ronin-exploits 0.3.1 → 1.0.0.beta1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (338) hide show
  1. checksums.yaml +7 -0
  2. data/.document +4 -0
  3. data/.editorconfig +11 -0
  4. data/.github/workflows/ruby.yml +31 -0
  5. data/.gitignore +13 -0
  6. data/.mailmap +1 -0
  7. data/.rspec +1 -0
  8. data/.ruby-version +1 -0
  9. data/.yardopts +1 -0
  10. data/COPYING.txt +161 -335
  11. data/{History.txt → ChangeLog.md} +119 -16
  12. data/Gemfile +50 -0
  13. data/README.md +454 -0
  14. data/Rakefile +37 -23
  15. data/bin/ronin-exploits +13 -6
  16. data/data/new/exploit.rb.erb +158 -0
  17. data/gemspec.yml +37 -0
  18. data/lib/ronin/exploits/advisory.rb +84 -0
  19. data/lib/ronin/exploits/cli/command.rb +39 -0
  20. data/lib/ronin/exploits/cli/commands/irb.rb +57 -0
  21. data/lib/ronin/exploits/cli/commands/list.rb +80 -0
  22. data/lib/ronin/exploits/cli/commands/new.rb +332 -0
  23. data/lib/ronin/exploits/cli/commands/run.rb +396 -0
  24. data/lib/ronin/exploits/cli/commands/show.rb +264 -0
  25. data/lib/ronin/exploits/cli/exploit_command.rb +114 -0
  26. data/lib/ronin/exploits/cli/exploit_methods.rb +114 -0
  27. data/lib/ronin/exploits/cli/ruby_shell.rb +51 -0
  28. data/lib/ronin/exploits/cli.rb +46 -0
  29. data/lib/ronin/exploits/client_side_web_vuln.rb +69 -0
  30. data/lib/ronin/exploits/exceptions.rb +27 -17
  31. data/lib/ronin/exploits/exploit.rb +501 -582
  32. data/lib/ronin/exploits/heap_overflow.rb +50 -0
  33. data/lib/ronin/exploits/lfi.rb +141 -0
  34. data/lib/ronin/exploits/loot/file.rb +113 -0
  35. data/lib/ronin/exploits/loot.rb +119 -0
  36. data/lib/ronin/exploits/memory_corruption.rb +53 -0
  37. data/lib/ronin/exploits/metadata/arch.rb +83 -0
  38. data/lib/ronin/exploits/metadata/cookie_param.rb +80 -0
  39. data/lib/ronin/exploits/metadata/default_filename.rb +69 -0
  40. data/lib/ronin/exploits/metadata/default_port.rb +69 -0
  41. data/lib/ronin/exploits/metadata/header_name.rb +80 -0
  42. data/lib/ronin/exploits/metadata/os.rb +117 -0
  43. data/lib/ronin/exploits/metadata/shouts.rb +85 -0
  44. data/lib/ronin/exploits/metadata/url_path.rb +82 -0
  45. data/lib/ronin/exploits/metadata/url_query_param.rb +80 -0
  46. data/lib/ronin/exploits/mixins/binary.rb +106 -0
  47. data/lib/ronin/exploits/mixins/build_dir.rb +61 -0
  48. data/lib/ronin/exploits/mixins/file_builder.rb +102 -0
  49. data/lib/ronin/exploits/mixins/format_string.rb +87 -0
  50. data/lib/ronin/exploits/mixins/has_payload.rb +202 -0
  51. data/lib/ronin/exploits/mixins/has_targets.rb +297 -0
  52. data/lib/ronin/exploits/mixins/html.rb +213 -0
  53. data/lib/ronin/exploits/mixins/http.rb +866 -0
  54. data/lib/ronin/exploits/mixins/loot.rb +84 -0
  55. data/lib/ronin/exploits/mixins/nops.rb +121 -0
  56. data/lib/ronin/exploits/mixins/remote_tcp.rb +272 -0
  57. data/lib/ronin/exploits/mixins/remote_udp.rb +264 -0
  58. data/lib/ronin/exploits/mixins/seh.rb +136 -0
  59. data/lib/ronin/exploits/mixins/stack_overflow.rb +124 -0
  60. data/lib/ronin/exploits/mixins/text.rb +65 -0
  61. data/lib/ronin/exploits/mixins.rb +32 -0
  62. data/lib/ronin/exploits/open_redirect.rb +103 -0
  63. data/lib/ronin/exploits/params/base_url.rb +84 -0
  64. data/lib/ronin/exploits/params/bind_host.rb +53 -0
  65. data/lib/ronin/exploits/params/bind_port.rb +53 -0
  66. data/lib/ronin/exploits/params/filename.rb +71 -0
  67. data/lib/ronin/exploits/params/host.rb +56 -0
  68. data/lib/ronin/exploits/params/port.rb +71 -0
  69. data/lib/ronin/exploits/registry.rb +32 -0
  70. data/lib/ronin/exploits/rfi.rb +106 -0
  71. data/lib/ronin/exploits/root.rb +28 -0
  72. data/lib/ronin/exploits/seh_overflow.rb +90 -0
  73. data/lib/ronin/exploits/sqli.rb +172 -0
  74. data/lib/ronin/exploits/ssti.rb +108 -0
  75. data/lib/ronin/exploits/stack_overflow.rb +90 -0
  76. data/lib/ronin/exploits/target.rb +63 -103
  77. data/lib/ronin/exploits/test_result.rb +80 -0
  78. data/lib/ronin/exploits/use_after_free.rb +50 -0
  79. data/lib/ronin/exploits/version.rb +11 -12
  80. data/lib/ronin/exploits/web.rb +18 -89
  81. data/lib/ronin/exploits/web_vuln.rb +378 -0
  82. data/lib/ronin/exploits/xss.rb +102 -0
  83. data/lib/ronin/exploits.rb +19 -26
  84. data/man/ronin-exploits-irb.1 +31 -0
  85. data/man/ronin-exploits-irb.1.md +22 -0
  86. data/man/ronin-exploits-list.1 +37 -0
  87. data/man/ronin-exploits-list.1.md +27 -0
  88. data/man/ronin-exploits-new.1 +98 -0
  89. data/man/ronin-exploits-new.1.md +73 -0
  90. data/man/ronin-exploits-run.1 +117 -0
  91. data/man/ronin-exploits-run.1.md +87 -0
  92. data/man/ronin-exploits-show.1 +45 -0
  93. data/man/ronin-exploits-show.1.md +33 -0
  94. data/man/ronin-exploits.1 +55 -0
  95. data/man/ronin-exploits.1.md +41 -0
  96. data/ronin-exploits.gemspec +62 -0
  97. data/spec/advisory_spec.rb +71 -0
  98. data/spec/cli/exploit_command_spec.rb +68 -0
  99. data/spec/cli/exploit_methods_spec.rb +208 -0
  100. data/spec/cli/ruby_shell_spec.rb +14 -0
  101. data/spec/client_side_web_vuln_spec.rb +117 -0
  102. data/spec/exploit_spec.rb +538 -0
  103. data/spec/exploits_spec.rb +3 -4
  104. data/spec/heap_overflow_spec.rb +14 -0
  105. data/spec/lfi_spec.rb +162 -0
  106. data/spec/loot/file_spec.rb +131 -0
  107. data/spec/loot_spec.rb +138 -0
  108. data/spec/memory_corruption_spec.rb +22 -0
  109. data/spec/metadata/arch_spec.rb +82 -0
  110. data/spec/metadata/cookie_param_spec.rb +67 -0
  111. data/spec/metadata/default_filename_spec.rb +62 -0
  112. data/spec/metadata/default_port_spec.rb +62 -0
  113. data/spec/metadata/header_name_spec.rb +67 -0
  114. data/spec/metadata/os_spec.rb +164 -0
  115. data/spec/metadata/shouts_spec.rb +100 -0
  116. data/spec/metadata/url_path_spec.rb +67 -0
  117. data/spec/metadata/url_query_param_spec.rb +67 -0
  118. data/spec/mixins/binary_spec.rb +129 -0
  119. data/spec/mixins/build_dir.rb +66 -0
  120. data/spec/mixins/file_builder_spec.rb +67 -0
  121. data/spec/mixins/format_string_spec.rb +44 -0
  122. data/spec/mixins/has_payload_spec.rb +333 -0
  123. data/spec/mixins/has_targets_spec.rb +434 -0
  124. data/spec/mixins/html_spec.rb +772 -0
  125. data/spec/mixins/http_spec.rb +1227 -0
  126. data/spec/mixins/loot_spec.rb +20 -0
  127. data/spec/mixins/nops_spec.rb +165 -0
  128. data/spec/mixins/remote_tcp_spec.rb +217 -0
  129. data/spec/mixins/remote_udp_spec.rb +217 -0
  130. data/spec/mixins/seh_spec.rb +89 -0
  131. data/spec/mixins/stack_overflow_spec.rb +87 -0
  132. data/spec/mixins/text_spec.rb +43 -0
  133. data/spec/open_redirect_spec.rb +71 -0
  134. data/spec/params/base_url_spec.rb +71 -0
  135. data/spec/params/bind_host_spec.rb +34 -0
  136. data/spec/params/bind_port_spec.rb +35 -0
  137. data/spec/params/filename_spec.rb +77 -0
  138. data/spec/params/host_spec.rb +34 -0
  139. data/spec/params/port_spec.rb +77 -0
  140. data/spec/rfi_spec.rb +107 -0
  141. data/spec/seh_overflow_spec.rb +18 -0
  142. data/spec/spec_helper.rb +6 -10
  143. data/spec/sqli_spec.rb +306 -0
  144. data/spec/ssti_spec.rb +121 -0
  145. data/spec/stack_overflow_spec.rb +18 -0
  146. data/spec/target_spec.rb +92 -0
  147. data/spec/test_result_spec.rb +32 -0
  148. data/spec/use_after_free_spec.rb +14 -0
  149. data/spec/web_spec.rb +12 -0
  150. data/spec/web_vuln_spec.rb +854 -0
  151. data/spec/xss_spec.rb +69 -0
  152. metadata +356 -324
  153. data/Manifest.txt +0 -196
  154. data/README.txt +0 -274
  155. data/bin/ronin-exploit +0 -12
  156. data/bin/ronin-gen-binary-payload +0 -12
  157. data/bin/ronin-gen-exploit +0 -12
  158. data/bin/ronin-gen-ftp-exploit +0 -12
  159. data/bin/ronin-gen-http-exploit +0 -12
  160. data/bin/ronin-gen-local-exploit +0 -12
  161. data/bin/ronin-gen-nops +0 -12
  162. data/bin/ronin-gen-payload +0 -12
  163. data/bin/ronin-gen-remote-exploit +0 -12
  164. data/bin/ronin-gen-remote-tcp-exploit +0 -12
  165. data/bin/ronin-gen-remote-udp-exploit +0 -12
  166. data/bin/ronin-gen-shellcode +0 -12
  167. data/bin/ronin-gen-web-exploit +0 -12
  168. data/bin/ronin-payload +0 -12
  169. data/bin/ronin-payloads +0 -12
  170. data/lib/ronin/controls/behaviors.rb +0 -133
  171. data/lib/ronin/controls/exceptions/not_implemented.rb +0 -27
  172. data/lib/ronin/controls/exceptions/program_not_found.rb +0 -27
  173. data/lib/ronin/controls/exceptions.rb +0 -23
  174. data/lib/ronin/controls/file_system.rb +0 -145
  175. data/lib/ronin/controls/helpers/command_exec.rb +0 -143
  176. data/lib/ronin/controls/helpers/dir_create.rb +0 -42
  177. data/lib/ronin/controls/helpers/dir_listing.rb +0 -62
  178. data/lib/ronin/controls/helpers/dir_remove.rb +0 -42
  179. data/lib/ronin/controls/helpers/file_ctime.rb +0 -52
  180. data/lib/ronin/controls/helpers/file_mtime.rb +0 -53
  181. data/lib/ronin/controls/helpers/file_ownership.rb +0 -53
  182. data/lib/ronin/controls/helpers/file_read.rb +0 -62
  183. data/lib/ronin/controls/helpers/file_remove.rb +0 -51
  184. data/lib/ronin/controls/helpers/file_write.rb +0 -62
  185. data/lib/ronin/controls/helpers/memory_read.rb +0 -39
  186. data/lib/ronin/controls/helpers/memory_write.rb +0 -39
  187. data/lib/ronin/controls/helpers.rb +0 -33
  188. data/lib/ronin/controls.rb +0 -23
  189. data/lib/ronin/exploits/control.rb +0 -47
  190. data/lib/ronin/exploits/exceptions/exception.rb +0 -27
  191. data/lib/ronin/exploits/exceptions/exploit_not_built.rb +0 -29
  192. data/lib/ronin/exploits/exceptions/payload_size.rb +0 -29
  193. data/lib/ronin/exploits/exceptions/restricted_char.rb +0 -29
  194. data/lib/ronin/exploits/exceptions/target_data_missing.rb +0 -29
  195. data/lib/ronin/exploits/exceptions/target_unspecified.rb +0 -29
  196. data/lib/ronin/exploits/exceptions/unknown_helper.rb +0 -29
  197. data/lib/ronin/exploits/exploit_author.rb +0 -33
  198. data/lib/ronin/exploits/ftp.rb +0 -42
  199. data/lib/ronin/exploits/helpers/binary.rb +0 -50
  200. data/lib/ronin/exploits/helpers/buffer_overflow.rb +0 -115
  201. data/lib/ronin/exploits/helpers/file_based.rb +0 -112
  202. data/lib/ronin/exploits/helpers/format_string.rb +0 -117
  203. data/lib/ronin/exploits/helpers/padding.rb +0 -101
  204. data/lib/ronin/exploits/helpers.rb +0 -26
  205. data/lib/ronin/exploits/http.rb +0 -49
  206. data/lib/ronin/exploits/local.rb +0 -40
  207. data/lib/ronin/exploits/remote.rb +0 -40
  208. data/lib/ronin/exploits/remote_tcp.rb +0 -87
  209. data/lib/ronin/exploits/remote_udp.rb +0 -87
  210. data/lib/ronin/exploits/targets/buffer_overflow.rb +0 -46
  211. data/lib/ronin/exploits/targets/format_string.rb +0 -43
  212. data/lib/ronin/exploits/targets.rb +0 -27
  213. data/lib/ronin/exploits/verifiers.rb +0 -121
  214. data/lib/ronin/generators/exploits/exploit.rb +0 -70
  215. data/lib/ronin/generators/exploits/ftp.rb +0 -42
  216. data/lib/ronin/generators/exploits/http.rb +0 -42
  217. data/lib/ronin/generators/exploits/local.rb +0 -42
  218. data/lib/ronin/generators/exploits/remote.rb +0 -42
  219. data/lib/ronin/generators/exploits/remote_tcp.rb +0 -44
  220. data/lib/ronin/generators/exploits/remote_udp.rb +0 -44
  221. data/lib/ronin/generators/exploits/static.rb +0 -30
  222. data/lib/ronin/generators/exploits/web.rb +0 -45
  223. data/lib/ronin/generators/exploits.rb +0 -23
  224. data/lib/ronin/generators/payloads/binary_payload.rb +0 -42
  225. data/lib/ronin/generators/payloads/nops.rb +0 -42
  226. data/lib/ronin/generators/payloads/payload.rb +0 -66
  227. data/lib/ronin/generators/payloads/shellcode.rb +0 -42
  228. data/lib/ronin/generators/payloads/static.rb +0 -30
  229. data/lib/ronin/generators/payloads.rb +0 -23
  230. data/lib/ronin/model/has_default_port.rb +0 -54
  231. data/lib/ronin/model/targets_arch.rb +0 -68
  232. data/lib/ronin/model/targets_os.rb +0 -69
  233. data/lib/ronin/model/targets_product.rb +0 -68
  234. data/lib/ronin/payloads/asm_payload.rb +0 -40
  235. data/lib/ronin/payloads/binary_payload.rb +0 -42
  236. data/lib/ronin/payloads/control.rb +0 -47
  237. data/lib/ronin/payloads/encoders/encoder.rb +0 -92
  238. data/lib/ronin/payloads/encoders/xor.rb +0 -79
  239. data/lib/ronin/payloads/encoders.rb +0 -32
  240. data/lib/ronin/payloads/exceptions/exception.rb +0 -27
  241. data/lib/ronin/payloads/exceptions/not_implemented.rb +0 -29
  242. data/lib/ronin/payloads/exceptions/unknown_helper.rb +0 -29
  243. data/lib/ronin/payloads/exceptions.rb +0 -23
  244. data/lib/ronin/payloads/has_payload.rb +0 -111
  245. data/lib/ronin/payloads/helpers/chained.rb +0 -61
  246. data/lib/ronin/payloads/helpers/rpc.rb +0 -93
  247. data/lib/ronin/payloads/helpers.rb +0 -23
  248. data/lib/ronin/payloads/nops.rb +0 -39
  249. data/lib/ronin/payloads/payload.rb +0 -350
  250. data/lib/ronin/payloads/payload_author.rb +0 -33
  251. data/lib/ronin/payloads/shellcode.rb +0 -40
  252. data/lib/ronin/payloads/web_payload.rb +0 -41
  253. data/lib/ronin/payloads.rb +0 -36
  254. data/lib/ronin/ui/command_line/commands/exploit.rb +0 -193
  255. data/lib/ronin/ui/command_line/commands/exploits.rb +0 -154
  256. data/lib/ronin/ui/command_line/commands/gen_binary_payload.rb +0 -34
  257. data/lib/ronin/ui/command_line/commands/gen_exploit.rb +0 -34
  258. data/lib/ronin/ui/command_line/commands/gen_ftp_exploit.rb +0 -34
  259. data/lib/ronin/ui/command_line/commands/gen_http_exploit.rb +0 -34
  260. data/lib/ronin/ui/command_line/commands/gen_local_exploit.rb +0 -34
  261. data/lib/ronin/ui/command_line/commands/gen_nops.rb +0 -34
  262. data/lib/ronin/ui/command_line/commands/gen_payload.rb +0 -34
  263. data/lib/ronin/ui/command_line/commands/gen_remote_exploit.rb +0 -34
  264. data/lib/ronin/ui/command_line/commands/gen_remote_tcp_exploit.rb +0 -34
  265. data/lib/ronin/ui/command_line/commands/gen_remote_udp_exploit.rb +0 -34
  266. data/lib/ronin/ui/command_line/commands/gen_shellcode.rb +0 -34
  267. data/lib/ronin/ui/command_line/commands/gen_web_exploit.rb +0 -34
  268. data/lib/ronin/ui/command_line/commands/payload.rb +0 -129
  269. data/lib/ronin/ui/command_line/commands/payloads.rb +0 -128
  270. data/lib/ronin/vuln/behavior.rb +0 -165
  271. data/spec/controls/behaviors_examples.rb +0 -38
  272. data/spec/exploits/binary_exploit_spec.rb +0 -44
  273. data/spec/exploits/buffer_overflow_exploit_spec.rb +0 -70
  274. data/spec/exploits/exploit_spec.rb +0 -313
  275. data/spec/exploits/file_based_exploit_spec.rb +0 -48
  276. data/spec/exploits/format_string_exploit_spec.rb +0 -32
  277. data/spec/exploits/ftp_spec.rb +0 -13
  278. data/spec/exploits/http_spec.rb +0 -17
  279. data/spec/exploits/padding_exploit_spec.rb +0 -44
  280. data/spec/exploits/remote_tcp_spec.rb +0 -28
  281. data/spec/exploits/remote_udp_spec.rb +0 -28
  282. data/spec/exploits/target_spec.rb +0 -98
  283. data/spec/exploits/targets/buffer_overflow_spec.rb +0 -22
  284. data/spec/exploits/web_spec.rb +0 -35
  285. data/spec/generators/exploits/exploit_examples.rb +0 -24
  286. data/spec/generators/exploits/exploit_spec.rb +0 -42
  287. data/spec/generators/exploits/ftp_spec.rb +0 -42
  288. data/spec/generators/exploits/http_spec.rb +0 -42
  289. data/spec/generators/exploits/local_spec.rb +0 -42
  290. data/spec/generators/exploits/remote_spec.rb +0 -42
  291. data/spec/generators/exploits/remote_tcp_spec.rb +0 -47
  292. data/spec/generators/exploits/remote_udp_spec.rb +0 -47
  293. data/spec/generators/exploits/web_spec.rb +0 -52
  294. data/spec/generators/payloads/binary_payload_spec.rb +0 -31
  295. data/spec/generators/payloads/nops_spec.rb +0 -31
  296. data/spec/generators/payloads/payload_examples.rb +0 -16
  297. data/spec/generators/payloads/payload_spec.rb +0 -31
  298. data/spec/generators/payloads/shellcode_spec.rb +0 -31
  299. data/spec/helpers/database.rb +0 -5
  300. data/spec/helpers/objects.rb +0 -22
  301. data/spec/model/has_default_port_spec.rb +0 -27
  302. data/spec/model/models/default_port_model.rb +0 -13
  303. data/spec/model/models/non_default_port_model.rb +0 -11
  304. data/spec/model/models/targets_arch_model.rb +0 -11
  305. data/spec/model/models/targets_os_model.rb +0 -11
  306. data/spec/model/models/targets_product_model.rb +0 -11
  307. data/spec/model/targets_arch_spec.rb +0 -32
  308. data/spec/model/targets_os_spec.rb +0 -33
  309. data/spec/model/targets_product_spec.rb +0 -35
  310. data/spec/objects/exploits/example.rb +0 -25
  311. data/spec/objects/exploits/simple.rb +0 -24
  312. data/spec/objects/payloads/simple.rb +0 -19
  313. data/spec/payloads/encoders/encoder_spec.rb +0 -30
  314. data/spec/payloads/encoders/xor_spec.rb +0 -20
  315. data/spec/payloads/payload_spec.rb +0 -156
  316. data/spec/vuln/behavior_spec.rb +0 -15
  317. data/static/ronin/generators/exploits/_cache.erb +0 -14
  318. data/static/ronin/generators/exploits/_header.erb +0 -1
  319. data/static/ronin/generators/exploits/_helpers.erb +0 -4
  320. data/static/ronin/generators/exploits/exploit.erb +0 -24
  321. data/static/ronin/generators/exploits/ftp.erb +0 -24
  322. data/static/ronin/generators/exploits/http.erb +0 -26
  323. data/static/ronin/generators/exploits/local.erb +0 -24
  324. data/static/ronin/generators/exploits/remote.erb +0 -24
  325. data/static/ronin/generators/exploits/remote_tcp.erb +0 -26
  326. data/static/ronin/generators/exploits/remote_udp.erb +0 -26
  327. data/static/ronin/generators/exploits/web.erb +0 -28
  328. data/static/ronin/generators/payloads/_cache.erb +0 -10
  329. data/static/ronin/generators/payloads/_header.erb +0 -1
  330. data/static/ronin/generators/payloads/_helpers.erb +0 -2
  331. data/static/ronin/generators/payloads/binary_payload.erb +0 -25
  332. data/static/ronin/generators/payloads/nops.erb +0 -19
  333. data/static/ronin/generators/payloads/payload.erb +0 -25
  334. data/static/ronin/generators/payloads/shellcode.erb +0 -25
  335. data/tasks/spec.rb +0 -10
  336. data/tasks/yard.rb +0 -13
  337. data.tar.gz.sig +0 -0
  338. metadata.gz.sig +0 -0
@@ -1,93 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/payloads/exceptions/not_implemented'
23
-
24
- module Ronin
25
- module Payloads
26
- module Helpers
27
- module Rpc
28
- #
29
- # Calls a specific method with additional arguments.
30
- #
31
- # @param [Symbol, String] method
32
- # The method name to call.
33
- #
34
- # @param [Array] arguments
35
- # The arguments to use when calling the method.
36
- #
37
- # @return [Object]
38
- # The result of the method call.
39
- #
40
- # @since 0.3.0
41
- #
42
- def call_method(method,*arguments)
43
- raise(NotImplemented,"the call method is unimplemented",caller)
44
- end
45
-
46
- #
47
- # Evaluates code.
48
- #
49
- # @param [String] code
50
- # The code to evaluate.
51
- #
52
- # @return [Object]
53
- # The result of the code evaluation.
54
- #
55
- # @since 0.3.0
56
- #
57
- def eval(code)
58
- call_method(:eval,code)
59
- end
60
-
61
- #
62
- # Exits the process.
63
- #
64
- # @param [Integer] status
65
- # The status to exit with.
66
- #
67
- # @since 0.3.0
68
- #
69
- def exit(status=0)
70
- call_method(:exit,status)
71
- end
72
-
73
- protected
74
-
75
- #
76
- # Provides transparent access to remote methods using the
77
- # specified _name_ and given _arguments_.
78
- #
79
- # @since 0.3.0
80
- #
81
- def method_missing(name,*arguments,&block)
82
- name = name.to_s
83
-
84
- if (name[-1..-1] != '=' && block.nil?)
85
- return call_method(name,*arguments)
86
- end
87
-
88
- return super(name,*arguments,&block)
89
- end
90
- end
91
- end
92
- end
93
- end
@@ -1,23 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/payloads/helpers/chained'
23
- require 'ronin/payloads/helpers/rpc'
@@ -1,39 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/payloads/asm_payload'
23
-
24
- module Ronin
25
- module Payloads
26
- class Nops < ASMPayload
27
-
28
- #
29
- # Creates a new Ronin::Payloads::Nops object using the given _block_.
30
- #
31
- # ronin_nops do
32
- # ...
33
- # end
34
- #
35
- contextify :ronin_nops
36
-
37
- end
38
- end
39
- end
@@ -1,350 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/payloads/exceptions/unknown_helper'
23
- require 'ronin/payloads/payload_author'
24
- require 'ronin/payloads/control'
25
- require 'ronin/cacheable'
26
- require 'ronin/model/targets_arch'
27
- require 'ronin/model/targets_os'
28
- require 'ronin/model/has_name'
29
- require 'ronin/model/has_description'
30
- require 'ronin/model/has_version'
31
- require 'ronin/model/has_license'
32
- require 'ronin/controls/behaviors'
33
- require 'ronin/ui/output/helpers'
34
- require 'ronin/extensions/kernel'
35
-
36
- require 'parameters'
37
-
38
- module Ronin
39
- module Payloads
40
- class Payload
41
-
42
- include Parameters
43
- include Cacheable
44
- include Model::HasName
45
- include Model::HasDescription
46
- include Model::HasVersion
47
- include Model::HasLicense
48
- include Model::TargetsArch
49
- include Model::TargetsOS
50
- include Controls::Behaviors
51
- include UI::Output::Helpers
52
-
53
- #
54
- # Creates a new Ronin::Payloads::Payload object using the given
55
- # _block_.
56
- #
57
- # ronin_payload do
58
- # ...
59
- # end
60
- #
61
- contextify :ronin_payload
62
-
63
- # Primary key of the payload
64
- property :id, Serial
65
-
66
- # Author(s) of the payload
67
- has n, :authors, :model => 'Ronin::Payloads::PayloadAuthor'
68
-
69
- # Controls the payload provides
70
- has n, :controls, :model => 'Ronin::Payloads::Control'
71
-
72
- # Validations
73
- validates_present :name
74
- validates_is_unique :version, :scope => [:name]
75
-
76
- # The exploit to deploy with
77
- attr_accessor :exploit
78
-
79
- # The raw payload
80
- attr_accessor :raw_payload
81
-
82
- #
83
- # Creates a new Payload object.
84
- #
85
- # @param [Array] attributes
86
- # Additional attributes to initialize the payload with.
87
- #
88
- # @yield []
89
- # If a block is given, it will be evaluated in the newly created
90
- # Payload object.
91
- #
92
- def initialize(attributes={},&block)
93
- super(attributes)
94
-
95
- initialize_params(attributes)
96
-
97
- @built = false
98
- @deployed = false
99
-
100
- instance_eval(&block) if block
101
- end
102
-
103
- #
104
- # Finds all payloads written by a specific author.
105
- #
106
- # @param [String] name
107
- # The name of the author.
108
- #
109
- # @return [Array<Payload>]
110
- # The payload written by the author.
111
- #
112
- def self.written_by(name)
113
- all(self.authors.name.like => "%#{name}%")
114
- end
115
-
116
- #
117
- # Finds all payloads written for a specific organization.
118
- #
119
- # @param [String] name
120
- # The name of the organization.
121
- #
122
- # @return [Array<Payload>]
123
- # The payloads written for the organization.
124
- #
125
- def self.written_for(name)
126
- all(self.authors.organization.like => "%#{name}%")
127
- end
128
-
129
- #
130
- # Adds a new author to the payload.
131
- #
132
- # @param [Hash] attributes
133
- # Additional attributes to create the PayloadAuthor object with.
134
- #
135
- # @yield [author]
136
- # If a block is given, it will be passed the newly created author
137
- # object.
138
- #
139
- # @yieldparam [PayloadAuthor] author
140
- # The author object tied to the payload.
141
- #
142
- # @example
143
- # author :name => 'Anonymous',
144
- # :email => 'anon@example.com',
145
- # :organization => 'Anonymous LLC'
146
- #
147
- def author(attributes={},&block)
148
- self.authors << PayloadAuthor.new(attributes,&block)
149
- end
150
-
151
- #
152
- # @return [Boolean]
153
- # Specifies whether the payload is built.
154
- #
155
- def built?
156
- @built == true
157
- end
158
-
159
- #
160
- # Builds the payload.
161
- #
162
- # @param [Hash] options
163
- # Additional options to build the payload with and use as
164
- # parameters.
165
- #
166
- # @yield [payload]
167
- # If a block is given, it will be yielded the result of the
168
- # payload building.
169
- #
170
- # @yieldparam [String] payload
171
- # The built payload.
172
- #
173
- # @return [String]
174
- # The built payload.
175
- #
176
- def build!(options={},&block)
177
- self.params = options
178
-
179
- print_debug "Payload parameters: #{self.params.inspect}"
180
-
181
- @built = false
182
- @raw_payload = ''
183
-
184
- print_info "Building payload ..."
185
-
186
- build()
187
-
188
- print_info "Payload built!"
189
-
190
- @built = true
191
-
192
- if block
193
- if block.arity == 1
194
- block.call(self)
195
- else
196
- block.call()
197
- end
198
- end
199
-
200
- return self
201
- end
202
-
203
- #
204
- # Verifies the payload is properly configured and ready to be
205
- # deployed.
206
- #
207
- def verify!
208
- print_info "Verifying payload ..."
209
-
210
- verify
211
-
212
- print_info "Payload verified!"
213
- end
214
-
215
- #
216
- # @return [Boolean]
217
- # Specifies whether the payload has previously been deployed.
218
- #
219
- def deployed?
220
- @deployed == true
221
- end
222
-
223
- #
224
- # Verifies the built payload and deploys the payload.
225
- #
226
- # @yield [payload]
227
- # If a block is given, it will be passed the deployed payload.
228
- #
229
- # @yieldparam [Payload] payload
230
- # The deployed payload.
231
- #
232
- def deploy!(&block)
233
- # verify the payload
234
- verify!
235
-
236
- print_info "Deploying payload ..."
237
- @deployed = false
238
-
239
- deploy()
240
-
241
- print_info "Payload deployed!"
242
- @deployed = true
243
-
244
- if block
245
- if block.arity == 1
246
- block.call(self)
247
- else
248
- block.call()
249
- end
250
- end
251
-
252
- return self
253
- end
254
-
255
- #
256
- # Converts the payload to a String.
257
- #
258
- # @return [String]
259
- # The name and version of the payload.
260
- #
261
- def to_s
262
- if (self.name && self.version)
263
- "#{self.name} #{self.version}"
264
- elsif self.name
265
- self.name
266
- elsif self.version
267
- self.version
268
- end
269
- end
270
-
271
- #
272
- # Inspects the contents of the payload.
273
- #
274
- # @return [String]
275
- # The inspected payload.
276
- #
277
- def inspect
278
- str = "#{self.class}: #{self}"
279
- str << " #{self.params.inspect}" unless self.params.empty?
280
-
281
- return "#<#{str}>"
282
- end
283
-
284
- protected
285
-
286
- #
287
- # Extends the payload with the helper module defined in
288
- # Ronin::Payloads::Helpers that has the similar name.
289
- #
290
- # @param [Symbol, String] name
291
- # The snake-case name of the payload helper to load and extend the
292
- # payload with.
293
- #
294
- # @return [true]
295
- # The payload helper was successfully loaded.
296
- #
297
- # @raise [UnknownHelper]
298
- # No valid helper module could be found or loaded with the similar
299
- # name.
300
- #
301
- # @example
302
- # helper :shell
303
- #
304
- def helper(name)
305
- name = name.to_s
306
- module_name = name.to_const_string
307
-
308
- begin
309
- require_within File.join('ronin','payloads','helpers'), name
310
- rescue Gem::LoadError => e
311
- raise(e)
312
- rescue ::LoadError
313
- raise(UnknownHelper,"unknown helper #{name.dump}",caller)
314
- end
315
-
316
- unless Ronin::Payloads::Helpers.const_defined?(module_name)
317
- raise(UnknownHelper,"unknown helper #{name.dump}",caller)
318
- end
319
-
320
- helper_module = Ronin::Payloads::Helpers.const_get(module_name)
321
-
322
- unless helper_module.kind_of?(Module)
323
- raise(UnknownHelper,"unknown helper #{name.dump}",caller)
324
- end
325
-
326
- extend helper_module
327
- return true
328
- end
329
-
330
- #
331
- # Default builder method.
332
- #
333
- def build
334
- end
335
-
336
- #
337
- # Default payload verifier method.
338
- #
339
- def verify
340
- end
341
-
342
- #
343
- # Default payload deployer method.
344
- #
345
- def deploy(&block)
346
- end
347
-
348
- end
349
- end
350
- end
@@ -1,33 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/author'
23
-
24
- module Ronin
25
- module Payloads
26
- class PayloadAuthor < Author
27
-
28
- # The payload the author wrote
29
- belongs_to :payload, :nullable => true
30
-
31
- end
32
- end
33
- end
@@ -1,40 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/payloads/binary_payload'
23
-
24
- module Ronin
25
- module Payloads
26
- class Shellcode < ASMPayload
27
-
28
- #
29
- # Creates a new Ronin::Payloads::Shellcode object using the given
30
- # _block_.
31
- #
32
- # ronin_shellcode do
33
- # ...
34
- # end
35
- #
36
- contextify :ronin_shellcode
37
-
38
- end
39
- end
40
- end
@@ -1,41 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/payloads/payload'
23
- require 'ronin/formatting/http'
24
-
25
- module Ronin
26
- module Payloads
27
- class WebPayload < Payload
28
-
29
- #
30
- # Creates a new Ronin::Payloads::WebPayload object using the given
31
- # _block_.
32
- #
33
- # ronin_web_payload do
34
- # ...
35
- # end
36
- #
37
- contextify :ronin_web_payload
38
-
39
- end
40
- end
41
- end
@@ -1,36 +0,0 @@
1
- #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
3
- # payload crafting functionality.
4
- #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
6
- #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
10
- # (at your option) any later version.
11
- #
12
- # This program is distributed in the hope that it will be useful,
13
- # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
- # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
16
- #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
20
- #
21
-
22
- require 'ronin/payloads/encoders'
23
- require 'ronin/payloads/payload'
24
- require 'ronin/payloads/binary_payload'
25
- require 'ronin/payloads/asm_payload'
26
- require 'ronin/payloads/nops'
27
- require 'ronin/payloads/shellcode'
28
- require 'ronin/database'
29
-
30
- require 'reverse_require'
31
-
32
- require_for 'ronin-exploits', 'ronin/exploits'
33
-
34
- module Ronin
35
- Database.update!
36
- end