ronin-code-asm 1.0.0.beta1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (54) hide show
  1. checksums.yaml +7 -0
  2. data/.document +4 -0
  3. data/.editorconfig +11 -0
  4. data/.github/workflows/ruby.yml +31 -0
  5. data/.gitignore +11 -0
  6. data/.mailmap +1 -0
  7. data/.rspec +1 -0
  8. data/.ruby-version +1 -0
  9. data/.yardopts +1 -0
  10. data/COPYING.txt +165 -0
  11. data/ChangeLog.md +44 -0
  12. data/Gemfile +25 -0
  13. data/README.md +166 -0
  14. data/Rakefile +39 -0
  15. data/data/os/freebsd/amd64/syscalls.yml +415 -0
  16. data/data/os/freebsd/x86/syscalls.yml +415 -0
  17. data/data/os/linux/amd64/syscalls.yml +306 -0
  18. data/data/os/linux/x86/syscalls.yml +339 -0
  19. data/gemspec.yml +26 -0
  20. data/lib/ronin/code/asm/archs/amd64.rb +100 -0
  21. data/lib/ronin/code/asm/archs/x86.rb +170 -0
  22. data/lib/ronin/code/asm/archs.rb +22 -0
  23. data/lib/ronin/code/asm/config.rb +33 -0
  24. data/lib/ronin/code/asm/immediate_operand.rb +84 -0
  25. data/lib/ronin/code/asm/instruction.rb +66 -0
  26. data/lib/ronin/code/asm/memory_operand.rb +119 -0
  27. data/lib/ronin/code/asm/os/freebsd.rb +35 -0
  28. data/lib/ronin/code/asm/os/linux.rb +35 -0
  29. data/lib/ronin/code/asm/os/os.rb +47 -0
  30. data/lib/ronin/code/asm/os.rb +57 -0
  31. data/lib/ronin/code/asm/program.rb +509 -0
  32. data/lib/ronin/code/asm/register.rb +111 -0
  33. data/lib/ronin/code/asm/shellcode.rb +75 -0
  34. data/lib/ronin/code/asm/syntax/att.rb +164 -0
  35. data/lib/ronin/code/asm/syntax/common.rb +241 -0
  36. data/lib/ronin/code/asm/syntax/intel.rb +150 -0
  37. data/lib/ronin/code/asm/syntax.rb +22 -0
  38. data/lib/ronin/code/asm/version.rb +28 -0
  39. data/lib/ronin/code/asm.rb +68 -0
  40. data/ronin-code-asm.gemspec +62 -0
  41. data/spec/asm_spec.rb +14 -0
  42. data/spec/config_spec.rb +10 -0
  43. data/spec/immediate_operand_spec.rb +79 -0
  44. data/spec/instruction_spec.rb +62 -0
  45. data/spec/memory_operand_spec.rb +80 -0
  46. data/spec/os_spec.rb +68 -0
  47. data/spec/program_spec.rb +439 -0
  48. data/spec/register_spec.rb +112 -0
  49. data/spec/shellcode_spec.rb +58 -0
  50. data/spec/spec_helper.rb +7 -0
  51. data/spec/syntax/att_spec.rb +181 -0
  52. data/spec/syntax/common_spec.rb +42 -0
  53. data/spec/syntax/intel_spec.rb +174 -0
  54. metadata +143 -0
checksums.yaml ADDED
@@ -0,0 +1,7 @@
1
+ ---
2
+ SHA256:
3
+ metadata.gz: afdbeb043e51ce8513e7d833b7c8a730ee0488e579bc71c17044137c6b60dbe9
4
+ data.tar.gz: 0fb69ebc839c8e1079122e5b962967b094d97fe48955e21ab09896b8f4c65fd3
5
+ SHA512:
6
+ metadata.gz: f1dca72988f3754272eb3e43d63292ef8209b94cd472f357c703f5cc695a4361d79d0da51fcd589078177c2a42412fd00a838ed47542a5865c199e05dc086345
7
+ data.tar.gz: b4d1e207dd1bf4d47b88cab47423cd35610b66fb1f1580897acad9d961a2dfa9218e29e8a9564f89fe5e31cf8a18ee7d012c4f303e203aca1dc40c174253d14a
data/.document ADDED
@@ -0,0 +1,4 @@
1
+ lib/**/*.rb
2
+ -
3
+ ChangeLog.md
4
+ COPYING.txt
data/.editorconfig ADDED
@@ -0,0 +1,11 @@
1
+ root = true
2
+
3
+ [*]
4
+ end_of_line = lf
5
+ insert_final_newline = true
6
+ tab_width = 8
7
+ trim_trailing_whitespace = true
8
+
9
+ [{Gemfile,Rakefile,*.rb,*.gemspec,*.yml}]
10
+ indent_style = space
11
+ indent_size = 2
@@ -0,0 +1,31 @@
1
+ name: CI
2
+
3
+ on: [ push, pull_request ]
4
+
5
+ jobs:
6
+ tests:
7
+ runs-on: ubuntu-latest
8
+ strategy:
9
+ fail-fast: false
10
+ matrix:
11
+ ruby:
12
+ - '3.0'
13
+ - '3.1'
14
+ - '3.2'
15
+ # - jruby
16
+ - truffleruby
17
+ name: Ruby ${{ matrix.ruby }}
18
+ steps:
19
+ - uses: actions/checkout@v2
20
+ - name: Set up Ruby
21
+ uses: ruby/setup-ruby@v1
22
+ with:
23
+ ruby-version: ${{ matrix.ruby }}
24
+ - name: Install dependencies
25
+ run: |
26
+ sudo apt update -y && \
27
+ sudo apt install -y --no-install-recommends --no-install-suggests yasm
28
+ - name: Install dependencies
29
+ run: bundle install --jobs 4 --retry 3
30
+ - name: Run tests
31
+ run: bundle exec rake test
data/.gitignore ADDED
@@ -0,0 +1,11 @@
1
+ doc
2
+ pkg
3
+ vendor/cache
4
+ Gemfile.lock
5
+ .bundle
6
+ .DS_Store
7
+ .yardoc
8
+ *.db
9
+ *.log
10
+ *.swp
11
+ *~
data/.mailmap ADDED
@@ -0,0 +1 @@
1
+ Postmodern <postmodern.mod3@gmail.com> postmodern <postmodern.mod3@gmail.com>
data/.rspec ADDED
@@ -0,0 +1 @@
1
+ --colour --format documentation
data/.ruby-version ADDED
@@ -0,0 +1 @@
1
+ ruby-3.1
data/.yardopts ADDED
@@ -0,0 +1 @@
1
+ --markup markdown --title 'Ronin ASM Documentation' --protected
data/COPYING.txt ADDED
@@ -0,0 +1,165 @@
1
+ GNU LESSER GENERAL PUBLIC LICENSE
2
+ Version 3, 29 June 2007
3
+
4
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
5
+ Everyone is permitted to copy and distribute verbatim copies
6
+ of this license document, but changing it is not allowed.
7
+
8
+
9
+ This version of the GNU Lesser General Public License incorporates
10
+ the terms and conditions of version 3 of the GNU General Public
11
+ License, supplemented by the additional permissions listed below.
12
+
13
+ 0. Additional Definitions.
14
+
15
+ As used herein, "this License" refers to version 3 of the GNU Lesser
16
+ General Public License, and the "GNU GPL" refers to version 3 of the GNU
17
+ General Public License.
18
+
19
+ "The Library" refers to a covered work governed by this License,
20
+ other than an Application or a Combined Work as defined below.
21
+
22
+ An "Application" is any work that makes use of an interface provided
23
+ by the Library, but which is not otherwise based on the Library.
24
+ Defining a subclass of a class defined by the Library is deemed a mode
25
+ of using an interface provided by the Library.
26
+
27
+ A "Combined Work" is a work produced by combining or linking an
28
+ Application with the Library. The particular version of the Library
29
+ with which the Combined Work was made is also called the "Linked
30
+ Version".
31
+
32
+ The "Minimal Corresponding Source" for a Combined Work means the
33
+ Corresponding Source for the Combined Work, excluding any source code
34
+ for portions of the Combined Work that, considered in isolation, are
35
+ based on the Application, and not on the Linked Version.
36
+
37
+ The "Corresponding Application Code" for a Combined Work means the
38
+ object code and/or source code for the Application, including any data
39
+ and utility programs needed for reproducing the Combined Work from the
40
+ Application, but excluding the System Libraries of the Combined Work.
41
+
42
+ 1. Exception to Section 3 of the GNU GPL.
43
+
44
+ You may convey a covered work under sections 3 and 4 of this License
45
+ without being bound by section 3 of the GNU GPL.
46
+
47
+ 2. Conveying Modified Versions.
48
+
49
+ If you modify a copy of the Library, and, in your modifications, a
50
+ facility refers to a function or data to be supplied by an Application
51
+ that uses the facility (other than as an argument passed when the
52
+ facility is invoked), then you may convey a copy of the modified
53
+ version:
54
+
55
+ a) under this License, provided that you make a good faith effort to
56
+ ensure that, in the event an Application does not supply the
57
+ function or data, the facility still operates, and performs
58
+ whatever part of its purpose remains meaningful, or
59
+
60
+ b) under the GNU GPL, with none of the additional permissions of
61
+ this License applicable to that copy.
62
+
63
+ 3. Object Code Incorporating Material from Library Header Files.
64
+
65
+ The object code form of an Application may incorporate material from
66
+ a header file that is part of the Library. You may convey such object
67
+ code under terms of your choice, provided that, if the incorporated
68
+ material is not limited to numerical parameters, data structure
69
+ layouts and accessors, or small macros, inline functions and templates
70
+ (ten or fewer lines in length), you do both of the following:
71
+
72
+ a) Give prominent notice with each copy of the object code that the
73
+ Library is used in it and that the Library and its use are
74
+ covered by this License.
75
+
76
+ b) Accompany the object code with a copy of the GNU GPL and this license
77
+ document.
78
+
79
+ 4. Combined Works.
80
+
81
+ You may convey a Combined Work under terms of your choice that,
82
+ taken together, effectively do not restrict modification of the
83
+ portions of the Library contained in the Combined Work and reverse
84
+ engineering for debugging such modifications, if you also do each of
85
+ the following:
86
+
87
+ a) Give prominent notice with each copy of the Combined Work that
88
+ the Library is used in it and that the Library and its use are
89
+ covered by this License.
90
+
91
+ b) Accompany the Combined Work with a copy of the GNU GPL and this license
92
+ document.
93
+
94
+ c) For a Combined Work that displays copyright notices during
95
+ execution, include the copyright notice for the Library among
96
+ these notices, as well as a reference directing the user to the
97
+ copies of the GNU GPL and this license document.
98
+
99
+ d) Do one of the following:
100
+
101
+ 0) Convey the Minimal Corresponding Source under the terms of this
102
+ License, and the Corresponding Application Code in a form
103
+ suitable for, and under terms that permit, the user to
104
+ recombine or relink the Application with a modified version of
105
+ the Linked Version to produce a modified Combined Work, in the
106
+ manner specified by section 6 of the GNU GPL for conveying
107
+ Corresponding Source.
108
+
109
+ 1) Use a suitable shared library mechanism for linking with the
110
+ Library. A suitable mechanism is one that (a) uses at run time
111
+ a copy of the Library already present on the user's computer
112
+ system, and (b) will operate properly with a modified version
113
+ of the Library that is interface-compatible with the Linked
114
+ Version.
115
+
116
+ e) Provide Installation Information, but only if you would otherwise
117
+ be required to provide such information under section 6 of the
118
+ GNU GPL, and only to the extent that such information is
119
+ necessary to install and execute a modified version of the
120
+ Combined Work produced by recombining or relinking the
121
+ Application with a modified version of the Linked Version. (If
122
+ you use option 4d0, the Installation Information must accompany
123
+ the Minimal Corresponding Source and Corresponding Application
124
+ Code. If you use option 4d1, you must provide the Installation
125
+ Information in the manner specified by section 6 of the GNU GPL
126
+ for conveying Corresponding Source.)
127
+
128
+ 5. Combined Libraries.
129
+
130
+ You may place library facilities that are a work based on the
131
+ Library side by side in a single library together with other library
132
+ facilities that are not Applications and are not covered by this
133
+ License, and convey such a combined library under terms of your
134
+ choice, if you do both of the following:
135
+
136
+ a) Accompany the combined library with a copy of the same work based
137
+ on the Library, uncombined with any other library facilities,
138
+ conveyed under the terms of this License.
139
+
140
+ b) Give prominent notice with the combined library that part of it
141
+ is a work based on the Library, and explaining where to find the
142
+ accompanying uncombined form of the same work.
143
+
144
+ 6. Revised Versions of the GNU Lesser General Public License.
145
+
146
+ The Free Software Foundation may publish revised and/or new versions
147
+ of the GNU Lesser General Public License from time to time. Such new
148
+ versions will be similar in spirit to the present version, but may
149
+ differ in detail to address new problems or concerns.
150
+
151
+ Each version is given a distinguishing version number. If the
152
+ Library as you received it specifies that a certain numbered version
153
+ of the GNU Lesser General Public License "or any later version"
154
+ applies to it, you have the option of following the terms and
155
+ conditions either of that published version or of any later version
156
+ published by the Free Software Foundation. If the Library as you
157
+ received it does not specify a version number of the GNU Lesser
158
+ General Public License, you may choose any version of the GNU Lesser
159
+ General Public License ever published by the Free Software Foundation.
160
+
161
+ If the Library as you received it specifies that a proxy can decide
162
+ whether future versions of the GNU Lesser General Public License shall
163
+ apply, that proxy's public statement of acceptance of any version is
164
+ permanent authorization for you to choose that version for the
165
+ Library.
data/ChangeLog.md ADDED
@@ -0,0 +1,44 @@
1
+ ### 1.0.0 / 2023-XX-XX
2
+
3
+ * Require `ruby` >= 3.0.0.
4
+ * Renamed the gem to `ronin-code-asm`.
5
+ * Require `ruby-yasm` ~> 0.3.
6
+ * Added {Ronin::Code::ASM::OS.[]}.
7
+ * Removed the `data_paths` gem dependency.
8
+
9
+ ### 0.2.0 / 2013-06-17
10
+
11
+ * Require [Ruby] >= 1.9.1.
12
+ * Added `Ronin::ASM::Syntax::ATT.emit_section` and
13
+ `Ronin::ASM::Syntax::Intel.emit_section`.
14
+ * Added `Ronin::ASM::Syntax::ATT.emit_prologue` and
15
+ `Ronin::ASM::Syntax::Intel.emit_prologue`.
16
+ * `Ronin::ASM::Instruction` now assumes Intel operand order:
17
+
18
+ mov eax, 0x41
19
+
20
+ * `Ronin::ASM::Program#byte`, `Ronin::ASM::Program#word`,
21
+ `Ronin::ASM::Program#dword` and `Ronin::ASM::Program#qword` methods can now
22
+ accept `Ronin::ASM::MemoryOperand`s.
23
+
24
+ mov bx, word(ebp+8)
25
+
26
+ * `Ronin::ASM::Program#to_asm` now emits Intel syntax by default.
27
+ * `Ronin::ASM::Program#assemble` now uses Intel syntax by default.
28
+ * `Ronin::ASM::Syntax::ATT` emit `.code32` directive to forcibly enable 32-bit
29
+ mode for the x86 architecture. [YASM][yasm] apparently defaults to 16-bit
30
+ mode.
31
+ * `Ronin::ASM::Syntax::Intel` emit `BITS 32` directive to forcibly enable
32
+ 32-bit mode for the x86 architecture.
33
+
34
+ ### 0.1.0 / 2012-08-26
35
+
36
+ * Initial release:
37
+ * Provides a Ruby DSL for writing Assembly programs.
38
+ * Supports X86 and AMD64 instruction sets.
39
+ * Supports ATT and Intel syntax.
40
+ * Uses [yasm] to assemble the programs.
41
+ * Supports assembling Shellcode.
42
+
43
+ [Ruby]: http://www.ruby-lang.org
44
+ [yasm]: http://yasm.tortall.net/
data/Gemfile ADDED
@@ -0,0 +1,25 @@
1
+ source 'https://rubygems.org'
2
+
3
+ gemspec
4
+
5
+ gem 'jruby-openssl', '~> 0.7', platform: :jruby
6
+
7
+ # gem 'ruby-yasm', '~> 0.3', github: 'postmodern/ruby-yasm',
8
+ # branch: 'main'
9
+
10
+ group :development do
11
+ gem 'rake'
12
+ gem 'rubygems-tasks', '~> 0.1'
13
+
14
+ gem 'rspec', '~> 3.0'
15
+ gem 'simplecov', '~> 0.20'
16
+
17
+ gem 'kramdown', '~> 2.3'
18
+ gem 'redcarpet', platform: :mri
19
+ gem 'yard', '~> 0.9'
20
+ gem 'yard-spellcheck', require: false
21
+
22
+ gem 'dead_end', require: false
23
+ gem 'sord', require: false
24
+ gem 'stackprof', require: false
25
+ end
data/README.md ADDED
@@ -0,0 +1,166 @@
1
+ # ronin-code-asm
2
+
3
+ [![CI](https://github.com/ronin-rb/ronin-code-asm/actions/workflows/ruby.yml/badge.svg)](https://github.com/ronin-rb/ronin-asm/actions/workflows/ruby.yml)
4
+ [![Code Climate](https://codeclimate.com/github/ronin-rb/ronin-code-asm.svg)](https://codeclimate.com/github/ronin-rb/ronin-asm)
5
+
6
+ * [Source](https://github.com/ronin-rb/ronin-code-asm)
7
+ * [Issues](https://github.com/ronin-rb/ronin-code-asm/issues)
8
+ * [Documentation](https://ronin-rb.dev/docs/ronin-code-asm/frames)
9
+ * [Discord](https://discord.gg/6WAb3PsVX9) |
10
+ [Twitter](https://twitter.com/ronin_rb) |
11
+ [Mastodon](https://infosec.exchange/@ronin_rb)
12
+
13
+ ## Description
14
+
15
+ {Ronin::Code::ASM} is a Ruby DSL for crafting Assembly programs and Shellcode.
16
+
17
+ ## Features
18
+
19
+ * Provides a Ruby DSL for writing Assembly programs.
20
+ * Supports X86 and AMD64 instruction sets.
21
+ * Supports ATT and Intel syntax.
22
+ * Uses [yasm] to assemble the programs.
23
+ * Supports assembling Shellcode.
24
+ * Has 95% documentation coverage.
25
+ * Has 99% test coverage.
26
+
27
+ ## Examples
28
+
29
+ Create a program:
30
+
31
+ ```ruby
32
+ asm = Ronin::Code::ASM.new do
33
+ push ebx
34
+ mov eax, 0xc0ffee
35
+ pop ebx
36
+ hlt
37
+ end
38
+
39
+ puts asm.to_asm
40
+ # BITS 32
41
+ # section .text
42
+ # _start:
43
+ # push ebx
44
+ # mov eax, WORD 0xc0ffee
45
+ # pop ebx
46
+ # hlt
47
+
48
+ puts asm.to_asm(:att)
49
+ # .code32
50
+ # .text
51
+ # _start:
52
+ # pushl %ebx
53
+ # movl $0xc0ffee, %eax
54
+ # popl %ebx
55
+ # hlt
56
+ ```
57
+
58
+ Create shellcode:
59
+
60
+ ```ruby
61
+ shellcode = Ronin::Code::ASM::Shellcode.new(arch: :x86) do
62
+ xor eax, eax
63
+ push eax
64
+ push 0x68732f2f
65
+ push 0x6e69622f
66
+ mov ebx, esp
67
+ push eax
68
+ push ebx
69
+ mov ecx, esp
70
+ xor edx, edx
71
+ mov al, 0xb
72
+ int 0x80
73
+ end
74
+
75
+ shellcode.assemble
76
+ # => "1\xC0Ph//shh/bin\x89\xDCPS\x89\xCC1\xD2\xB0\v\xCD\x80"
77
+ ```
78
+
79
+ ### Immediate Operands
80
+
81
+ Immediate operands can be Integers or `nil`:
82
+
83
+ ```ruby
84
+ mov eax, 0xff
85
+ mov ebx, nil
86
+ ```
87
+
88
+ The size of the operand can also be specified explicitly:
89
+
90
+ ```ruby
91
+ push byte(0xff)
92
+ push word(0xffff)
93
+ push dword(0xffffffff)
94
+ push qword(0xffffffffffffffff)
95
+ ```
96
+
97
+ ### Memory Operands
98
+
99
+ Memory operands can be expressed as arithmetic on registers:
100
+
101
+ ```ruby
102
+ mov ebx, esp+8
103
+ mov ebx, esp-8
104
+ mov ebx, esp+esi
105
+ mov ebx, esp+(esi*4)
106
+ ```
107
+
108
+ ### Labels
109
+
110
+ Labels can be expressed with blocks:
111
+
112
+ ```ruby
113
+ _loop do
114
+ inc eax
115
+ cmp eax, 10
116
+ jl :_loop
117
+ end
118
+ ```
119
+
120
+ ### Syscalls
121
+
122
+ If the `:os` option is specified, then syscall numbers can be looked up via the
123
+ `syscalls` Hash:
124
+
125
+ ```ruby
126
+ Ronin::Code::ASM.new(os: 'Linux') do
127
+ # ...
128
+ mov al, syscalls[:execve]
129
+ int 0x80
130
+ end
131
+ ```
132
+
133
+ ## Requirements
134
+
135
+ * [Ruby] >= 3.0.0
136
+ * [yasm] >= 0.6.0
137
+ * [ruby-yasm] ~> 0.3
138
+
139
+ ## Install
140
+
141
+ ```shell
142
+ $ gem install ronin-code-asm
143
+ ```
144
+
145
+ ## License
146
+
147
+ ronin-code-asm - A Ruby DSL for crafting Assembly programs and shellcode.
148
+
149
+ Copyright (c) 2007-2022 Hal Brodigan (postmodern.mod3 at gmail.com)
150
+
151
+ ronin-code-asm is free software: you can redistribute it and/or modify
152
+ it under the terms of the GNU Lesser General Public License as published
153
+ by the Free Software Foundation, either version 3 of the License, or
154
+ (at your option) any later version.
155
+
156
+ ronin-code-asm is distributed in the hope that it will be useful,
157
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
158
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
159
+ GNU Lesser General Public License for more details.
160
+
161
+ You should have received a copy of the GNU Lesser General Public License
162
+ along with ronin-code-asm. If not, see <https://www.gnu.org/licenses/>.
163
+
164
+ [Ruby]: https://www.ruby-lang.org
165
+ [yasm]: https://yasm.tortall.net/
166
+ [ruby-yasm]: https://github.com/sophsec/ruby-yasm#readme
data/Rakefile ADDED
@@ -0,0 +1,39 @@
1
+ require 'rubygems'
2
+
3
+ begin
4
+ require 'bundler'
5
+ rescue LoadError => e
6
+ warn e.message
7
+ warn "Run `gem install bundler` to install Bundler."
8
+ exit e.status_code
9
+ end
10
+
11
+ begin
12
+ Bundler.setup(:development)
13
+ rescue Bundler::BundlerError => e
14
+ warn e.message
15
+ warn "Run `bundle install` to install missing gems"
16
+ exit e.status_code
17
+ end
18
+
19
+ require 'rake'
20
+
21
+ require 'rubygems/tasks'
22
+ Gem::Tasks.new(sign: {checksum: true, pgp: true})
23
+
24
+ require 'rspec/core/rake_task'
25
+ RSpec::Core::RakeTask.new
26
+ task :default => :spec
27
+ task :test => :spec
28
+
29
+ namespace :spec do
30
+ RSpec::Core::RakeTask.new(:integration) do |t|
31
+ t.pattern = %w[spec/program_spec.rb spec/shellcode_spec.rb]
32
+ t.rspec_opts = '--tag integration'
33
+ end
34
+ end
35
+
36
+ task :test => 'spec:integration'
37
+
38
+ require 'yard'
39
+ YARD::Rake::YardocTask.new