ronin-exploits 0.3.1 → 1.0.0.beta1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (338) hide show
  1. checksums.yaml +7 -0
  2. data/.document +4 -0
  3. data/.editorconfig +11 -0
  4. data/.github/workflows/ruby.yml +31 -0
  5. data/.gitignore +13 -0
  6. data/.mailmap +1 -0
  7. data/.rspec +1 -0
  8. data/.ruby-version +1 -0
  9. data/.yardopts +1 -0
  10. data/COPYING.txt +161 -335
  11. data/{History.txt → ChangeLog.md} +119 -16
  12. data/Gemfile +50 -0
  13. data/README.md +454 -0
  14. data/Rakefile +37 -23
  15. data/bin/ronin-exploits +13 -6
  16. data/data/new/exploit.rb.erb +158 -0
  17. data/gemspec.yml +37 -0
  18. data/lib/ronin/exploits/advisory.rb +84 -0
  19. data/lib/ronin/exploits/cli/command.rb +39 -0
  20. data/lib/ronin/exploits/cli/commands/irb.rb +57 -0
  21. data/lib/ronin/exploits/cli/commands/list.rb +80 -0
  22. data/lib/ronin/exploits/cli/commands/new.rb +332 -0
  23. data/lib/ronin/exploits/cli/commands/run.rb +396 -0
  24. data/lib/ronin/exploits/cli/commands/show.rb +264 -0
  25. data/lib/ronin/exploits/cli/exploit_command.rb +114 -0
  26. data/lib/ronin/exploits/cli/exploit_methods.rb +114 -0
  27. data/lib/ronin/exploits/cli/ruby_shell.rb +51 -0
  28. data/lib/ronin/exploits/cli.rb +46 -0
  29. data/lib/ronin/exploits/client_side_web_vuln.rb +69 -0
  30. data/lib/ronin/exploits/exceptions.rb +27 -17
  31. data/lib/ronin/exploits/exploit.rb +501 -582
  32. data/lib/ronin/exploits/heap_overflow.rb +50 -0
  33. data/lib/ronin/exploits/lfi.rb +141 -0
  34. data/lib/ronin/exploits/loot/file.rb +113 -0
  35. data/lib/ronin/exploits/loot.rb +119 -0
  36. data/lib/ronin/exploits/memory_corruption.rb +53 -0
  37. data/lib/ronin/exploits/metadata/arch.rb +83 -0
  38. data/lib/ronin/exploits/metadata/cookie_param.rb +80 -0
  39. data/lib/ronin/exploits/metadata/default_filename.rb +69 -0
  40. data/lib/ronin/exploits/metadata/default_port.rb +69 -0
  41. data/lib/ronin/exploits/metadata/header_name.rb +80 -0
  42. data/lib/ronin/exploits/metadata/os.rb +117 -0
  43. data/lib/ronin/exploits/metadata/shouts.rb +85 -0
  44. data/lib/ronin/exploits/metadata/url_path.rb +82 -0
  45. data/lib/ronin/exploits/metadata/url_query_param.rb +80 -0
  46. data/lib/ronin/exploits/mixins/binary.rb +106 -0
  47. data/lib/ronin/exploits/mixins/build_dir.rb +61 -0
  48. data/lib/ronin/exploits/mixins/file_builder.rb +102 -0
  49. data/lib/ronin/exploits/mixins/format_string.rb +87 -0
  50. data/lib/ronin/exploits/mixins/has_payload.rb +202 -0
  51. data/lib/ronin/exploits/mixins/has_targets.rb +297 -0
  52. data/lib/ronin/exploits/mixins/html.rb +213 -0
  53. data/lib/ronin/exploits/mixins/http.rb +866 -0
  54. data/lib/ronin/exploits/mixins/loot.rb +84 -0
  55. data/lib/ronin/exploits/mixins/nops.rb +121 -0
  56. data/lib/ronin/exploits/mixins/remote_tcp.rb +272 -0
  57. data/lib/ronin/exploits/mixins/remote_udp.rb +264 -0
  58. data/lib/ronin/exploits/mixins/seh.rb +136 -0
  59. data/lib/ronin/exploits/mixins/stack_overflow.rb +124 -0
  60. data/lib/ronin/exploits/mixins/text.rb +65 -0
  61. data/lib/ronin/exploits/mixins.rb +32 -0
  62. data/lib/ronin/exploits/open_redirect.rb +103 -0
  63. data/lib/ronin/exploits/params/base_url.rb +84 -0
  64. data/lib/ronin/exploits/params/bind_host.rb +53 -0
  65. data/lib/ronin/exploits/params/bind_port.rb +53 -0
  66. data/lib/ronin/exploits/params/filename.rb +71 -0
  67. data/lib/ronin/exploits/params/host.rb +56 -0
  68. data/lib/ronin/exploits/params/port.rb +71 -0
  69. data/lib/ronin/exploits/registry.rb +32 -0
  70. data/lib/ronin/exploits/rfi.rb +106 -0
  71. data/lib/ronin/exploits/root.rb +28 -0
  72. data/lib/ronin/exploits/seh_overflow.rb +90 -0
  73. data/lib/ronin/exploits/sqli.rb +172 -0
  74. data/lib/ronin/exploits/ssti.rb +108 -0
  75. data/lib/ronin/exploits/stack_overflow.rb +90 -0
  76. data/lib/ronin/exploits/target.rb +63 -103
  77. data/lib/ronin/exploits/test_result.rb +80 -0
  78. data/lib/ronin/exploits/use_after_free.rb +50 -0
  79. data/lib/ronin/exploits/version.rb +11 -12
  80. data/lib/ronin/exploits/web.rb +18 -89
  81. data/lib/ronin/exploits/web_vuln.rb +378 -0
  82. data/lib/ronin/exploits/xss.rb +102 -0
  83. data/lib/ronin/exploits.rb +19 -26
  84. data/man/ronin-exploits-irb.1 +31 -0
  85. data/man/ronin-exploits-irb.1.md +22 -0
  86. data/man/ronin-exploits-list.1 +37 -0
  87. data/man/ronin-exploits-list.1.md +27 -0
  88. data/man/ronin-exploits-new.1 +98 -0
  89. data/man/ronin-exploits-new.1.md +73 -0
  90. data/man/ronin-exploits-run.1 +117 -0
  91. data/man/ronin-exploits-run.1.md +87 -0
  92. data/man/ronin-exploits-show.1 +45 -0
  93. data/man/ronin-exploits-show.1.md +33 -0
  94. data/man/ronin-exploits.1 +55 -0
  95. data/man/ronin-exploits.1.md +41 -0
  96. data/ronin-exploits.gemspec +62 -0
  97. data/spec/advisory_spec.rb +71 -0
  98. data/spec/cli/exploit_command_spec.rb +68 -0
  99. data/spec/cli/exploit_methods_spec.rb +208 -0
  100. data/spec/cli/ruby_shell_spec.rb +14 -0
  101. data/spec/client_side_web_vuln_spec.rb +117 -0
  102. data/spec/exploit_spec.rb +538 -0
  103. data/spec/exploits_spec.rb +3 -4
  104. data/spec/heap_overflow_spec.rb +14 -0
  105. data/spec/lfi_spec.rb +162 -0
  106. data/spec/loot/file_spec.rb +131 -0
  107. data/spec/loot_spec.rb +138 -0
  108. data/spec/memory_corruption_spec.rb +22 -0
  109. data/spec/metadata/arch_spec.rb +82 -0
  110. data/spec/metadata/cookie_param_spec.rb +67 -0
  111. data/spec/metadata/default_filename_spec.rb +62 -0
  112. data/spec/metadata/default_port_spec.rb +62 -0
  113. data/spec/metadata/header_name_spec.rb +67 -0
  114. data/spec/metadata/os_spec.rb +164 -0
  115. data/spec/metadata/shouts_spec.rb +100 -0
  116. data/spec/metadata/url_path_spec.rb +67 -0
  117. data/spec/metadata/url_query_param_spec.rb +67 -0
  118. data/spec/mixins/binary_spec.rb +129 -0
  119. data/spec/mixins/build_dir.rb +66 -0
  120. data/spec/mixins/file_builder_spec.rb +67 -0
  121. data/spec/mixins/format_string_spec.rb +44 -0
  122. data/spec/mixins/has_payload_spec.rb +333 -0
  123. data/spec/mixins/has_targets_spec.rb +434 -0
  124. data/spec/mixins/html_spec.rb +772 -0
  125. data/spec/mixins/http_spec.rb +1227 -0
  126. data/spec/mixins/loot_spec.rb +20 -0
  127. data/spec/mixins/nops_spec.rb +165 -0
  128. data/spec/mixins/remote_tcp_spec.rb +217 -0
  129. data/spec/mixins/remote_udp_spec.rb +217 -0
  130. data/spec/mixins/seh_spec.rb +89 -0
  131. data/spec/mixins/stack_overflow_spec.rb +87 -0
  132. data/spec/mixins/text_spec.rb +43 -0
  133. data/spec/open_redirect_spec.rb +71 -0
  134. data/spec/params/base_url_spec.rb +71 -0
  135. data/spec/params/bind_host_spec.rb +34 -0
  136. data/spec/params/bind_port_spec.rb +35 -0
  137. data/spec/params/filename_spec.rb +77 -0
  138. data/spec/params/host_spec.rb +34 -0
  139. data/spec/params/port_spec.rb +77 -0
  140. data/spec/rfi_spec.rb +107 -0
  141. data/spec/seh_overflow_spec.rb +18 -0
  142. data/spec/spec_helper.rb +6 -10
  143. data/spec/sqli_spec.rb +306 -0
  144. data/spec/ssti_spec.rb +121 -0
  145. data/spec/stack_overflow_spec.rb +18 -0
  146. data/spec/target_spec.rb +92 -0
  147. data/spec/test_result_spec.rb +32 -0
  148. data/spec/use_after_free_spec.rb +14 -0
  149. data/spec/web_spec.rb +12 -0
  150. data/spec/web_vuln_spec.rb +854 -0
  151. data/spec/xss_spec.rb +69 -0
  152. metadata +356 -324
  153. data/Manifest.txt +0 -196
  154. data/README.txt +0 -274
  155. data/bin/ronin-exploit +0 -12
  156. data/bin/ronin-gen-binary-payload +0 -12
  157. data/bin/ronin-gen-exploit +0 -12
  158. data/bin/ronin-gen-ftp-exploit +0 -12
  159. data/bin/ronin-gen-http-exploit +0 -12
  160. data/bin/ronin-gen-local-exploit +0 -12
  161. data/bin/ronin-gen-nops +0 -12
  162. data/bin/ronin-gen-payload +0 -12
  163. data/bin/ronin-gen-remote-exploit +0 -12
  164. data/bin/ronin-gen-remote-tcp-exploit +0 -12
  165. data/bin/ronin-gen-remote-udp-exploit +0 -12
  166. data/bin/ronin-gen-shellcode +0 -12
  167. data/bin/ronin-gen-web-exploit +0 -12
  168. data/bin/ronin-payload +0 -12
  169. data/bin/ronin-payloads +0 -12
  170. data/lib/ronin/controls/behaviors.rb +0 -133
  171. data/lib/ronin/controls/exceptions/not_implemented.rb +0 -27
  172. data/lib/ronin/controls/exceptions/program_not_found.rb +0 -27
  173. data/lib/ronin/controls/exceptions.rb +0 -23
  174. data/lib/ronin/controls/file_system.rb +0 -145
  175. data/lib/ronin/controls/helpers/command_exec.rb +0 -143
  176. data/lib/ronin/controls/helpers/dir_create.rb +0 -42
  177. data/lib/ronin/controls/helpers/dir_listing.rb +0 -62
  178. data/lib/ronin/controls/helpers/dir_remove.rb +0 -42
  179. data/lib/ronin/controls/helpers/file_ctime.rb +0 -52
  180. data/lib/ronin/controls/helpers/file_mtime.rb +0 -53
  181. data/lib/ronin/controls/helpers/file_ownership.rb +0 -53
  182. data/lib/ronin/controls/helpers/file_read.rb +0 -62
  183. data/lib/ronin/controls/helpers/file_remove.rb +0 -51
  184. data/lib/ronin/controls/helpers/file_write.rb +0 -62
  185. data/lib/ronin/controls/helpers/memory_read.rb +0 -39
  186. data/lib/ronin/controls/helpers/memory_write.rb +0 -39
  187. data/lib/ronin/controls/helpers.rb +0 -33
  188. data/lib/ronin/controls.rb +0 -23
  189. data/lib/ronin/exploits/control.rb +0 -47
  190. data/lib/ronin/exploits/exceptions/exception.rb +0 -27
  191. data/lib/ronin/exploits/exceptions/exploit_not_built.rb +0 -29
  192. data/lib/ronin/exploits/exceptions/payload_size.rb +0 -29
  193. data/lib/ronin/exploits/exceptions/restricted_char.rb +0 -29
  194. data/lib/ronin/exploits/exceptions/target_data_missing.rb +0 -29
  195. data/lib/ronin/exploits/exceptions/target_unspecified.rb +0 -29
  196. data/lib/ronin/exploits/exceptions/unknown_helper.rb +0 -29
  197. data/lib/ronin/exploits/exploit_author.rb +0 -33
  198. data/lib/ronin/exploits/ftp.rb +0 -42
  199. data/lib/ronin/exploits/helpers/binary.rb +0 -50
  200. data/lib/ronin/exploits/helpers/buffer_overflow.rb +0 -115
  201. data/lib/ronin/exploits/helpers/file_based.rb +0 -112
  202. data/lib/ronin/exploits/helpers/format_string.rb +0 -117
  203. data/lib/ronin/exploits/helpers/padding.rb +0 -101
  204. data/lib/ronin/exploits/helpers.rb +0 -26
  205. data/lib/ronin/exploits/http.rb +0 -49
  206. data/lib/ronin/exploits/local.rb +0 -40
  207. data/lib/ronin/exploits/remote.rb +0 -40
  208. data/lib/ronin/exploits/remote_tcp.rb +0 -87
  209. data/lib/ronin/exploits/remote_udp.rb +0 -87
  210. data/lib/ronin/exploits/targets/buffer_overflow.rb +0 -46
  211. data/lib/ronin/exploits/targets/format_string.rb +0 -43
  212. data/lib/ronin/exploits/targets.rb +0 -27
  213. data/lib/ronin/exploits/verifiers.rb +0 -121
  214. data/lib/ronin/generators/exploits/exploit.rb +0 -70
  215. data/lib/ronin/generators/exploits/ftp.rb +0 -42
  216. data/lib/ronin/generators/exploits/http.rb +0 -42
  217. data/lib/ronin/generators/exploits/local.rb +0 -42
  218. data/lib/ronin/generators/exploits/remote.rb +0 -42
  219. data/lib/ronin/generators/exploits/remote_tcp.rb +0 -44
  220. data/lib/ronin/generators/exploits/remote_udp.rb +0 -44
  221. data/lib/ronin/generators/exploits/static.rb +0 -30
  222. data/lib/ronin/generators/exploits/web.rb +0 -45
  223. data/lib/ronin/generators/exploits.rb +0 -23
  224. data/lib/ronin/generators/payloads/binary_payload.rb +0 -42
  225. data/lib/ronin/generators/payloads/nops.rb +0 -42
  226. data/lib/ronin/generators/payloads/payload.rb +0 -66
  227. data/lib/ronin/generators/payloads/shellcode.rb +0 -42
  228. data/lib/ronin/generators/payloads/static.rb +0 -30
  229. data/lib/ronin/generators/payloads.rb +0 -23
  230. data/lib/ronin/model/has_default_port.rb +0 -54
  231. data/lib/ronin/model/targets_arch.rb +0 -68
  232. data/lib/ronin/model/targets_os.rb +0 -69
  233. data/lib/ronin/model/targets_product.rb +0 -68
  234. data/lib/ronin/payloads/asm_payload.rb +0 -40
  235. data/lib/ronin/payloads/binary_payload.rb +0 -42
  236. data/lib/ronin/payloads/control.rb +0 -47
  237. data/lib/ronin/payloads/encoders/encoder.rb +0 -92
  238. data/lib/ronin/payloads/encoders/xor.rb +0 -79
  239. data/lib/ronin/payloads/encoders.rb +0 -32
  240. data/lib/ronin/payloads/exceptions/exception.rb +0 -27
  241. data/lib/ronin/payloads/exceptions/not_implemented.rb +0 -29
  242. data/lib/ronin/payloads/exceptions/unknown_helper.rb +0 -29
  243. data/lib/ronin/payloads/exceptions.rb +0 -23
  244. data/lib/ronin/payloads/has_payload.rb +0 -111
  245. data/lib/ronin/payloads/helpers/chained.rb +0 -61
  246. data/lib/ronin/payloads/helpers/rpc.rb +0 -93
  247. data/lib/ronin/payloads/helpers.rb +0 -23
  248. data/lib/ronin/payloads/nops.rb +0 -39
  249. data/lib/ronin/payloads/payload.rb +0 -350
  250. data/lib/ronin/payloads/payload_author.rb +0 -33
  251. data/lib/ronin/payloads/shellcode.rb +0 -40
  252. data/lib/ronin/payloads/web_payload.rb +0 -41
  253. data/lib/ronin/payloads.rb +0 -36
  254. data/lib/ronin/ui/command_line/commands/exploit.rb +0 -193
  255. data/lib/ronin/ui/command_line/commands/exploits.rb +0 -154
  256. data/lib/ronin/ui/command_line/commands/gen_binary_payload.rb +0 -34
  257. data/lib/ronin/ui/command_line/commands/gen_exploit.rb +0 -34
  258. data/lib/ronin/ui/command_line/commands/gen_ftp_exploit.rb +0 -34
  259. data/lib/ronin/ui/command_line/commands/gen_http_exploit.rb +0 -34
  260. data/lib/ronin/ui/command_line/commands/gen_local_exploit.rb +0 -34
  261. data/lib/ronin/ui/command_line/commands/gen_nops.rb +0 -34
  262. data/lib/ronin/ui/command_line/commands/gen_payload.rb +0 -34
  263. data/lib/ronin/ui/command_line/commands/gen_remote_exploit.rb +0 -34
  264. data/lib/ronin/ui/command_line/commands/gen_remote_tcp_exploit.rb +0 -34
  265. data/lib/ronin/ui/command_line/commands/gen_remote_udp_exploit.rb +0 -34
  266. data/lib/ronin/ui/command_line/commands/gen_shellcode.rb +0 -34
  267. data/lib/ronin/ui/command_line/commands/gen_web_exploit.rb +0 -34
  268. data/lib/ronin/ui/command_line/commands/payload.rb +0 -129
  269. data/lib/ronin/ui/command_line/commands/payloads.rb +0 -128
  270. data/lib/ronin/vuln/behavior.rb +0 -165
  271. data/spec/controls/behaviors_examples.rb +0 -38
  272. data/spec/exploits/binary_exploit_spec.rb +0 -44
  273. data/spec/exploits/buffer_overflow_exploit_spec.rb +0 -70
  274. data/spec/exploits/exploit_spec.rb +0 -313
  275. data/spec/exploits/file_based_exploit_spec.rb +0 -48
  276. data/spec/exploits/format_string_exploit_spec.rb +0 -32
  277. data/spec/exploits/ftp_spec.rb +0 -13
  278. data/spec/exploits/http_spec.rb +0 -17
  279. data/spec/exploits/padding_exploit_spec.rb +0 -44
  280. data/spec/exploits/remote_tcp_spec.rb +0 -28
  281. data/spec/exploits/remote_udp_spec.rb +0 -28
  282. data/spec/exploits/target_spec.rb +0 -98
  283. data/spec/exploits/targets/buffer_overflow_spec.rb +0 -22
  284. data/spec/exploits/web_spec.rb +0 -35
  285. data/spec/generators/exploits/exploit_examples.rb +0 -24
  286. data/spec/generators/exploits/exploit_spec.rb +0 -42
  287. data/spec/generators/exploits/ftp_spec.rb +0 -42
  288. data/spec/generators/exploits/http_spec.rb +0 -42
  289. data/spec/generators/exploits/local_spec.rb +0 -42
  290. data/spec/generators/exploits/remote_spec.rb +0 -42
  291. data/spec/generators/exploits/remote_tcp_spec.rb +0 -47
  292. data/spec/generators/exploits/remote_udp_spec.rb +0 -47
  293. data/spec/generators/exploits/web_spec.rb +0 -52
  294. data/spec/generators/payloads/binary_payload_spec.rb +0 -31
  295. data/spec/generators/payloads/nops_spec.rb +0 -31
  296. data/spec/generators/payloads/payload_examples.rb +0 -16
  297. data/spec/generators/payloads/payload_spec.rb +0 -31
  298. data/spec/generators/payloads/shellcode_spec.rb +0 -31
  299. data/spec/helpers/database.rb +0 -5
  300. data/spec/helpers/objects.rb +0 -22
  301. data/spec/model/has_default_port_spec.rb +0 -27
  302. data/spec/model/models/default_port_model.rb +0 -13
  303. data/spec/model/models/non_default_port_model.rb +0 -11
  304. data/spec/model/models/targets_arch_model.rb +0 -11
  305. data/spec/model/models/targets_os_model.rb +0 -11
  306. data/spec/model/models/targets_product_model.rb +0 -11
  307. data/spec/model/targets_arch_spec.rb +0 -32
  308. data/spec/model/targets_os_spec.rb +0 -33
  309. data/spec/model/targets_product_spec.rb +0 -35
  310. data/spec/objects/exploits/example.rb +0 -25
  311. data/spec/objects/exploits/simple.rb +0 -24
  312. data/spec/objects/payloads/simple.rb +0 -19
  313. data/spec/payloads/encoders/encoder_spec.rb +0 -30
  314. data/spec/payloads/encoders/xor_spec.rb +0 -20
  315. data/spec/payloads/payload_spec.rb +0 -156
  316. data/spec/vuln/behavior_spec.rb +0 -15
  317. data/static/ronin/generators/exploits/_cache.erb +0 -14
  318. data/static/ronin/generators/exploits/_header.erb +0 -1
  319. data/static/ronin/generators/exploits/_helpers.erb +0 -4
  320. data/static/ronin/generators/exploits/exploit.erb +0 -24
  321. data/static/ronin/generators/exploits/ftp.erb +0 -24
  322. data/static/ronin/generators/exploits/http.erb +0 -26
  323. data/static/ronin/generators/exploits/local.erb +0 -24
  324. data/static/ronin/generators/exploits/remote.erb +0 -24
  325. data/static/ronin/generators/exploits/remote_tcp.erb +0 -26
  326. data/static/ronin/generators/exploits/remote_udp.erb +0 -26
  327. data/static/ronin/generators/exploits/web.erb +0 -28
  328. data/static/ronin/generators/payloads/_cache.erb +0 -10
  329. data/static/ronin/generators/payloads/_header.erb +0 -1
  330. data/static/ronin/generators/payloads/_helpers.erb +0 -2
  331. data/static/ronin/generators/payloads/binary_payload.erb +0 -25
  332. data/static/ronin/generators/payloads/nops.erb +0 -19
  333. data/static/ronin/generators/payloads/payload.erb +0 -25
  334. data/static/ronin/generators/payloads/shellcode.erb +0 -25
  335. data/tasks/spec.rb +0 -10
  336. data/tasks/yard.rb +0 -13
  337. data.tar.gz.sig +0 -0
  338. metadata.gz.sig +0 -0
@@ -0,0 +1,434 @@
1
+ require 'spec_helper'
2
+ require 'ronin/exploits/mixins/has_targets'
3
+ require 'ronin/exploits/exploit'
4
+
5
+ describe Ronin::Exploits::Mixins::HasTargets do
6
+ module TestHasTargets
7
+ class WithNoTargets < Ronin::Exploits::Exploit
8
+ include Ronin::Exploits::Mixins::HasTargets
9
+ end
10
+
11
+ class WithOneTarget < Ronin::Exploits::Exploit
12
+ include Ronin::Exploits::Mixins::HasTargets
13
+
14
+ target arch: :x86_64, os: :linux, foo: 42
15
+ end
16
+
17
+ class InheritesTargets < WithOneTarget
18
+ end
19
+
20
+ class InheritesAndAddsTargets < WithOneTarget
21
+ target arch: :arm, os: :linux, foo: 1337
22
+ end
23
+
24
+ class WitthMultipleTargets < Ronin::Exploits::Exploit
25
+ include Ronin::Exploits::Mixins::HasTargets
26
+
27
+ target arch: :x86_64, os: :linux, foo: 42
28
+ target arch: :arm, os: :linux, foo: 1337
29
+ end
30
+ end
31
+
32
+ describe ".targets" do
33
+ subject { test_class }
34
+
35
+ context "with there are no targets" do
36
+ let(:test_class) { TestHasTargets::WithNoTargets }
37
+
38
+ it "must default to []" do
39
+ expect(subject.targets).to eq([])
40
+ end
41
+ end
42
+
43
+ context "with at least one target" do
44
+ let(:test_class) { TestHasTargets::WithOneTarget }
45
+
46
+ it "must contain Ronin::Exploits::Target objects" do
47
+ expect(subject.targets).to all(be_kind_of(Ronin::Exploits::Target))
48
+ end
49
+ end
50
+
51
+ context "when the super-class defines it's own targets" do
52
+ let(:test_class) { TestHasTargets::InheritesTargets }
53
+ let(:super_class) { test_class.superclass }
54
+
55
+ it "must inherit the targets from the super-class" do
56
+ expect(subject.targets).to eq(super_class.targets)
57
+ end
58
+
59
+ context "but the sub-class defines additional targets" do
60
+ let(:test_class) { TestHasTargets::InheritesAndAddsTargets }
61
+
62
+ it "must combine the sub-classes targets with the super-classes" do
63
+ expect(subject.targets).to include(*super_class.targets)
64
+ end
65
+
66
+ it "must not modify the superclasses targets" do
67
+ expect(super_class.targets).to_not contain_exactly(*subject.targets)
68
+ end
69
+ end
70
+ end
71
+ end
72
+
73
+ describe ".target" do
74
+ context "when given keyword arguments" do
75
+ module TestHasTargets
76
+ class ExploitWithTargetWithKeywordArgs < Ronin::Exploits::Exploit
77
+ include Ronin::Exploits::Mixins::HasTargets
78
+
79
+ target arch: :x86_64, os: :linux, foo: 42
80
+ end
81
+ end
82
+
83
+ subject { TestHasTargets::ExploitWithTargetWithKeywordArgs }
84
+ let(:target) { subject.targets.last }
85
+
86
+ it "must initialize a new Ronin::Exploits::Target and add it to .targets" do
87
+ expect(target).to be_kind_of(Ronin::Exploits::Target)
88
+ expect(target.arch).to eq(:x86_64)
89
+ expect(target.os).to eq(:linux)
90
+ expect(target.foo).to eq(42)
91
+ end
92
+
93
+ context "and when given a block" do
94
+ module TestHasTargets
95
+ class ExploitWithTargetWithKeywordArgsAndBlock < Ronin::Exploits::Exploit
96
+ include Ronin::Exploits::Mixins::HasTargets
97
+
98
+ target arch: :x86_64, os: :linux do |t|
99
+ t.foo = 42
100
+ end
101
+ end
102
+ end
103
+
104
+ subject { TestHasTargets::ExploitWithTargetWithKeywordArgsAndBlock }
105
+ let(:target) { subject.targets.last }
106
+
107
+ it "must initialize a new Ronin::Exploits::Target and add it to .targets" do
108
+ expect(target).to be_kind_of(Ronin::Exploits::Target)
109
+ expect(target.arch).to eq(:x86_64)
110
+ expect(target.os).to eq(:linux)
111
+ expect(target.foo).to eq(42)
112
+ end
113
+ end
114
+ end
115
+ end
116
+
117
+ module TestHasTargets
118
+ class ExampleExploit < Ronin::Exploits::Exploit
119
+ include Ronin::Exploits::Mixins::HasTargets
120
+
121
+ target arch: :x86_64,
122
+ os: :linux,
123
+ os_version: '5.18.1',
124
+ software: 'Apache',
125
+ version: '2.4.53',
126
+ foo: 1
127
+
128
+ target arch: :arm,
129
+ os: :macos,
130
+ os_version: '10.13',
131
+ software: 'nginx',
132
+ version: '1.22.0',
133
+ foo: 2
134
+ end
135
+ end
136
+
137
+ let(:test_class) { TestHasTargets::ExampleExploit }
138
+ subject { test_class.new }
139
+
140
+ describe "#initialize" do
141
+ context "when not given the target: keyword argument" do
142
+ it "must default #target to nil" do
143
+ expect(subject.target).to be(nil)
144
+ end
145
+ end
146
+
147
+ context "when given the target: keyword argument" do
148
+ context "and it's a Hash" do
149
+ subject do
150
+ test_class.new(target: {os: :macos, os_version: '10.13'})
151
+ end
152
+
153
+ it "must select the matching target from .targets and set #target" do
154
+ expect(subject.target).to be(test_class.targets[1])
155
+ end
156
+ end
157
+
158
+ context "and it's an Integer" do
159
+ let(:target_index) { 1 }
160
+
161
+ subject { test_class.new(target: target_index) }
162
+
163
+ it "must select the target from .targets at the given index" do
164
+ expect(subject.target).to be(test_class.targets[target_index])
165
+ end
166
+ end
167
+ end
168
+ end
169
+
170
+ describe "#target=" do
171
+ context "when given a Target object" do
172
+ let(:target ) { Ronin::Exploits::Target.new }
173
+
174
+ before { subject.target = target }
175
+
176
+ it "must set #target to nil" do
177
+ expect(subject.target).to be(target)
178
+ end
179
+ end
180
+
181
+ context "when given an Integer" do
182
+ let(:target_index) { 1 }
183
+
184
+ before { subject.target = target_index }
185
+
186
+ it "must set the target from .targets at the given index" do
187
+ expect(subject.target).to be(test_class.targets[target_index])
188
+ end
189
+
190
+ context "but the index is out of bounds" do
191
+ let(:index) { 9000 }
192
+
193
+ it do
194
+ expect {
195
+ subject.target = index
196
+ }.to raise_error(described_class::NoMatchingTarget,"target index is out of bounds: #{index.inspect}")
197
+ end
198
+ end
199
+ end
200
+
201
+ context "when given a Target object" do
202
+ before do
203
+ subject.target = Ronin::Exploits::Target.new
204
+ subject.target = nil
205
+ end
206
+
207
+ it "must set #target to nil" do
208
+ expect(subject.target).to be(nil)
209
+ end
210
+ end
211
+ end
212
+
213
+ describe "#perform_validate" do
214
+ context "when #target is set" do
215
+ before { subject.target = subject.class.targets[0] }
216
+
217
+ it "must not raise NoTargetSelected" do
218
+ expect {
219
+ subject.perform_validate
220
+ }.to_not raise_error
221
+ end
222
+
223
+ it "must call #validate_params first" do
224
+ expect(subject).to receive(:validate_params)
225
+
226
+ subject.perform_validate
227
+ end
228
+ end
229
+
230
+ context "when #target is not set" do
231
+ it do
232
+ expect {
233
+ subject.perform_validate
234
+ }.to raise_error(described_class::NoTargetSelected,"no target was selected")
235
+ end
236
+ end
237
+ end
238
+
239
+ describe "#select_target" do
240
+ context "when given no keyword arguments" do
241
+ subject do
242
+ test_class.new(target: {os: :macos, os_version: '10.13'})
243
+ end
244
+
245
+ it "must return the first target in .targets and set #target" do
246
+ subject.select_target
247
+
248
+ expect(subject.target).to be(test_class.targets.first)
249
+ end
250
+ end
251
+
252
+ context "when given the arch: keyword argument" do
253
+ let(:arch) { :arm }
254
+
255
+ it "must find the target in .targets with the matching #arch" do
256
+ subject.select_target(arch: arch)
257
+
258
+ expect(subject.target.arch).to eq(arch)
259
+ end
260
+ end
261
+
262
+ context "when given the os: keyword argument" do
263
+ let(:os) { :macos }
264
+
265
+ it "must find the target in .targets with the matching #os" do
266
+ subject.select_target(os: os)
267
+
268
+ expect(subject.target.os).to eq(os)
269
+ end
270
+ end
271
+
272
+ context "when given the os_version: keyword argument" do
273
+ let(:os_version) { '10.13' }
274
+
275
+ it "must find the target in .targets with the matching #os_version" do
276
+ subject.select_target(os_version: os_version)
277
+
278
+ expect(subject.target.os_version).to eq(os_version)
279
+ end
280
+ end
281
+
282
+ context "when given the software: keyword argument" do
283
+ let(:software) { 'nginx' }
284
+
285
+ it "must find the target in .targets with the matching #software" do
286
+ subject.select_target(software: software)
287
+
288
+ expect(subject.target.software).to eq(software)
289
+ end
290
+ end
291
+
292
+ context "when given the version: keyword argument" do
293
+ let(:version) { '1.22.0' }
294
+
295
+ it "must find the target in .targets with the matching #version" do
296
+ subject.select_target(version: version)
297
+
298
+ expect(subject.target.version).to eq(version)
299
+ end
300
+ end
301
+
302
+ context "when given multiple keyword arguments" do
303
+ let(:arch) { :arm }
304
+ let(:os) { :macos }
305
+ let(:os_version) { '10.13' }
306
+ let(:software) { 'nginx' }
307
+ let(:version) { '1.22.0' }
308
+
309
+ it "must find the target in .targets which matches all given values" do
310
+ subject.select_target(
311
+ arch: arch,
312
+ os: os,
313
+ os_version: os_version,
314
+ software: software,
315
+ version: version
316
+ )
317
+
318
+ expect(subject.target.arch).to eq(arch)
319
+ expect(subject.target.os).to eq(os)
320
+ expect(subject.target.os_version).to eq(os_version)
321
+ expect(subject.target.software).to eq(software)
322
+ expect(subject.target.version).to eq(version)
323
+ end
324
+ end
325
+
326
+ context "but when no matching target could be found in .targets" do
327
+ it do
328
+ expect {
329
+ subject.select_target(arch: :foo)
330
+ }.to raise_error(described_class::NoMatchingTarget,"could not find any matching targets")
331
+ end
332
+ end
333
+ end
334
+
335
+ describe "#arch" do
336
+ context "when a target has been set" do
337
+ subject do
338
+ test_class.new(target: {arch: :arm})
339
+ end
340
+
341
+ it "must return the #target's #arch" do
342
+ expect(subject.arch).to eq(subject.target.arch)
343
+ end
344
+ end
345
+
346
+ context "when no target has been set" do
347
+ subject { test_class.new }
348
+
349
+ it "must return nil" do
350
+ expect(subject.arch).to be(nil)
351
+ end
352
+ end
353
+ end
354
+
355
+ describe "#os" do
356
+ context "when a target has been set" do
357
+ subject do
358
+ test_class.new(target: {os: :macos})
359
+ end
360
+
361
+ it "must return the #target's #os" do
362
+ expect(subject.os).to eq(subject.target.os)
363
+ end
364
+ end
365
+
366
+ context "when no target has been set" do
367
+ subject { test_class.new }
368
+
369
+ it "must return nil" do
370
+ expect(subject.os).to be(nil)
371
+ end
372
+ end
373
+ end
374
+
375
+ describe "#os_version" do
376
+ context "when a target has been set" do
377
+ subject do
378
+ test_class.new(target: {os_version: '10.13'})
379
+ end
380
+
381
+ it "must return the #target's #os_version" do
382
+ expect(subject.os_version).to eq(subject.target.os_version)
383
+ end
384
+ end
385
+
386
+ context "when no target has been set" do
387
+ subject { test_class.new }
388
+
389
+ it "must return nil" do
390
+ expect(subject.os_version).to be(nil)
391
+ end
392
+ end
393
+ end
394
+
395
+ describe "#software" do
396
+ context "when a target has been set" do
397
+ subject do
398
+ test_class.new(target: {software: 'nginx'})
399
+ end
400
+
401
+ it "must return the #target's #software" do
402
+ expect(subject.software).to eq(subject.target.software)
403
+ end
404
+ end
405
+
406
+ context "when no target has been set" do
407
+ subject { test_class.new }
408
+
409
+ it "must return nil" do
410
+ expect(subject.software).to be(nil)
411
+ end
412
+ end
413
+ end
414
+
415
+ describe "#version" do
416
+ context "when a target has been set" do
417
+ subject do
418
+ test_class.new(target: {version: '1.22.0'})
419
+ end
420
+
421
+ it "must return the #target's #version" do
422
+ expect(subject.version).to eq(subject.target.version)
423
+ end
424
+ end
425
+
426
+ context "when no target has been set" do
427
+ subject { test_class.new }
428
+
429
+ it "must return nil" do
430
+ expect(subject.version).to be(nil)
431
+ end
432
+ end
433
+ end
434
+ end