ronin-exploits 0.2.1 → 0.3.0

data/lib/ronin/model/targets_product.rb

@@ -0,0 +1,68 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/product'
+
+require 'extlib'
+
+module Ronin
+  module Model
+    module TargetsProduct
+      def self.included(base)
+        base.module_eval do
+          # The targeted product
+          belongs_to :product,
+                     :nullable => true
+
+          #
+          # The product being targeted.
+          #
+          # @param [Array] arguments
+          #   If any arguments are given, a new Product will be created using
+          #   the given arguments.
+          #
+          # @return [Product]
+          #   The product of that is being targeted.
+          #
+          # @example Accessing the targeted product.
+          #   target.product
+          #   # => nil
+          #
+          # @example Setting the targeted product.
+          #   target.product(:name => 'Apache', :version => '1.3.3.7')
+          #   # => #<Ronin::Product type=Ronin::Product id=nil name="Apache"
+          #   # version="1.3.3.7" vendor="Apache">
+          #
+          def product(*arguments)
+            unless arguments.empty?
+              return self.product = Product.first_or_create(*arguments)
+            else
+              return relationships[:product].get(self)
+            end
+          end
+        end
+
+        model_name = base.name.split('::').last.snake_case.plural.to_sym
+        Product.has(Product.n,model_name,:model => base.name)
+      end
+    end
+  end
+end

data/lib/ronin/payloads.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/payloads/encoders'

data/lib/ronin/payloads/asm_payload.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/payloads/binary_payload'
@@ -27,6 +25,14 @@ module Ronin
   module Payloads
     class ASMPayload < BinaryPayload
 
+      #
+      # Creates a new Ronin::Payloads::ASMPayload object using the given
+      # _block_.
+      #
+      #   ronin_asm_payload do
+      #     ...
+      #   end
+      #
       contextify :ronin_asm_payload
 
     end

data/lib/ronin/payloads/binary_payload.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/payloads/payload'
@@ -29,6 +27,14 @@ module Ronin
   module Payloads
     class BinaryPayload < Payload
 
+      #
+      # Creates a new Ronin::Payloads::BinaryPayload object using the given
+      # _block_.
+      #
+      #   ronin_asm_payload do
+      #     ...
+      #   end
+      #
       contextify :ronin_binary_payload
 
     end

data/lib/ronin/payloads/control.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/vuln/behavior'
@@ -36,9 +34,7 @@ module Ronin
       property :id, Serial
 
       # The behavior the ability provides
-      belongs_to :behavior,
-                 :child_key => [:behavior_id],
-                 :class_name => 'Vuln::Behavior'
+      belongs_to :behavior, :model => 'Vuln::Behavior'
 
       # The payload which has this ability
       belongs_to :payload

data/lib/ronin/payloads/encoders.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,9 +17,9 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
+require 'ronin/payloads/encoders/encoder'
 require 'ronin/payloads/encoders/xor'
 require 'ronin/database'
 

data/lib/ronin/payloads/encoders/encoder.rb

@@ -0,0 +1,92 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/model/has_name'
+require 'ronin/model/has_description'
+require 'ronin/model/targets_arch'
+require 'ronin/model/targets_os'
+require 'ronin/cacheable'
+
+require 'parameters'
+
+module Ronin
+  module Payloads
+    module Encoders
+      class Encoder
+
+        include Parameters
+        include Cacheable
+        include Model::HasName
+        include Model::HasDescription
+        include Model::TargetsArch
+        include Model::TargetsOS
+
+        #
+        # Creates a new Ronin::Payload::Encoder object using the given
+        # _block_.
+        #
+        #   ronin_payload_encoder do
+        #     ...
+        #   end
+        #
+        contextify :ronin_payload_encoder
+
+        # Primary key of the payload
+        property :id, Serial
+
+        #
+        # Creates a new Encoder object with the given _arguments_.
+        #
+        def initialize(*arguments)
+          super(*arguments)
+
+          initialize_params(*arguments)
+        end
+
+        #
+        # Default method which will encode the specified _data_.
+        # Returns the specified _data_ by default.
+        #
+        def encode(data)
+          data
+        end
+
+        #
+        # Returns the name of the payload encoder.
+        #
+        def to_s
+          self.name.to_s
+        end
+
+        #
+        # Inspects the contents of the payload encoder.
+        #
+        def inspect
+          str = "#{self.class}: #{self}"
+          str << " #{self.params.inspect}" unless self.params.empty?
+
+          return "#<#{str}>"
+        end
+
+      end
+    end
+  end
+end

data/lib/ronin/payloads/encoders/xor.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,10 +17,9 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
-require 'ronin/payloads/encoder'
+require 'ronin/payloads/encoders/encoder'
 
 require 'chars'
 
@@ -58,9 +56,9 @@ module Ronin
         # XOR encodes the specified _data_ prefixing the XOR key to the
         # encoded data.
         #
-        def call(data)
-          alphabet = Chars.all.select { |b| data.include?(b.chr) }
-          excluded = (Chars.all - alphabet)
+        def encode(data)
+          alphabet = Chars.ascii.select { |b| data.include?(b.chr) }
+          excluded = (Chars.ascii - alphabet)
 
           key = excluded.select { |b|
             @allow.include?(b) && alphabet.all? { |i|

data/lib/ronin/payloads/exceptions.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,7 +17,7 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/payloads/exceptions/unknown_helper'
+require 'ronin/payloads/exceptions/not_implemented'

data/lib/ronin/payloads/{helpers/exceptions/not_implemented.rb → exceptions/exception.rb}

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,14 +17,11 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 module Ronin
   module Payloads
-    module Helpers
-      class NotImplemented < RuntimeError
-      end
+    class Exception < RuntimeError
     end
   end
 end

data/lib/ronin/payloads/{helpers/exceptions/program_not_found.rb → exceptions/not_implemented.rb}

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,14 +17,13 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
+require 'ronin/payloads/exceptions/exception'
+
 module Ronin
   module Payloads
-    module Helpers
-      class ProgramNotFound < RuntimeError
-      end
+    class NotImplemented < Exception
     end
   end
 end

data/lib/ronin/payloads/exceptions/unknown_helper.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,12 +17,13 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
+require 'ronin/payloads/exceptions/exception'
+
 module Ronin
   module Payloads
-    class UnknownHelper < RuntimeError
+    class UnknownHelper < Exception
     end
   end
 end

data/lib/ronin/payloads/has_payload.rb

@@ -0,0 +1,111 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/payloads/payload'
+
+module Ronin
+  module Payloads
+    module HasPayload
+      #
+      # @return [Payload]
+      #   The payload being used.
+      #
+      def payload
+        @payload
+      end
+
+      #
+      # Sets the payload.
+      #
+      # @param [Payload] new_payload
+      #   The new payload to use.
+      #
+      def payload=(new_payload)
+        @payload = new_payload
+      end
+
+      #
+      # @return [Payload]
+      #   The model to search within for acceptable payloads to use with
+      #   the exploit.
+      #
+      # @since 0.3.0
+      #
+      def use_payload_class
+        Ronin::Payloads::Payload
+      end
+
+      #
+      # Selects and uses a new payload.
+      #
+      # @param [Hash] query
+      #   Query options to use when selecting the payload.
+      #
+      # @yield [payloads]
+      #   If a block is given, it will be passed all payloads matching
+      #   the given query, in order to be filtered down. The first payload
+      #   from the filtered payloads will end up being selected.
+      #
+      # @yieldparam [Array<Payload>] payloads
+      #   All available payloads that match the given query.
+      #
+      # @return [Payload, nil]
+      #   The new payload, or +nil+ if no payload was found.
+      #
+      # @since 0.3.0
+      #
+      def use_payload!(query={},&block)
+        self.payload = use_payload_class.load_first(query,&block)
+      end
+
+      #
+      # Loads and uses a new payload from a given path.
+      #
+      # @param [String] path
+      #   The path to load the payload from.
+      #
+      # @return [Payload, nil]
+      #   The new payload, or +nil+ if no payload was found.
+      #
+      # @since 0.3.0
+      #
+      def use_payload_from!(path)
+        self.payload = use_payload_class.load_from(path)
+      end
+
+      protected
+
+      #
+      # Relays method calls to the payload, if the payload is a kind of 
+      # Ronin::Payloads::Payload.
+      #
+      # @since 0.3.0
+      #
+      def method_missing(name,*arguments,&block)
+        if @payload.kind_of?(Ronin::Payloads::Payload)
+          return @payload.send(name,*arguments,&block)
+        end
+
+        super(name,*arguments,&block)
+      end
+    end
+  end
+end