ronin-exploits 0.3.0 → 1.0.0.beta1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (338) hide show
  1. checksums.yaml +7 -0
  2. data/.document +4 -0
  3. data/.editorconfig +11 -0
  4. data/.github/workflows/ruby.yml +31 -0
  5. data/.gitignore +13 -0
  6. data/.mailmap +1 -0
  7. data/.rspec +1 -0
  8. data/.ruby-version +1 -0
  9. data/.yardopts +1 -0
  10. data/COPYING.txt +161 -335
  11. data/{History.txt → ChangeLog.md} +122 -14
  12. data/Gemfile +50 -0
  13. data/README.md +454 -0
  14. data/Rakefile +37 -23
  15. data/bin/ronin-exploits +13 -6
  16. data/data/new/exploit.rb.erb +158 -0
  17. data/gemspec.yml +37 -0
  18. data/lib/ronin/exploits/advisory.rb +84 -0
  19. data/lib/ronin/exploits/cli/command.rb +39 -0
  20. data/lib/ronin/exploits/cli/commands/irb.rb +57 -0
  21. data/lib/ronin/exploits/cli/commands/list.rb +80 -0
  22. data/lib/ronin/exploits/cli/commands/new.rb +332 -0
  23. data/lib/ronin/exploits/cli/commands/run.rb +396 -0
  24. data/lib/ronin/exploits/cli/commands/show.rb +264 -0
  25. data/lib/ronin/exploits/cli/exploit_command.rb +114 -0
  26. data/lib/ronin/exploits/cli/exploit_methods.rb +114 -0
  27. data/lib/ronin/exploits/cli/ruby_shell.rb +51 -0
  28. data/lib/ronin/exploits/cli.rb +46 -0
  29. data/lib/ronin/exploits/client_side_web_vuln.rb +69 -0
  30. data/lib/ronin/exploits/exceptions.rb +27 -17
  31. data/lib/ronin/exploits/exploit.rb +501 -582
  32. data/lib/ronin/exploits/heap_overflow.rb +50 -0
  33. data/lib/ronin/exploits/lfi.rb +141 -0
  34. data/lib/ronin/exploits/loot/file.rb +113 -0
  35. data/lib/ronin/exploits/loot.rb +119 -0
  36. data/lib/ronin/exploits/memory_corruption.rb +53 -0
  37. data/lib/ronin/exploits/metadata/arch.rb +83 -0
  38. data/lib/ronin/exploits/metadata/cookie_param.rb +80 -0
  39. data/lib/ronin/exploits/metadata/default_filename.rb +69 -0
  40. data/lib/ronin/exploits/metadata/default_port.rb +69 -0
  41. data/lib/ronin/exploits/metadata/header_name.rb +80 -0
  42. data/lib/ronin/exploits/metadata/os.rb +117 -0
  43. data/lib/ronin/exploits/metadata/shouts.rb +85 -0
  44. data/lib/ronin/exploits/metadata/url_path.rb +82 -0
  45. data/lib/ronin/exploits/metadata/url_query_param.rb +80 -0
  46. data/lib/ronin/exploits/mixins/binary.rb +106 -0
  47. data/lib/ronin/exploits/mixins/build_dir.rb +61 -0
  48. data/lib/ronin/exploits/mixins/file_builder.rb +102 -0
  49. data/lib/ronin/exploits/mixins/format_string.rb +87 -0
  50. data/lib/ronin/exploits/mixins/has_payload.rb +202 -0
  51. data/lib/ronin/exploits/mixins/has_targets.rb +297 -0
  52. data/lib/ronin/exploits/mixins/html.rb +213 -0
  53. data/lib/ronin/exploits/mixins/http.rb +866 -0
  54. data/lib/ronin/exploits/mixins/loot.rb +84 -0
  55. data/lib/ronin/exploits/mixins/nops.rb +121 -0
  56. data/lib/ronin/exploits/mixins/remote_tcp.rb +272 -0
  57. data/lib/ronin/exploits/mixins/remote_udp.rb +264 -0
  58. data/lib/ronin/exploits/mixins/seh.rb +136 -0
  59. data/lib/ronin/exploits/mixins/stack_overflow.rb +124 -0
  60. data/lib/ronin/exploits/mixins/text.rb +65 -0
  61. data/lib/ronin/exploits/mixins.rb +32 -0
  62. data/lib/ronin/exploits/open_redirect.rb +103 -0
  63. data/lib/ronin/exploits/params/base_url.rb +84 -0
  64. data/lib/ronin/exploits/params/bind_host.rb +53 -0
  65. data/lib/ronin/exploits/params/bind_port.rb +53 -0
  66. data/lib/ronin/exploits/params/filename.rb +71 -0
  67. data/lib/ronin/exploits/params/host.rb +56 -0
  68. data/lib/ronin/exploits/params/port.rb +71 -0
  69. data/lib/ronin/exploits/registry.rb +32 -0
  70. data/lib/ronin/exploits/rfi.rb +106 -0
  71. data/lib/ronin/exploits/root.rb +28 -0
  72. data/lib/ronin/exploits/seh_overflow.rb +90 -0
  73. data/lib/ronin/exploits/sqli.rb +172 -0
  74. data/lib/ronin/exploits/ssti.rb +108 -0
  75. data/lib/ronin/exploits/stack_overflow.rb +90 -0
  76. data/lib/ronin/exploits/target.rb +63 -103
  77. data/lib/ronin/exploits/test_result.rb +80 -0
  78. data/lib/ronin/exploits/use_after_free.rb +50 -0
  79. data/lib/ronin/exploits/version.rb +11 -12
  80. data/lib/ronin/exploits/web.rb +18 -89
  81. data/lib/ronin/exploits/web_vuln.rb +378 -0
  82. data/lib/ronin/exploits/xss.rb +102 -0
  83. data/lib/ronin/exploits.rb +19 -26
  84. data/man/ronin-exploits-irb.1 +31 -0
  85. data/man/ronin-exploits-irb.1.md +22 -0
  86. data/man/ronin-exploits-list.1 +37 -0
  87. data/man/ronin-exploits-list.1.md +27 -0
  88. data/man/ronin-exploits-new.1 +98 -0
  89. data/man/ronin-exploits-new.1.md +73 -0
  90. data/man/ronin-exploits-run.1 +117 -0
  91. data/man/ronin-exploits-run.1.md +87 -0
  92. data/man/ronin-exploits-show.1 +45 -0
  93. data/man/ronin-exploits-show.1.md +33 -0
  94. data/man/ronin-exploits.1 +55 -0
  95. data/man/ronin-exploits.1.md +41 -0
  96. data/ronin-exploits.gemspec +62 -0
  97. data/spec/advisory_spec.rb +71 -0
  98. data/spec/cli/exploit_command_spec.rb +68 -0
  99. data/spec/cli/exploit_methods_spec.rb +208 -0
  100. data/spec/cli/ruby_shell_spec.rb +14 -0
  101. data/spec/client_side_web_vuln_spec.rb +117 -0
  102. data/spec/exploit_spec.rb +538 -0
  103. data/spec/exploits_spec.rb +3 -4
  104. data/spec/heap_overflow_spec.rb +14 -0
  105. data/spec/lfi_spec.rb +162 -0
  106. data/spec/loot/file_spec.rb +131 -0
  107. data/spec/loot_spec.rb +138 -0
  108. data/spec/memory_corruption_spec.rb +22 -0
  109. data/spec/metadata/arch_spec.rb +82 -0
  110. data/spec/metadata/cookie_param_spec.rb +67 -0
  111. data/spec/metadata/default_filename_spec.rb +62 -0
  112. data/spec/metadata/default_port_spec.rb +62 -0
  113. data/spec/metadata/header_name_spec.rb +67 -0
  114. data/spec/metadata/os_spec.rb +164 -0
  115. data/spec/metadata/shouts_spec.rb +100 -0
  116. data/spec/metadata/url_path_spec.rb +67 -0
  117. data/spec/metadata/url_query_param_spec.rb +67 -0
  118. data/spec/mixins/binary_spec.rb +129 -0
  119. data/spec/mixins/build_dir.rb +66 -0
  120. data/spec/mixins/file_builder_spec.rb +67 -0
  121. data/spec/mixins/format_string_spec.rb +44 -0
  122. data/spec/mixins/has_payload_spec.rb +333 -0
  123. data/spec/mixins/has_targets_spec.rb +434 -0
  124. data/spec/mixins/html_spec.rb +772 -0
  125. data/spec/mixins/http_spec.rb +1227 -0
  126. data/spec/mixins/loot_spec.rb +20 -0
  127. data/spec/mixins/nops_spec.rb +165 -0
  128. data/spec/mixins/remote_tcp_spec.rb +217 -0
  129. data/spec/mixins/remote_udp_spec.rb +217 -0
  130. data/spec/mixins/seh_spec.rb +89 -0
  131. data/spec/mixins/stack_overflow_spec.rb +87 -0
  132. data/spec/mixins/text_spec.rb +43 -0
  133. data/spec/open_redirect_spec.rb +71 -0
  134. data/spec/params/base_url_spec.rb +71 -0
  135. data/spec/params/bind_host_spec.rb +34 -0
  136. data/spec/params/bind_port_spec.rb +35 -0
  137. data/spec/params/filename_spec.rb +77 -0
  138. data/spec/params/host_spec.rb +34 -0
  139. data/spec/params/port_spec.rb +77 -0
  140. data/spec/rfi_spec.rb +107 -0
  141. data/spec/seh_overflow_spec.rb +18 -0
  142. data/spec/spec_helper.rb +6 -10
  143. data/spec/sqli_spec.rb +306 -0
  144. data/spec/ssti_spec.rb +121 -0
  145. data/spec/stack_overflow_spec.rb +18 -0
  146. data/spec/target_spec.rb +92 -0
  147. data/spec/test_result_spec.rb +32 -0
  148. data/spec/use_after_free_spec.rb +14 -0
  149. data/spec/web_spec.rb +12 -0
  150. data/spec/web_vuln_spec.rb +854 -0
  151. data/spec/xss_spec.rb +69 -0
  152. metadata +356 -324
  153. data/Manifest.txt +0 -196
  154. data/README.txt +0 -274
  155. data/bin/ronin-exploit +0 -12
  156. data/bin/ronin-gen-binary-payload +0 -12
  157. data/bin/ronin-gen-exploit +0 -12
  158. data/bin/ronin-gen-ftp-exploit +0 -12
  159. data/bin/ronin-gen-http-exploit +0 -12
  160. data/bin/ronin-gen-local-exploit +0 -12
  161. data/bin/ronin-gen-nops +0 -12
  162. data/bin/ronin-gen-payload +0 -12
  163. data/bin/ronin-gen-remote-exploit +0 -12
  164. data/bin/ronin-gen-remote-tcp-exploit +0 -12
  165. data/bin/ronin-gen-remote-udp-exploit +0 -12
  166. data/bin/ronin-gen-shellcode +0 -12
  167. data/bin/ronin-gen-web-exploit +0 -12
  168. data/bin/ronin-payload +0 -12
  169. data/bin/ronin-payloads +0 -12
  170. data/lib/ronin/controls/behaviors.rb +0 -133
  171. data/lib/ronin/controls/exceptions/not_implemented.rb +0 -27
  172. data/lib/ronin/controls/exceptions/program_not_found.rb +0 -27
  173. data/lib/ronin/controls/exceptions.rb +0 -23
  174. data/lib/ronin/controls/file_system.rb +0 -145
  175. data/lib/ronin/controls/helpers/command_exec.rb +0 -143
  176. data/lib/ronin/controls/helpers/dir_create.rb +0 -42
  177. data/lib/ronin/controls/helpers/dir_listing.rb +0 -62
  178. data/lib/ronin/controls/helpers/dir_remove.rb +0 -42
  179. data/lib/ronin/controls/helpers/file_ctime.rb +0 -52
  180. data/lib/ronin/controls/helpers/file_mtime.rb +0 -53
  181. data/lib/ronin/controls/helpers/file_ownership.rb +0 -53
  182. data/lib/ronin/controls/helpers/file_read.rb +0 -62
  183. data/lib/ronin/controls/helpers/file_remove.rb +0 -51
  184. data/lib/ronin/controls/helpers/file_write.rb +0 -62
  185. data/lib/ronin/controls/helpers/memory_read.rb +0 -39
  186. data/lib/ronin/controls/helpers/memory_write.rb +0 -39
  187. data/lib/ronin/controls/helpers.rb +0 -33
  188. data/lib/ronin/controls.rb +0 -23
  189. data/lib/ronin/exploits/control.rb +0 -47
  190. data/lib/ronin/exploits/exceptions/exception.rb +0 -27
  191. data/lib/ronin/exploits/exceptions/exploit_not_built.rb +0 -29
  192. data/lib/ronin/exploits/exceptions/payload_size.rb +0 -29
  193. data/lib/ronin/exploits/exceptions/restricted_char.rb +0 -29
  194. data/lib/ronin/exploits/exceptions/target_data_missing.rb +0 -29
  195. data/lib/ronin/exploits/exceptions/target_unspecified.rb +0 -29
  196. data/lib/ronin/exploits/exceptions/unknown_helper.rb +0 -29
  197. data/lib/ronin/exploits/exploit_author.rb +0 -33
  198. data/lib/ronin/exploits/ftp.rb +0 -45
  199. data/lib/ronin/exploits/helpers/binary.rb +0 -50
  200. data/lib/ronin/exploits/helpers/buffer_overflow.rb +0 -115
  201. data/lib/ronin/exploits/helpers/file_based.rb +0 -112
  202. data/lib/ronin/exploits/helpers/format_string.rb +0 -117
  203. data/lib/ronin/exploits/helpers/padding.rb +0 -101
  204. data/lib/ronin/exploits/helpers.rb +0 -26
  205. data/lib/ronin/exploits/http.rb +0 -52
  206. data/lib/ronin/exploits/local.rb +0 -40
  207. data/lib/ronin/exploits/remote.rb +0 -40
  208. data/lib/ronin/exploits/remote_tcp.rb +0 -87
  209. data/lib/ronin/exploits/remote_udp.rb +0 -87
  210. data/lib/ronin/exploits/targets/buffer_overflow.rb +0 -46
  211. data/lib/ronin/exploits/targets/format_string.rb +0 -43
  212. data/lib/ronin/exploits/targets.rb +0 -27
  213. data/lib/ronin/exploits/verifiers.rb +0 -121
  214. data/lib/ronin/generators/exploits/exploit.rb +0 -70
  215. data/lib/ronin/generators/exploits/ftp.rb +0 -42
  216. data/lib/ronin/generators/exploits/http.rb +0 -42
  217. data/lib/ronin/generators/exploits/local.rb +0 -42
  218. data/lib/ronin/generators/exploits/remote.rb +0 -42
  219. data/lib/ronin/generators/exploits/remote_tcp.rb +0 -44
  220. data/lib/ronin/generators/exploits/remote_udp.rb +0 -44
  221. data/lib/ronin/generators/exploits/static.rb +0 -30
  222. data/lib/ronin/generators/exploits/web.rb +0 -45
  223. data/lib/ronin/generators/exploits.rb +0 -23
  224. data/lib/ronin/generators/payloads/binary_payload.rb +0 -42
  225. data/lib/ronin/generators/payloads/nops.rb +0 -42
  226. data/lib/ronin/generators/payloads/payload.rb +0 -66
  227. data/lib/ronin/generators/payloads/shellcode.rb +0 -42
  228. data/lib/ronin/generators/payloads/static.rb +0 -30
  229. data/lib/ronin/generators/payloads.rb +0 -23
  230. data/lib/ronin/model/has_default_port.rb +0 -54
  231. data/lib/ronin/model/targets_arch.rb +0 -68
  232. data/lib/ronin/model/targets_os.rb +0 -69
  233. data/lib/ronin/model/targets_product.rb +0 -68
  234. data/lib/ronin/payloads/asm_payload.rb +0 -40
  235. data/lib/ronin/payloads/binary_payload.rb +0 -42
  236. data/lib/ronin/payloads/control.rb +0 -47
  237. data/lib/ronin/payloads/encoders/encoder.rb +0 -92
  238. data/lib/ronin/payloads/encoders/xor.rb +0 -79
  239. data/lib/ronin/payloads/encoders.rb +0 -32
  240. data/lib/ronin/payloads/exceptions/exception.rb +0 -27
  241. data/lib/ronin/payloads/exceptions/not_implemented.rb +0 -29
  242. data/lib/ronin/payloads/exceptions/unknown_helper.rb +0 -29
  243. data/lib/ronin/payloads/exceptions.rb +0 -23
  244. data/lib/ronin/payloads/has_payload.rb +0 -111
  245. data/lib/ronin/payloads/helpers/chained.rb +0 -61
  246. data/lib/ronin/payloads/helpers/rpc.rb +0 -93
  247. data/lib/ronin/payloads/helpers.rb +0 -23
  248. data/lib/ronin/payloads/nops.rb +0 -39
  249. data/lib/ronin/payloads/payload.rb +0 -350
  250. data/lib/ronin/payloads/payload_author.rb +0 -33
  251. data/lib/ronin/payloads/shellcode.rb +0 -40
  252. data/lib/ronin/payloads/web_payload.rb +0 -41
  253. data/lib/ronin/payloads.rb +0 -36
  254. data/lib/ronin/ui/command_line/commands/exploit.rb +0 -193
  255. data/lib/ronin/ui/command_line/commands/exploits.rb +0 -154
  256. data/lib/ronin/ui/command_line/commands/gen_binary_payload.rb +0 -34
  257. data/lib/ronin/ui/command_line/commands/gen_exploit.rb +0 -34
  258. data/lib/ronin/ui/command_line/commands/gen_ftp_exploit.rb +0 -34
  259. data/lib/ronin/ui/command_line/commands/gen_http_exploit.rb +0 -34
  260. data/lib/ronin/ui/command_line/commands/gen_local_exploit.rb +0 -34
  261. data/lib/ronin/ui/command_line/commands/gen_nops.rb +0 -34
  262. data/lib/ronin/ui/command_line/commands/gen_payload.rb +0 -34
  263. data/lib/ronin/ui/command_line/commands/gen_remote_exploit.rb +0 -34
  264. data/lib/ronin/ui/command_line/commands/gen_remote_tcp_exploit.rb +0 -34
  265. data/lib/ronin/ui/command_line/commands/gen_remote_udp_exploit.rb +0 -34
  266. data/lib/ronin/ui/command_line/commands/gen_shellcode.rb +0 -34
  267. data/lib/ronin/ui/command_line/commands/gen_web_exploit.rb +0 -34
  268. data/lib/ronin/ui/command_line/commands/payload.rb +0 -129
  269. data/lib/ronin/ui/command_line/commands/payloads.rb +0 -128
  270. data/lib/ronin/vuln/behavior.rb +0 -165
  271. data/spec/controls/behaviors_examples.rb +0 -38
  272. data/spec/exploits/binary_exploit_spec.rb +0 -44
  273. data/spec/exploits/buffer_overflow_exploit_spec.rb +0 -70
  274. data/spec/exploits/exploit_spec.rb +0 -313
  275. data/spec/exploits/file_based_exploit_spec.rb +0 -48
  276. data/spec/exploits/format_string_exploit_spec.rb +0 -32
  277. data/spec/exploits/ftp_spec.rb +0 -13
  278. data/spec/exploits/http_spec.rb +0 -17
  279. data/spec/exploits/padding_exploit_spec.rb +0 -44
  280. data/spec/exploits/remote_tcp_spec.rb +0 -28
  281. data/spec/exploits/remote_udp_spec.rb +0 -28
  282. data/spec/exploits/target_spec.rb +0 -98
  283. data/spec/exploits/targets/buffer_overflow_spec.rb +0 -22
  284. data/spec/exploits/web_spec.rb +0 -35
  285. data/spec/generators/exploits/exploit_examples.rb +0 -24
  286. data/spec/generators/exploits/exploit_spec.rb +0 -42
  287. data/spec/generators/exploits/ftp_spec.rb +0 -42
  288. data/spec/generators/exploits/http_spec.rb +0 -42
  289. data/spec/generators/exploits/local_spec.rb +0 -42
  290. data/spec/generators/exploits/remote_spec.rb +0 -42
  291. data/spec/generators/exploits/remote_tcp_spec.rb +0 -47
  292. data/spec/generators/exploits/remote_udp_spec.rb +0 -47
  293. data/spec/generators/exploits/web_spec.rb +0 -52
  294. data/spec/generators/payloads/binary_payload_spec.rb +0 -31
  295. data/spec/generators/payloads/nops_spec.rb +0 -31
  296. data/spec/generators/payloads/payload_examples.rb +0 -16
  297. data/spec/generators/payloads/payload_spec.rb +0 -31
  298. data/spec/generators/payloads/shellcode_spec.rb +0 -31
  299. data/spec/helpers/database.rb +0 -5
  300. data/spec/helpers/objects.rb +0 -22
  301. data/spec/model/has_default_port_spec.rb +0 -27
  302. data/spec/model/models/default_port_model.rb +0 -13
  303. data/spec/model/models/non_default_port_model.rb +0 -11
  304. data/spec/model/models/targets_arch_model.rb +0 -11
  305. data/spec/model/models/targets_os_model.rb +0 -11
  306. data/spec/model/models/targets_product_model.rb +0 -11
  307. data/spec/model/targets_arch_spec.rb +0 -32
  308. data/spec/model/targets_os_spec.rb +0 -33
  309. data/spec/model/targets_product_spec.rb +0 -35
  310. data/spec/objects/exploits/example.rb +0 -25
  311. data/spec/objects/exploits/simple.rb +0 -24
  312. data/spec/objects/payloads/simple.rb +0 -19
  313. data/spec/payloads/encoders/encoder_spec.rb +0 -30
  314. data/spec/payloads/encoders/xor_spec.rb +0 -20
  315. data/spec/payloads/payload_spec.rb +0 -156
  316. data/spec/vuln/behavior_spec.rb +0 -15
  317. data/static/ronin/generators/exploits/_cache.erb +0 -14
  318. data/static/ronin/generators/exploits/_header.erb +0 -1
  319. data/static/ronin/generators/exploits/_helpers.erb +0 -4
  320. data/static/ronin/generators/exploits/exploit.erb +0 -24
  321. data/static/ronin/generators/exploits/ftp.erb +0 -24
  322. data/static/ronin/generators/exploits/http.erb +0 -26
  323. data/static/ronin/generators/exploits/local.erb +0 -24
  324. data/static/ronin/generators/exploits/remote.erb +0 -24
  325. data/static/ronin/generators/exploits/remote_tcp.erb +0 -26
  326. data/static/ronin/generators/exploits/remote_udp.erb +0 -26
  327. data/static/ronin/generators/exploits/web.erb +0 -28
  328. data/static/ronin/generators/payloads/_cache.erb +0 -10
  329. data/static/ronin/generators/payloads/_header.erb +0 -1
  330. data/static/ronin/generators/payloads/_helpers.erb +0 -2
  331. data/static/ronin/generators/payloads/binary_payload.erb +0 -25
  332. data/static/ronin/generators/payloads/nops.erb +0 -19
  333. data/static/ronin/generators/payloads/payload.erb +0 -25
  334. data/static/ronin/generators/payloads/shellcode.erb +0 -25
  335. data/tasks/spec.rb +0 -10
  336. data/tasks/yard.rb +0 -13
  337. data.tar.gz.sig +0 -2
  338. metadata.gz.sig +0 -0
@@ -0,0 +1,62 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/metadata/default_port'
3
+
4
+ describe Ronin::Exploits::Metadata::DefaultPort do
5
+ module TestMetadataDefaultPort
6
+ class WithNoDefaultPortSet
7
+ include Ronin::Exploits::Metadata::DefaultPort
8
+ end
9
+
10
+ class WithDefaultPortSet
11
+ include Ronin::Exploits::Metadata::DefaultPort
12
+
13
+ default_port 111
14
+ end
15
+
16
+ class InheritsItsDefaultPort < WithDefaultPortSet
17
+ include Ronin::Exploits::Metadata::DefaultPort
18
+ end
19
+
20
+ class OverridesItsInheritedDefaultPort < WithDefaultPortSet
21
+ include Ronin::Exploits::Metadata::DefaultPort
22
+
23
+ default_port 222
24
+ end
25
+ end
26
+
27
+ describe ".default_port" do
28
+ subject { test_class }
29
+
30
+ context "and when default port is not set in the class" do
31
+ let(:test_class) { TestMetadataDefaultPort::WithNoDefaultPortSet }
32
+
33
+ it "must default to nil" do
34
+ expect(subject.default_port).to be(nil)
35
+ end
36
+ end
37
+
38
+ context "and when default port is set in the class" do
39
+ let(:test_class) { TestMetadataDefaultPort::WithDefaultPortSet }
40
+
41
+ it "must return the set default_port" do
42
+ expect(subject.default_port).to eq(111)
43
+ end
44
+ end
45
+
46
+ context "but when the default port was set in the superclass" do
47
+ let(:test_class) { TestMetadataDefaultPort::InheritsItsDefaultPort }
48
+
49
+ it "must return the default port set in the superclass" do
50
+ expect(subject.default_port).to eq(111)
51
+ end
52
+
53
+ context "but the default port is overridden in the sub-class" do
54
+ let(:test_class) { TestMetadataDefaultPort::OverridesItsInheritedDefaultPort }
55
+
56
+ it "must return the default port set in the sub-class" do
57
+ expect(subject.default_port).to eq(222)
58
+ end
59
+ end
60
+ end
61
+ end
62
+ end
@@ -0,0 +1,67 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/metadata/header_name'
3
+
4
+ describe Ronin::Exploits::Metadata::HeaderName do
5
+ describe ".header_name" do
6
+ subject { test_class }
7
+
8
+ context "and when header_name is not set in the class" do
9
+ module TestMetadataHeaderName
10
+ class WithNoHeaderNameSet
11
+ include Ronin::Exploits::Metadata::HeaderName
12
+ end
13
+ end
14
+
15
+ let(:test_class) { TestMetadataHeaderName::WithNoHeaderNameSet }
16
+
17
+ it "must default to nil" do
18
+ expect(subject.header_name).to be(nil)
19
+ end
20
+ end
21
+
22
+ context "and when header_name is set in the class" do
23
+ module TestMetadataHeaderName
24
+ class WithHeaderNameSet
25
+ include Ronin::Exploits::Metadata::HeaderName
26
+
27
+ header_name 'test'
28
+ end
29
+ end
30
+
31
+ let(:test_class) { TestMetadataHeaderName::WithHeaderNameSet }
32
+
33
+ it "must return the set header_name" do
34
+ expect(subject.header_name).to eq("test")
35
+ end
36
+ end
37
+
38
+ context "but when the header_name was set in the superclass" do
39
+ module TestMetadataHeaderName
40
+ class InheritsItsHeaderName < WithHeaderNameSet
41
+ end
42
+ end
43
+
44
+ let(:test_class) { TestMetadataHeaderName::InheritsItsHeaderName }
45
+
46
+ it "must return the header_name set in the superclass" do
47
+ expect(subject.header_name).to eq("test")
48
+ end
49
+
50
+ context "but the header_name is overridden in the sub-class" do
51
+ module TestMetadataHeaderName
52
+ class OverridesItsInheritedHeaderName < WithHeaderNameSet
53
+ header_name "test2"
54
+ end
55
+ end
56
+
57
+ let(:test_class) do
58
+ TestMetadataHeaderName::OverridesItsInheritedHeaderName
59
+ end
60
+
61
+ it "must return the header_name set in the sub-class" do
62
+ expect(subject.header_name).to eq("test2")
63
+ end
64
+ end
65
+ end
66
+ end
67
+ end
@@ -0,0 +1,164 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/metadata/os'
3
+
4
+ describe Ronin::Exploits::Metadata::OS do
5
+ module TestMetadataOS
6
+ class WithNoOSSet
7
+ include Ronin::Exploits::Metadata::OS
8
+ end
9
+
10
+ class WithOSSet
11
+ include Ronin::Exploits::Metadata::OS
12
+
13
+ os :linux
14
+ end
15
+
16
+ class InheritsItsOS < WithOSSet
17
+ include Ronin::Exploits::Metadata::OS
18
+ end
19
+
20
+ class OverridesItsInheritedOS < WithOSSet
21
+ include Ronin::Exploits::Metadata::OS
22
+
23
+ os :macos
24
+ end
25
+
26
+ class WithNoOSVersionSet
27
+ include Ronin::Exploits::Metadata::OS
28
+
29
+ os :linux
30
+ end
31
+
32
+ class WithOSVersionSet
33
+ include Ronin::Exploits::Metadata::OS
34
+
35
+ os :linux
36
+ os_version '5.x'
37
+ end
38
+
39
+ class InheritsItsOSVersion < WithOSVersionSet
40
+ include Ronin::Exploits::Metadata::OS
41
+ end
42
+
43
+ class OverridesItsInheritedOSVersion < WithOSVersionSet
44
+ include Ronin::Exploits::Metadata::OS
45
+
46
+ os :macos
47
+ os_version '13'
48
+ end
49
+ end
50
+
51
+ describe ".os" do
52
+ subject { test_class }
53
+
54
+ context "and when os is not set in the class" do
55
+ let(:test_class) { TestMetadataOS::WithNoOSSet }
56
+
57
+ it "must default to nil" do
58
+ expect(subject.os).to be(nil)
59
+ end
60
+ end
61
+
62
+ context "and when os is set in the class" do
63
+ let(:test_class) { TestMetadataOS::WithOSSet }
64
+
65
+ it "must return the set os" do
66
+ expect(subject.os).to eq(:linux)
67
+ end
68
+ end
69
+
70
+ context "but when the os was set in the superclass" do
71
+ let(:test_class) { TestMetadataOS::InheritsItsOS }
72
+
73
+ it "must return the os set in the superclass" do
74
+ expect(subject.os).to eq(:linux)
75
+ end
76
+
77
+ context "but the os is overridden in the sub-class" do
78
+ let(:test_class) { TestMetadataOS::OverridesItsInheritedOS }
79
+
80
+ it "must return the os set in the sub-class" do
81
+ expect(subject.os).to eq(:macos)
82
+ end
83
+ end
84
+ end
85
+ end
86
+
87
+ describe ".os_version" do
88
+ subject { test_class }
89
+
90
+ context "and when os is not set in the class" do
91
+ let(:test_class) { TestMetadataOS::WithNoOSVersionSet }
92
+
93
+ it "must default to nil" do
94
+ expect(subject.os_version).to be(nil)
95
+ end
96
+ end
97
+
98
+ context "and when os_version is set in the class" do
99
+ let(:test_class) { TestMetadataOS::WithOSVersionSet }
100
+
101
+ it "must return the set os_version" do
102
+ expect(subject.os_version).to eq('5.x')
103
+ end
104
+ end
105
+
106
+ context "but when the os was set in the superclass" do
107
+ let(:test_class) { TestMetadataOS::InheritsItsOSVersion }
108
+
109
+ it "must return the os_version set in the superclass" do
110
+ expect(subject.os_version).to eq('5.x')
111
+ end
112
+
113
+ context "but the os is overridden in the sub-class" do
114
+ let(:test_class) do
115
+ TestMetadataOS::OverridesItsInheritedOSVersion
116
+ end
117
+
118
+ it "must return the os_version set in the sub-class" do
119
+ expect(subject.os_version).to eq('13')
120
+ end
121
+ end
122
+ end
123
+ end
124
+
125
+ describe "#os" do
126
+ subject { test_class.new }
127
+
128
+ context "when the Exploit class has .os set" do
129
+ let(:test_class) { TestMetadataOS::WithOSSet }
130
+
131
+ it "must return the Exploit classes .os" do
132
+ expect(subject.os).to eq(test_class.os)
133
+ end
134
+ end
135
+
136
+ context "when the Exploit class does not have .os set" do
137
+ let(:test_class) { TestMetadataOS::WithNoOSSet }
138
+
139
+ it "must return nil" do
140
+ expect(subject.os).to be(nil)
141
+ end
142
+ end
143
+ end
144
+
145
+ describe "#os_version" do
146
+ subject { test_class.new }
147
+
148
+ context "when the Exploit class has .os_version set" do
149
+ let(:test_class) { TestMetadataOS::WithOSVersionSet }
150
+
151
+ it "must return the Exploit classes .os_version" do
152
+ expect(subject.os_version).to eq(test_class.os_version)
153
+ end
154
+ end
155
+
156
+ context "when the Exploit class does not have .os_version set" do
157
+ let(:test_class) { TestMetadataOS::WithNoOSVersionSet }
158
+
159
+ it "must return nil" do
160
+ expect(subject.os_version).to be(nil)
161
+ end
162
+ end
163
+ end
164
+ end
@@ -0,0 +1,100 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/metadata/shouts'
3
+
4
+ describe Ronin::Exploits::Metadata::Shouts do
5
+ describe ".shouts" do
6
+ subject { test_class }
7
+
8
+ context "and when shouts is not set in the class" do
9
+ module TestMetadataShouts
10
+ class WithNoShoutsSet
11
+ include Ronin::Exploits::Metadata::Shouts
12
+ end
13
+ end
14
+
15
+ let(:test_class) { TestMetadataShouts::WithNoShoutsSet }
16
+
17
+ it "must default to []" do
18
+ expect(subject.shouts).to eq([])
19
+ end
20
+ end
21
+
22
+ context "and when shouts is set in the class" do
23
+ module TestMetadataShouts
24
+ class WithShoutsSet
25
+ include Ronin::Exploits::Metadata::Shouts
26
+
27
+ shouts [
28
+ 'https://example.com/link1',
29
+ 'https://example.com/link2'
30
+ ]
31
+ end
32
+ end
33
+
34
+ let(:test_class) { TestMetadataShouts::WithShoutsSet }
35
+
36
+ it "must return the set shouts" do
37
+ expect(subject.shouts).to eq(
38
+ [
39
+ 'https://example.com/link1',
40
+ 'https://example.com/link2'
41
+ ]
42
+ )
43
+ end
44
+ end
45
+
46
+ context "but when the shouts was set in the superclass" do
47
+ module TestMetadataShouts
48
+ class InheritsItsShouts < WithShoutsSet
49
+ include Ronin::Exploits::Metadata::Shouts
50
+ end
51
+ end
52
+
53
+ let(:test_class) { TestMetadataShouts::InheritsItsShouts }
54
+
55
+ it "must return the shouts set in the superclass" do
56
+ expect(subject.shouts).to eq(
57
+ [
58
+ 'https://example.com/link1',
59
+ 'https://example.com/link2'
60
+ ]
61
+ )
62
+ end
63
+
64
+ context "but the shouts is overridden in the sub-class" do
65
+ module TestMetadataShouts
66
+ class OverridesItsInheritedShouts < WithShoutsSet
67
+ include Ronin::Exploits::Metadata::Shouts
68
+
69
+ shouts [
70
+ 'https://example.com/link3'
71
+ ]
72
+ end
73
+ end
74
+
75
+ let(:test_class) do
76
+ TestMetadataShouts::OverridesItsInheritedShouts
77
+ end
78
+
79
+ it "must return the shouts in the sub-class and the superclass" do
80
+ expect(subject.shouts).to eq(
81
+ [
82
+ 'https://example.com/link1',
83
+ 'https://example.com/link2',
84
+ 'https://example.com/link3'
85
+ ]
86
+ )
87
+ end
88
+
89
+ it "must not modify the superclass'es shouts" do
90
+ expect(subject.superclass.shouts).to eq(
91
+ [
92
+ 'https://example.com/link1',
93
+ 'https://example.com/link2'
94
+ ]
95
+ )
96
+ end
97
+ end
98
+ end
99
+ end
100
+ end
@@ -0,0 +1,67 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/metadata/url_path'
3
+
4
+ describe Ronin::Exploits::Metadata::URLPath do
5
+ describe ".url_path" do
6
+ subject { test_class }
7
+
8
+ context "and when url_path is not set in the class" do
9
+ module TestMetadataURLPath
10
+ class WithNoURLPathSet
11
+ include Ronin::Exploits::Metadata::URLPath
12
+ end
13
+ end
14
+
15
+ let(:test_class) { TestMetadataURLPath::WithNoURLPathSet }
16
+
17
+ it "must default to '/'" do
18
+ expect(subject.url_path).to eq('/')
19
+ end
20
+ end
21
+
22
+ context "and when url_path is set in the class" do
23
+ module TestMetadataURLPath
24
+ class WithURLPathSet
25
+ include Ronin::Exploits::Metadata::URLPath
26
+
27
+ url_path '/test'
28
+ end
29
+ end
30
+
31
+ let(:test_class) { TestMetadataURLPath::WithURLPathSet }
32
+
33
+ it "must return the set url_path" do
34
+ expect(subject.url_path).to eq("/test")
35
+ end
36
+ end
37
+
38
+ context "but when the url_path was set in the superclass" do
39
+ module TestMetadataURLPath
40
+ class InheritsItsURLPath < WithURLPathSet
41
+ end
42
+ end
43
+
44
+ let(:test_class) { TestMetadataURLPath::InheritsItsURLPath }
45
+
46
+ it "must return the url_path set in the superclass" do
47
+ expect(subject.url_path).to eq("/test")
48
+ end
49
+
50
+ context "but the url_path is overridden in the sub-class" do
51
+ module TestMetadataURLPath
52
+ class OverridesItsInheritedURLPath < WithURLPathSet
53
+ url_path "/test2"
54
+ end
55
+ end
56
+
57
+ let(:test_class) do
58
+ TestMetadataURLPath::OverridesItsInheritedURLPath
59
+ end
60
+
61
+ it "must return the url_path set in the sub-class" do
62
+ expect(subject.url_path).to eq("/test2")
63
+ end
64
+ end
65
+ end
66
+ end
67
+ end
@@ -0,0 +1,67 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/metadata/url_query_param'
3
+
4
+ describe Ronin::Exploits::Metadata::URLQueryParam do
5
+ describe ".url_query_param" do
6
+ subject { test_class }
7
+
8
+ context "and when url_query_param is not set in the class" do
9
+ module TestMetadataURLQueryParam
10
+ class WithNoURLQueryParamSet
11
+ include Ronin::Exploits::Metadata::URLQueryParam
12
+ end
13
+ end
14
+
15
+ let(:test_class) { TestMetadataURLQueryParam::WithNoURLQueryParamSet }
16
+
17
+ it "must default to nil" do
18
+ expect(subject.url_query_param).to be(nil)
19
+ end
20
+ end
21
+
22
+ context "and when url_query_param is set in the class" do
23
+ module TestMetadataURLQueryParam
24
+ class WithURLQueryParamSet
25
+ include Ronin::Exploits::Metadata::URLQueryParam
26
+
27
+ url_query_param 'test'
28
+ end
29
+ end
30
+
31
+ let(:test_class) { TestMetadataURLQueryParam::WithURLQueryParamSet }
32
+
33
+ it "must return the set url_query_param" do
34
+ expect(subject.url_query_param).to eq("test")
35
+ end
36
+ end
37
+
38
+ context "but when the url_query_param was set in the superclass" do
39
+ module TestMetadataURLQueryParam
40
+ class InheritsItsURLQueryParam < WithURLQueryParamSet
41
+ end
42
+ end
43
+
44
+ let(:test_class) { TestMetadataURLQueryParam::InheritsItsURLQueryParam }
45
+
46
+ it "must return the url_query_param set in the superclass" do
47
+ expect(subject.url_query_param).to eq("test")
48
+ end
49
+
50
+ context "but the url_query_param is overridden in the sub-class" do
51
+ module TestMetadataURLQueryParam
52
+ class OverridesItsInheritedURLQueryParam < WithURLQueryParamSet
53
+ url_query_param "test2"
54
+ end
55
+ end
56
+
57
+ let(:test_class) do
58
+ TestMetadataURLQueryParam::OverridesItsInheritedURLQueryParam
59
+ end
60
+
61
+ it "must return the url_query_param set in the sub-class" do
62
+ expect(subject.url_query_param).to eq("test2")
63
+ end
64
+ end
65
+ end
66
+ end
67
+ end
@@ -0,0 +1,129 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/mixins/binary'
3
+
4
+ require 'ronin/exploits/exploit'
5
+ require 'ronin/exploits/metadata/arch'
6
+ require 'ronin/exploits/metadata/os'
7
+
8
+ describe Ronin::Exploits::Mixins::Binary do
9
+ module TestBinaryMixin
10
+ class ExploitWithArchSet < Ronin::Exploits::Exploit
11
+ include Ronin::Exploits::Metadata::Arch
12
+ include Ronin::Exploits::Mixins::Binary
13
+
14
+ arch :x86
15
+ end
16
+
17
+ class ExploitWithoutArch < Ronin::Exploits::Exploit
18
+ include Ronin::Exploits::Mixins::Binary
19
+ end
20
+
21
+ class ExploitWithoutArchSet < Ronin::Exploits::Exploit
22
+ include Ronin::Exploits::Metadata::Arch
23
+ include Ronin::Exploits::Mixins::Binary
24
+ end
25
+
26
+ class ExploitWithArchSetButWithoutOSSet < Ronin::Exploits::Exploit
27
+ include Ronin::Exploits::Metadata::Arch
28
+ include Ronin::Exploits::Metadata::OS
29
+ include Ronin::Exploits::Mixins::Binary
30
+
31
+ arch :x86
32
+ end
33
+
34
+ class ExploitWithArchAndOSSet < Ronin::Exploits::Exploit
35
+ include Ronin::Exploits::Metadata::Arch
36
+ include Ronin::Exploits::Metadata::OS
37
+ include Ronin::Exploits::Mixins::Binary
38
+
39
+ arch :x86
40
+ os :linux
41
+ end
42
+ end
43
+
44
+ subject { exploit_class.new }
45
+
46
+ describe "#perform_validate" do
47
+ context "when the exploit class does not define an #arch method" do
48
+ let(:exploit_class) { TestBinaryMixin::ExploitWithoutArch }
49
+
50
+ it do
51
+ expect {
52
+ subject.perform_validate
53
+ }.to raise_error(Ronin::Exploits::ValidationError,"exploit #{exploit_class} did not include Ronin::Exploits::Metadata::Arch or Ronin::Exploits::Mixins::HasTargets")
54
+ end
55
+ end
56
+
57
+ context "when the exploit class's #arch method returns nil" do
58
+ let(:exploit_class) { TestBinaryMixin::ExploitWithoutArchSet }
59
+
60
+ it do
61
+ expect {
62
+ subject.perform_validate
63
+ }.to raise_error(Ronin::Exploits::ValidationError,"exploit #{exploit_class} did not include define an architecture")
64
+ end
65
+ end
66
+
67
+ context "when the exploit class defines an architecture" do
68
+ let(:exploit_class) { TestBinaryMixin::ExploitWithArchSet }
69
+
70
+ it do
71
+ expect {
72
+ subject.perform_validate
73
+ }.to_not raise_error
74
+ end
75
+ end
76
+ end
77
+
78
+ describe "#platform" do
79
+ context "when #arch returns nil" do
80
+ let(:exploit_class) { TestBinaryMixin::ExploitWithoutArchSet }
81
+
82
+ it "must return Ronin::Support::Binary::CTypes" do
83
+ expect(subject.platform).to be(Ronin::Support::Binary::CTypes)
84
+ end
85
+ end
86
+
87
+ context "when #arch returns a architecture name" do
88
+ let(:exploit_class) { TestBinaryMixin::ExploitWithArchSet }
89
+
90
+ it "must return the according Ronin::Support::Binary::CTypes::Arch:: module" do
91
+ expect(subject.platform).to be(Ronin::Support::Binary::CTypes::Arch::X86)
92
+ end
93
+
94
+ context "and when #os is defined" do
95
+ context "and it returns an OS name" do
96
+ let(:exploit_class) do
97
+ TestBinaryMixin::ExploitWithArchAndOSSet
98
+ end
99
+
100
+ it "must return the according Ronin::Support::Binary::CTypes::OS object with the according Ronin::Support::Binary::CTypes::Arch:: module inside it" do
101
+ expect(subject.platform).to be_kind_of(Ronin::Support::Binary::CTypes::OS::Linux)
102
+ expect(subject.platform.types).to be(Ronin::Support::Binary::CTypes::Arch::X86)
103
+ end
104
+ end
105
+
106
+ context "but it returns nil" do
107
+ let(:exploit_class) do
108
+ TestBinaryMixin::ExploitWithArchSetButWithoutOSSet
109
+ end
110
+
111
+ it "must still return the according Ronin::Support::Binary::CTypes::Arch:: module" do
112
+ expect(subject.platform).to be(Ronin::Support::Binary::CTypes::Arch::X86)
113
+ end
114
+ end
115
+ end
116
+ end
117
+ end
118
+
119
+ describe "#pack" do
120
+ let(:exploit_class) { TestBinaryMixin::ExploitWithArchSet }
121
+
122
+ let(:type) { :uint32 }
123
+ let(:value) { 0x12345678 }
124
+
125
+ it "must pack the value using the type from #platform" do
126
+ expect(subject.pack(type,value)).to eq("\x78\x56\x34\x12".b)
127
+ end
128
+ end
129
+ end