KnaDWkf1x9ttgoBEYyuYwU7uatB67kBQG1PKvLt79wHvz
-  Dxs+KOjGbBRfMnPgVGYkORKVrZIwlaboHbDKxcVW5xv+oZc7KYXWGg==
-  -----END CERTIFICATE-----
-date: 2025-02-13 00:00:00.000000000 Z
+cert_chain: []
+date: 2025-08-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -78,6 +52,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '0'
+- !ruby/object:Gem::Dependency
+  name: bigdecimal
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '0'
 description: Ruby Exploitation(Rex) library for generating Random identifier strings
 email:
 - msfdev@metasploit.com
@@ -102,7 +90,7 @@ files:
 homepage: https://github.com/rapid7/rex-random_identifier
 licenses: []
 metadata: {}
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -117,8 +105,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.3
-signing_key: 
+rubygems_version: 3.4.19
+signing_key:
 specification_version: 4
 summary: Random Identifier Generator
 test_files: []