ronin-exploits 0.2.1 → 0.3.0

data/lib/ronin/ui/command_line/commands/gen_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/exploit'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenExploit < Generators::Exploits::Exploit
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_ftp_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/ftp'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenFtpExploit < Generators::Exploits::FTP
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_http_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/http'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenHttpExploit < Generators::Exploits::HTTP
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_local_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/local'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenLocalExploit < Generators::Exploits::Local
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/{exploits/license.rb → ui/command_line/commands/gen_nops.rb}

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,17 +17,18 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
-require 'ronin/license'
+require 'ronin/generators/payloads/nops'
 
 module Ronin
-  class License
-
-    # The exploits under the license
-    has n, :exploits,
-           :class_name => 'Ronin::Exploits::Exploit'
+  module UI
+    module CommandLine
+      module Commands
+        class GenNops < Generators::Payloads::Nops
 
+        end
+      end
+    end
   end
 end

data/lib/ronin/ui/command_line/commands/gen_payload.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/payloads/payload'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenPayload < Generators::Payloads::Payload
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_remote_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/remote'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenRemoteExploit < Generators::Exploits::Remote
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_remote_tcp_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/remote_tcp'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenRemoteTcpExploit < Generators::Exploits::RemoteTCP
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_remote_udp_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/remote_udp'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenRemoteUdpExploit < Generators::Exploits::RemoteUDP
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_shellcode.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/payloads/shellcode'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenShellcode < Generators::Payloads::Shellcode
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/gen_web_exploit.rb

@@ -0,0 +1,34 @@
+#
+# Ronin Exploits - A Ruby library for Ronin that provides exploitation and
+# payload crafting functionality.
+#
+# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/generators/exploits/web'
+
+module Ronin
+  module UI
+    module CommandLine
+      module Commands
+        class GenWebExploit < Generators::Exploits::Web
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/ui/command_line/commands/payload.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
 # payload crafting functionality.
 #
@@ -18,12 +17,10 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/payloads'
 require 'ronin/ui/command_line/command'
-require 'ronin/ui/verbose'
 require 'ronin/database'
 
 require 'parameters/parser'
@@ -34,69 +31,95 @@ module Ronin
       module Commands
         class Payload < Command
 
-          include Parameters::Parser
+          desc "payload [NAME] [options]", "Builds the specified Payload"
+          method_option :database, :type => :string, :default => Database.config, :aliases => '-D'
+          method_option :params, :type => :array, :default => [], :aliases => '-p'
+          method_option :host, :type => :string
+          method_option :port, :type => :numeric
+          method_option :local_host, :type => :string
+          method_option :local_port, :type => :numeric
+          method_option :file, :type => :string, :aliases => '-f'
+          method_option :describing, :type => :string, :aliases => '-d'
+          method_option :version, :type => :string, :aliases => '-V'
+          method_option :license, :type => :string, :aliases => '-l'
+          method_option :arch, :type => :string, :aliases => '-a'
+          method_option :os, :type => :string, :aliases => '-o'
+          method_option :raw, :type => :boolean, :aliases => '-r'
+
+          def default(name=nil)
+            UI::Output.silent = true if options.raw?
+            Database.setup(options[:database])
 
-          def defaults
-            @path = nil
-            @query = {}
-            @params = {}
+            # Load the payload
+            if options[:file]
+              load_payload!
+            else
+              find_payload!(name)
+            end
+
+            unless @payload
+              print_error "Could not find the specified payload"
+              exit -1
+            end
+
+            params = Parameters::Parser.parse(options[:params])
+            params[:host] = options[:host] if options[:host]
+            params[:port] = options[:port] if options[:port]
+            params[:local_host] = options[:local_host] if options[:local_host]
+            params[:local_port] = options[:local_port] if options[:local_port]
+
+            begin
+              # Build the payload
+              @payload.build!(params)
+            rescue Parameters::MissingParam, Payloads::Exception => e
+              print_error(e.message)
+            end
+
+            raw_payload = @payload.raw_payload
+
+            if options.raw?
+              # Write the raw payload
+              STDOUT.write(raw_payload)
+            else
+              # Dump the built payload
+              puts raw_payload.dump
+            end
           end
 
-          def define_options(opts)
-            opts.usage = '[options] [NAME]'
+          protected
 
-            opts.options do
-              opts.on('-D','--database URI','The URI for the database') do |uri|
-                Database.config = uri.to_s
-              end
+          def load_payload!
+            @payload = Payloads::Payload.load_from(options[:file])
+          end
 
-              opts.on('-p','--param NAME=VALUE','Add a parameter NAME and VALUE') do |name_and_value|
-                @params.merge!(Parser.parse_param(name_and_value))
+          def find_payload!(name=nil)
+            @payload = Payloads::Payload.load_first do |payloads|
+              if name
+                payloads = payloads.named(name)
               end
 
-              opts.on('-f','--file PATH','Load the payload from the specified FILE') do |path|
-                @path = path
+              if options[:describing]
+                payloads = payloads.describing(options[:describing])
               end
 
-              opts.on('-v','--verbose','Enables verbose output') do
-                UI::Verbose.enable!
+              if options[:version]
+                payloads = payloads.revision(options[:version])
               end
 
-              opts.on('-V','--version VERSION','Use the payload with the specified VERSION') do |version|
-                @query[:version] = version.to_s
+              if options[:license]
+                payloads = payloads.licensed_under(options[:license])
               end
-            end
-
-            opts.arguments(
-              'NAME' => 'The NAME of the payload to load'
-            )
-
-            opts.summary %{
-              Build the specified payload
-            }
-          end
-
-          def arguments(*args)
-            Database.setup
 
-            # Load the payload
-            if @path
-              payload = Payloads::Payload.load_from(@path)
-            elsif args.length >= 1
-              @query[:name] = args.first
-
-              unless (payload = Payloads::Payload.load_first(@query))
-                fail("could not find the specified payload")
+              if options[:arch]
+                payloads = payloads.targeting_arch(options[:arch])
               end
-            else
-              fail("must either specify a payload NAME or a PATH")
-            end
 
-            # Build the payload
-            payload.build!(@params)
+              if options[:os]
+                payloads = payloads.targeting_os(options[:os])
+              end
 
-            # Dump the built payload
-            puts payload.payload.dump
+              payloads
+            end
           end
 
         end