ronin-exploits 0.3.1 → 1.0.0.beta2

Sign up to get free protection for your applications and to get access to all the features.
Files changed (338) hide show
  1. checksums.yaml +7 -0
  2. data/.document +4 -0
  3. data/.editorconfig +11 -0
  4. data/.github/workflows/ruby.yml +31 -0
  5. data/.gitignore +13 -0
  6. data/.mailmap +1 -0
  7. data/.rspec +1 -0
  8. data/.ruby-version +1 -0
  9. data/.yardopts +1 -0
  10. data/COPYING.txt +161 -335
  11. data/{History.txt → ChangeLog.md} +119 -16
  12. data/Gemfile +50 -0
  13. data/README.md +454 -0
  14. data/Rakefile +37 -23
  15. data/bin/ronin-exploits +13 -6
  16. data/data/new/exploit.rb.erb +158 -0
  17. data/gemspec.yml +44 -0
  18. data/lib/ronin/exploits/advisory.rb +84 -0
  19. data/lib/ronin/exploits/cli/command.rb +39 -0
  20. data/lib/ronin/exploits/cli/commands/irb.rb +57 -0
  21. data/lib/ronin/exploits/cli/commands/list.rb +80 -0
  22. data/lib/ronin/exploits/cli/commands/new.rb +332 -0
  23. data/lib/ronin/exploits/cli/commands/run.rb +396 -0
  24. data/lib/ronin/exploits/cli/commands/show.rb +290 -0
  25. data/lib/ronin/exploits/cli/exploit_command.rb +114 -0
  26. data/lib/ronin/exploits/cli/exploit_methods.rb +114 -0
  27. data/lib/ronin/exploits/cli/ruby_shell.rb +51 -0
  28. data/lib/ronin/exploits/cli.rb +51 -0
  29. data/lib/ronin/exploits/client_side_web_vuln.rb +69 -0
  30. data/lib/ronin/exploits/exceptions.rb +27 -17
  31. data/lib/ronin/exploits/exploit.rb +501 -582
  32. data/lib/ronin/exploits/heap_overflow.rb +50 -0
  33. data/lib/ronin/exploits/lfi.rb +141 -0
  34. data/lib/ronin/exploits/loot/file.rb +113 -0
  35. data/lib/ronin/exploits/loot.rb +119 -0
  36. data/lib/ronin/exploits/memory_corruption.rb +53 -0
  37. data/lib/ronin/exploits/metadata/arch.rb +83 -0
  38. data/lib/ronin/exploits/metadata/cookie_param.rb +80 -0
  39. data/lib/ronin/exploits/metadata/default_filename.rb +69 -0
  40. data/lib/ronin/exploits/metadata/default_port.rb +69 -0
  41. data/lib/ronin/exploits/metadata/header_name.rb +80 -0
  42. data/lib/ronin/exploits/metadata/os.rb +117 -0
  43. data/lib/ronin/exploits/metadata/shouts.rb +85 -0
  44. data/lib/ronin/exploits/metadata/url_path.rb +82 -0
  45. data/lib/ronin/exploits/metadata/url_query_param.rb +80 -0
  46. data/lib/ronin/exploits/mixins/binary.rb +106 -0
  47. data/lib/ronin/exploits/mixins/build_dir.rb +61 -0
  48. data/lib/ronin/exploits/mixins/file_builder.rb +102 -0
  49. data/lib/ronin/exploits/mixins/format_string.rb +87 -0
  50. data/lib/ronin/exploits/mixins/has_payload.rb +202 -0
  51. data/lib/ronin/exploits/mixins/has_targets.rb +297 -0
  52. data/lib/ronin/exploits/mixins/html.rb +213 -0
  53. data/lib/ronin/exploits/mixins/http.rb +866 -0
  54. data/lib/ronin/exploits/mixins/loot.rb +84 -0
  55. data/lib/ronin/exploits/mixins/nops.rb +121 -0
  56. data/lib/ronin/exploits/mixins/remote_tcp.rb +272 -0
  57. data/lib/ronin/exploits/mixins/remote_udp.rb +264 -0
  58. data/lib/ronin/exploits/mixins/seh.rb +136 -0
  59. data/lib/ronin/exploits/mixins/stack_overflow.rb +124 -0
  60. data/lib/ronin/exploits/mixins/text.rb +65 -0
  61. data/lib/ronin/exploits/mixins.rb +32 -0
  62. data/lib/ronin/exploits/open_redirect.rb +103 -0
  63. data/lib/ronin/exploits/params/base_url.rb +84 -0
  64. data/lib/ronin/exploits/params/bind_host.rb +53 -0
  65. data/lib/ronin/exploits/params/bind_port.rb +53 -0
  66. data/lib/ronin/exploits/params/filename.rb +71 -0
  67. data/lib/ronin/exploits/params/host.rb +56 -0
  68. data/lib/ronin/exploits/params/port.rb +71 -0
  69. data/lib/ronin/exploits/registry.rb +32 -0
  70. data/lib/ronin/exploits/rfi.rb +106 -0
  71. data/lib/ronin/exploits/root.rb +28 -0
  72. data/lib/ronin/exploits/seh_overflow.rb +90 -0
  73. data/lib/ronin/exploits/sqli.rb +172 -0
  74. data/lib/ronin/exploits/ssti.rb +108 -0
  75. data/lib/ronin/exploits/stack_overflow.rb +90 -0
  76. data/lib/ronin/exploits/target.rb +63 -103
  77. data/lib/ronin/exploits/test_result.rb +80 -0
  78. data/lib/ronin/exploits/use_after_free.rb +50 -0
  79. data/lib/ronin/exploits/version.rb +11 -12
  80. data/lib/ronin/exploits/web.rb +18 -89
  81. data/lib/ronin/exploits/web_vuln.rb +378 -0
  82. data/lib/ronin/exploits/xss.rb +102 -0
  83. data/lib/ronin/exploits.rb +19 -26
  84. data/man/ronin-exploits-irb.1 +31 -0
  85. data/man/ronin-exploits-irb.1.md +22 -0
  86. data/man/ronin-exploits-list.1 +37 -0
  87. data/man/ronin-exploits-list.1.md +27 -0
  88. data/man/ronin-exploits-new.1 +98 -0
  89. data/man/ronin-exploits-new.1.md +73 -0
  90. data/man/ronin-exploits-run.1 +117 -0
  91. data/man/ronin-exploits-run.1.md +87 -0
  92. data/man/ronin-exploits-show.1 +45 -0
  93. data/man/ronin-exploits-show.1.md +33 -0
  94. data/man/ronin-exploits.1 +55 -0
  95. data/man/ronin-exploits.1.md +41 -0
  96. data/ronin-exploits.gemspec +62 -0
  97. data/spec/advisory_spec.rb +71 -0
  98. data/spec/cli/exploit_command_spec.rb +68 -0
  99. data/spec/cli/exploit_methods_spec.rb +208 -0
  100. data/spec/cli/ruby_shell_spec.rb +14 -0
  101. data/spec/client_side_web_vuln_spec.rb +117 -0
  102. data/spec/exploit_spec.rb +538 -0
  103. data/spec/exploits_spec.rb +3 -4
  104. data/spec/heap_overflow_spec.rb +14 -0
  105. data/spec/lfi_spec.rb +162 -0
  106. data/spec/loot/file_spec.rb +131 -0
  107. data/spec/loot_spec.rb +138 -0
  108. data/spec/memory_corruption_spec.rb +22 -0
  109. data/spec/metadata/arch_spec.rb +82 -0
  110. data/spec/metadata/cookie_param_spec.rb +67 -0
  111. data/spec/metadata/default_filename_spec.rb +62 -0
  112. data/spec/metadata/default_port_spec.rb +62 -0
  113. data/spec/metadata/header_name_spec.rb +67 -0
  114. data/spec/metadata/os_spec.rb +164 -0
  115. data/spec/metadata/shouts_spec.rb +100 -0
  116. data/spec/metadata/url_path_spec.rb +67 -0
  117. data/spec/metadata/url_query_param_spec.rb +67 -0
  118. data/spec/mixins/binary_spec.rb +129 -0
  119. data/spec/mixins/build_dir.rb +66 -0
  120. data/spec/mixins/file_builder_spec.rb +67 -0
  121. data/spec/mixins/format_string_spec.rb +44 -0
  122. data/spec/mixins/has_payload_spec.rb +333 -0
  123. data/spec/mixins/has_targets_spec.rb +434 -0
  124. data/spec/mixins/html_spec.rb +772 -0
  125. data/spec/mixins/http_spec.rb +1227 -0
  126. data/spec/mixins/loot_spec.rb +20 -0
  127. data/spec/mixins/nops_spec.rb +165 -0
  128. data/spec/mixins/remote_tcp_spec.rb +217 -0
  129. data/spec/mixins/remote_udp_spec.rb +217 -0
  130. data/spec/mixins/seh_spec.rb +89 -0
  131. data/spec/mixins/stack_overflow_spec.rb +87 -0
  132. data/spec/mixins/text_spec.rb +43 -0
  133. data/spec/open_redirect_spec.rb +71 -0
  134. data/spec/params/base_url_spec.rb +71 -0
  135. data/spec/params/bind_host_spec.rb +34 -0
  136. data/spec/params/bind_port_spec.rb +35 -0
  137. data/spec/params/filename_spec.rb +77 -0
  138. data/spec/params/host_spec.rb +34 -0
  139. data/spec/params/port_spec.rb +77 -0
  140. data/spec/rfi_spec.rb +107 -0
  141. data/spec/seh_overflow_spec.rb +18 -0
  142. data/spec/spec_helper.rb +6 -10
  143. data/spec/sqli_spec.rb +306 -0
  144. data/spec/ssti_spec.rb +121 -0
  145. data/spec/stack_overflow_spec.rb +18 -0
  146. data/spec/target_spec.rb +92 -0
  147. data/spec/test_result_spec.rb +32 -0
  148. data/spec/use_after_free_spec.rb +14 -0
  149. data/spec/web_spec.rb +12 -0
  150. data/spec/web_vuln_spec.rb +854 -0
  151. data/spec/xss_spec.rb +69 -0
  152. metadata +361 -324
  153. data/Manifest.txt +0 -196
  154. data/README.txt +0 -274
  155. data/bin/ronin-exploit +0 -12
  156. data/bin/ronin-gen-binary-payload +0 -12
  157. data/bin/ronin-gen-exploit +0 -12
  158. data/bin/ronin-gen-ftp-exploit +0 -12
  159. data/bin/ronin-gen-http-exploit +0 -12
  160. data/bin/ronin-gen-local-exploit +0 -12
  161. data/bin/ronin-gen-nops +0 -12
  162. data/bin/ronin-gen-payload +0 -12
  163. data/bin/ronin-gen-remote-exploit +0 -12
  164. data/bin/ronin-gen-remote-tcp-exploit +0 -12
  165. data/bin/ronin-gen-remote-udp-exploit +0 -12
  166. data/bin/ronin-gen-shellcode +0 -12
  167. data/bin/ronin-gen-web-exploit +0 -12
  168. data/bin/ronin-payload +0 -12
  169. data/bin/ronin-payloads +0 -12
  170. data/lib/ronin/controls/behaviors.rb +0 -133
  171. data/lib/ronin/controls/exceptions/not_implemented.rb +0 -27
  172. data/lib/ronin/controls/exceptions/program_not_found.rb +0 -27
  173. data/lib/ronin/controls/exceptions.rb +0 -23
  174. data/lib/ronin/controls/file_system.rb +0 -145
  175. data/lib/ronin/controls/helpers/command_exec.rb +0 -143
  176. data/lib/ronin/controls/helpers/dir_create.rb +0 -42
  177. data/lib/ronin/controls/helpers/dir_listing.rb +0 -62
  178. data/lib/ronin/controls/helpers/dir_remove.rb +0 -42
  179. data/lib/ronin/controls/helpers/file_ctime.rb +0 -52
  180. data/lib/ronin/controls/helpers/file_mtime.rb +0 -53
  181. data/lib/ronin/controls/helpers/file_ownership.rb +0 -53
  182. data/lib/ronin/controls/helpers/file_read.rb +0 -62
  183. data/lib/ronin/controls/helpers/file_remove.rb +0 -51
  184. data/lib/ronin/controls/helpers/file_write.rb +0 -62
  185. data/lib/ronin/controls/helpers/memory_read.rb +0 -39
  186. data/lib/ronin/controls/helpers/memory_write.rb +0 -39
  187. data/lib/ronin/controls/helpers.rb +0 -33
  188. data/lib/ronin/controls.rb +0 -23
  189. data/lib/ronin/exploits/control.rb +0 -47
  190. data/lib/ronin/exploits/exceptions/exception.rb +0 -27
  191. data/lib/ronin/exploits/exceptions/exploit_not_built.rb +0 -29
  192. data/lib/ronin/exploits/exceptions/payload_size.rb +0 -29
  193. data/lib/ronin/exploits/exceptions/restricted_char.rb +0 -29
  194. data/lib/ronin/exploits/exceptions/target_data_missing.rb +0 -29
  195. data/lib/ronin/exploits/exceptions/target_unspecified.rb +0 -29
  196. data/lib/ronin/exploits/exceptions/unknown_helper.rb +0 -29
  197. data/lib/ronin/exploits/exploit_author.rb +0 -33
  198. data/lib/ronin/exploits/ftp.rb +0 -42
  199. data/lib/ronin/exploits/helpers/binary.rb +0 -50
  200. data/lib/ronin/exploits/helpers/buffer_overflow.rb +0 -115
  201. data/lib/ronin/exploits/helpers/file_based.rb +0 -112
  202. data/lib/ronin/exploits/helpers/format_string.rb +0 -117
  203. data/lib/ronin/exploits/helpers/padding.rb +0 -101
  204. data/lib/ronin/exploits/helpers.rb +0 -26
  205. data/lib/ronin/exploits/http.rb +0 -49
  206. data/lib/ronin/exploits/local.rb +0 -40
  207. data/lib/ronin/exploits/remote.rb +0 -40
  208. data/lib/ronin/exploits/remote_tcp.rb +0 -87
  209. data/lib/ronin/exploits/remote_udp.rb +0 -87
  210. data/lib/ronin/exploits/targets/buffer_overflow.rb +0 -46
  211. data/lib/ronin/exploits/targets/format_string.rb +0 -43
  212. data/lib/ronin/exploits/targets.rb +0 -27
  213. data/lib/ronin/exploits/verifiers.rb +0 -121
  214. data/lib/ronin/generators/exploits/exploit.rb +0 -70
  215. data/lib/ronin/generators/exploits/ftp.rb +0 -42
  216. data/lib/ronin/generators/exploits/http.rb +0 -42
  217. data/lib/ronin/generators/exploits/local.rb +0 -42
  218. data/lib/ronin/generators/exploits/remote.rb +0 -42
  219. data/lib/ronin/generators/exploits/remote_tcp.rb +0 -44
  220. data/lib/ronin/generators/exploits/remote_udp.rb +0 -44
  221. data/lib/ronin/generators/exploits/static.rb +0 -30
  222. data/lib/ronin/generators/exploits/web.rb +0 -45
  223. data/lib/ronin/generators/exploits.rb +0 -23
  224. data/lib/ronin/generators/payloads/binary_payload.rb +0 -42
  225. data/lib/ronin/generators/payloads/nops.rb +0 -42
  226. data/lib/ronin/generators/payloads/payload.rb +0 -66
  227. data/lib/ronin/generators/payloads/shellcode.rb +0 -42
  228. data/lib/ronin/generators/payloads/static.rb +0 -30
  229. data/lib/ronin/generators/payloads.rb +0 -23
  230. data/lib/ronin/model/has_default_port.rb +0 -54
  231. data/lib/ronin/model/targets_arch.rb +0 -68
  232. data/lib/ronin/model/targets_os.rb +0 -69
  233. data/lib/ronin/model/targets_product.rb +0 -68
  234. data/lib/ronin/payloads/asm_payload.rb +0 -40
  235. data/lib/ronin/payloads/binary_payload.rb +0 -42
  236. data/lib/ronin/payloads/control.rb +0 -47
  237. data/lib/ronin/payloads/encoders/encoder.rb +0 -92
  238. data/lib/ronin/payloads/encoders/xor.rb +0 -79
  239. data/lib/ronin/payloads/encoders.rb +0 -32
  240. data/lib/ronin/payloads/exceptions/exception.rb +0 -27
  241. data/lib/ronin/payloads/exceptions/not_implemented.rb +0 -29
  242. data/lib/ronin/payloads/exceptions/unknown_helper.rb +0 -29
  243. data/lib/ronin/payloads/exceptions.rb +0 -23
  244. data/lib/ronin/payloads/has_payload.rb +0 -111
  245. data/lib/ronin/payloads/helpers/chained.rb +0 -61
  246. data/lib/ronin/payloads/helpers/rpc.rb +0 -93
  247. data/lib/ronin/payloads/helpers.rb +0 -23
  248. data/lib/ronin/payloads/nops.rb +0 -39
  249. data/lib/ronin/payloads/payload.rb +0 -350
  250. data/lib/ronin/payloads/payload_author.rb +0 -33
  251. data/lib/ronin/payloads/shellcode.rb +0 -40
  252. data/lib/ronin/payloads/web_payload.rb +0 -41
  253. data/lib/ronin/payloads.rb +0 -36
  254. data/lib/ronin/ui/command_line/commands/exploit.rb +0 -193
  255. data/lib/ronin/ui/command_line/commands/exploits.rb +0 -154
  256. data/lib/ronin/ui/command_line/commands/gen_binary_payload.rb +0 -34
  257. data/lib/ronin/ui/command_line/commands/gen_exploit.rb +0 -34
  258. data/lib/ronin/ui/command_line/commands/gen_ftp_exploit.rb +0 -34
  259. data/lib/ronin/ui/command_line/commands/gen_http_exploit.rb +0 -34
  260. data/lib/ronin/ui/command_line/commands/gen_local_exploit.rb +0 -34
  261. data/lib/ronin/ui/command_line/commands/gen_nops.rb +0 -34
  262. data/lib/ronin/ui/command_line/commands/gen_payload.rb +0 -34
  263. data/lib/ronin/ui/command_line/commands/gen_remote_exploit.rb +0 -34
  264. data/lib/ronin/ui/command_line/commands/gen_remote_tcp_exploit.rb +0 -34
  265. data/lib/ronin/ui/command_line/commands/gen_remote_udp_exploit.rb +0 -34
  266. data/lib/ronin/ui/command_line/commands/gen_shellcode.rb +0 -34
  267. data/lib/ronin/ui/command_line/commands/gen_web_exploit.rb +0 -34
  268. data/lib/ronin/ui/command_line/commands/payload.rb +0 -129
  269. data/lib/ronin/ui/command_line/commands/payloads.rb +0 -128
  270. data/lib/ronin/vuln/behavior.rb +0 -165
  271. data/spec/controls/behaviors_examples.rb +0 -38
  272. data/spec/exploits/binary_exploit_spec.rb +0 -44
  273. data/spec/exploits/buffer_overflow_exploit_spec.rb +0 -70
  274. data/spec/exploits/exploit_spec.rb +0 -313
  275. data/spec/exploits/file_based_exploit_spec.rb +0 -48
  276. data/spec/exploits/format_string_exploit_spec.rb +0 -32
  277. data/spec/exploits/ftp_spec.rb +0 -13
  278. data/spec/exploits/http_spec.rb +0 -17
  279. data/spec/exploits/padding_exploit_spec.rb +0 -44
  280. data/spec/exploits/remote_tcp_spec.rb +0 -28
  281. data/spec/exploits/remote_udp_spec.rb +0 -28
  282. data/spec/exploits/target_spec.rb +0 -98
  283. data/spec/exploits/targets/buffer_overflow_spec.rb +0 -22
  284. data/spec/exploits/web_spec.rb +0 -35
  285. data/spec/generators/exploits/exploit_examples.rb +0 -24
  286. data/spec/generators/exploits/exploit_spec.rb +0 -42
  287. data/spec/generators/exploits/ftp_spec.rb +0 -42
  288. data/spec/generators/exploits/http_spec.rb +0 -42
  289. data/spec/generators/exploits/local_spec.rb +0 -42
  290. data/spec/generators/exploits/remote_spec.rb +0 -42
  291. data/spec/generators/exploits/remote_tcp_spec.rb +0 -47
  292. data/spec/generators/exploits/remote_udp_spec.rb +0 -47
  293. data/spec/generators/exploits/web_spec.rb +0 -52
  294. data/spec/generators/payloads/binary_payload_spec.rb +0 -31
  295. data/spec/generators/payloads/nops_spec.rb +0 -31
  296. data/spec/generators/payloads/payload_examples.rb +0 -16
  297. data/spec/generators/payloads/payload_spec.rb +0 -31
  298. data/spec/generators/payloads/shellcode_spec.rb +0 -31
  299. data/spec/helpers/database.rb +0 -5
  300. data/spec/helpers/objects.rb +0 -22
  301. data/spec/model/has_default_port_spec.rb +0 -27
  302. data/spec/model/models/default_port_model.rb +0 -13
  303. data/spec/model/models/non_default_port_model.rb +0 -11
  304. data/spec/model/models/targets_arch_model.rb +0 -11
  305. data/spec/model/models/targets_os_model.rb +0 -11
  306. data/spec/model/models/targets_product_model.rb +0 -11
  307. data/spec/model/targets_arch_spec.rb +0 -32
  308. data/spec/model/targets_os_spec.rb +0 -33
  309. data/spec/model/targets_product_spec.rb +0 -35
  310. data/spec/objects/exploits/example.rb +0 -25
  311. data/spec/objects/exploits/simple.rb +0 -24
  312. data/spec/objects/payloads/simple.rb +0 -19
  313. data/spec/payloads/encoders/encoder_spec.rb +0 -30
  314. data/spec/payloads/encoders/xor_spec.rb +0 -20
  315. data/spec/payloads/payload_spec.rb +0 -156
  316. data/spec/vuln/behavior_spec.rb +0 -15
  317. data/static/ronin/generators/exploits/_cache.erb +0 -14
  318. data/static/ronin/generators/exploits/_header.erb +0 -1
  319. data/static/ronin/generators/exploits/_helpers.erb +0 -4
  320. data/static/ronin/generators/exploits/exploit.erb +0 -24
  321. data/static/ronin/generators/exploits/ftp.erb +0 -24
  322. data/static/ronin/generators/exploits/http.erb +0 -26
  323. data/static/ronin/generators/exploits/local.erb +0 -24
  324. data/static/ronin/generators/exploits/remote.erb +0 -24
  325. data/static/ronin/generators/exploits/remote_tcp.erb +0 -26
  326. data/static/ronin/generators/exploits/remote_udp.erb +0 -26
  327. data/static/ronin/generators/exploits/web.erb +0 -28
  328. data/static/ronin/generators/payloads/_cache.erb +0 -10
  329. data/static/ronin/generators/payloads/_header.erb +0 -1
  330. data/static/ronin/generators/payloads/_helpers.erb +0 -2
  331. data/static/ronin/generators/payloads/binary_payload.erb +0 -25
  332. data/static/ronin/generators/payloads/nops.erb +0 -19
  333. data/static/ronin/generators/payloads/payload.erb +0 -25
  334. data/static/ronin/generators/payloads/shellcode.erb +0 -25
  335. data/tasks/spec.rb +0 -10
  336. data/tasks/yard.rb +0 -13
  337. data.tar.gz.sig +0 -0
  338. metadata.gz.sig +0 -0
@@ -0,0 +1,102 @@
1
+ #
2
+ # ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
3
+ # payload crafting functionality.
4
+ #
5
+ # Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
6
+ #
7
+ # ronin-exploits is free software: you can redistribute it and/or modify
8
+ # it under the terms of the GNU Lesser General Public License as published
9
+ # by the Free Software Foundation, either version 3 of the License, or
10
+ # (at your option) any later version.
11
+ #
12
+ # ronin-exploits is distributed in the hope that it will be useful,
13
+ # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
+ # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
+ # GNU Lesser General Public License for more details.
16
+ #
17
+ # You should have received a copy of the GNU Lesser General Public License
18
+ # along with ronin-exploits. If not, see <https://www.gnu.org/licenses/>.
19
+ #
20
+
21
+ require 'ronin/exploits/client_side_web_vuln'
22
+ require 'ronin/exploits/mixins/html'
23
+
24
+ require 'ronin/vulns/reflected_xss'
25
+ require 'ronin/payloads/javascript_payload'
26
+ require 'ronin/payloads/builtin/test/xss'
27
+
28
+ module Ronin
29
+ module Exploits
30
+ #
31
+ # Represents a [Cross Site Scripting (XSS)][XSS] exploit.
32
+ #
33
+ # [XSS]: https://owasp.org/www-community/attacks/xss/
34
+ #
35
+ # ## Example
36
+ #
37
+ # require 'ronin/exploits/xss'
38
+ #
39
+ # module Ronin
40
+ # module Exploits
41
+ # class MyExploit < XSS
42
+ #
43
+ # register 'my_exploit'
44
+ #
45
+ # base_path '/path/to/page.php'
46
+ # query_param 'title'
47
+ #
48
+ # end
49
+ # end
50
+ # end
51
+ #
52
+ # @api public
53
+ #
54
+ # @since 1.0.0
55
+ #
56
+ class XSS < ClientSideWebVuln
57
+
58
+ include Mixins::HTML
59
+
60
+ payload_class Payloads::JavaScriptPayload
61
+
62
+ references [
63
+ 'https://owasp.org/www-community/attacks/xss/'
64
+ ]
65
+
66
+ #
67
+ # Initializes the XSS exploit and defaults the {#payload} to a XSS test
68
+ # payload.
69
+ #
70
+ # @param [Ronin::Payloads::JavaScriptPayload, String, nil] payload
71
+ # The payload to use.
72
+ #
73
+ def initialize(payload: Payloads::Test::XSS.new, **kwargs)
74
+ super(payload: payload, **kwargs)
75
+ end
76
+
77
+ #
78
+ # Returns the type or kind of exploit.
79
+ #
80
+ # @return [Symbol]
81
+ #
82
+ # @note
83
+ # This is used internally to map an exploit class to a printable type.
84
+ #
85
+ # @api private
86
+ #
87
+ def self.exploit_type
88
+ :xss
89
+ end
90
+
91
+ #
92
+ # The XSS vulnerability to exploit.
93
+ #
94
+ # @return [Ronin::Vulns::ReflectedXSS]
95
+ #
96
+ def vuln
97
+ @vuln ||= Vulns::ReflectedXSS.new(url,**web_vuln_kwargs)
98
+ end
99
+
100
+ end
101
+ end
102
+ end
@@ -1,40 +1,33 @@
1
1
  #
2
- # Ronin Exploits - A Ruby library for Ronin that provides exploitation and
2
+ # ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
3
3
  # payload crafting functionality.
4
4
  #
5
- # Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
5
+ # Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
6
6
  #
7
- # This program is free software; you can redistribute it and/or modify
8
- # it under the terms of the GNU General Public License as published by
9
- # the Free Software Foundation; either version 2 of the License, or
7
+ # ronin-exploits is free software: you can redistribute it and/or modify
8
+ # it under the terms of the GNU Lesser General Public License as published
9
+ # by the Free Software Foundation, either version 3 of the License, or
10
10
  # (at your option) any later version.
11
11
  #
12
- # This program is distributed in the hope that it will be useful,
12
+ # ronin-exploits is distributed in the hope that it will be useful,
13
13
  # but WITHOUT ANY WARRANTY; without even the implied warranty of
14
14
  # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15
- # GNU General Public License for more details.
15
+ # GNU Lesser General Public License for more details.
16
16
  #
17
- # You should have received a copy of the GNU General Public License
18
- # along with this program; if not, write to the Free Software
19
- # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
17
+ # You should have received a copy of the GNU Lesser General Public License
18
+ # along with ronin-exploits. If not, see <https://www.gnu.org/licenses/>.
20
19
  #
21
20
 
22
- require 'ronin/exploits/targets'
21
+ require 'ronin/exploits/registry'
22
+ require 'ronin/exploits/mixins'
23
23
  require 'ronin/exploits/exploit'
24
- require 'ronin/exploits/local'
25
- require 'ronin/exploits/remote'
26
- require 'ronin/exploits/remote_tcp'
27
- require 'ronin/exploits/remote_udp'
28
- require 'ronin/exploits/ftp'
29
- require 'ronin/exploits/http'
24
+ require 'ronin/exploits/memory_corruption'
25
+ require 'ronin/exploits/stack_overflow'
26
+ require 'ronin/exploits/seh_overflow'
27
+ require 'ronin/exploits/heap_overflow'
28
+ require 'ronin/exploits/use_after_free'
30
29
  require 'ronin/exploits/web'
30
+ require 'ronin/exploits/lfi'
31
+ require 'ronin/exploits/rfi'
32
+ require 'ronin/exploits/sqli'
31
33
  require 'ronin/exploits/version'
32
- require 'ronin/database'
33
-
34
- require 'reverse_require'
35
-
36
- require_for 'ronin-exploits', 'ronin/exploits'
37
-
38
- module Ronin
39
- Database.update!
40
- end
@@ -0,0 +1,31 @@
1
+ .\" Generated by kramdown-man 0.1.8
2
+ .\" https://github.com/postmodern/kramdown-man#readme
3
+ .TH ronin-exploits-irb 1 "May 2022" Ronin "User Manuals"
4
+ .LP
5
+ .SH SYNOPSIS
6
+ .LP
7
+ .HP
8
+ \fBronin-exploits irb\fR \[lB]\fIoptions\fP\[rB]
9
+ .LP
10
+ .SH DESCRIPTION
11
+ .LP
12
+ .PP
13
+ Starts an interactive Ruby shell with \fBronin/exploits\fR loaded\.
14
+ .LP
15
+ .SH OPTIONS
16
+ .LP
17
+ .TP
18
+ \fB-h\fR, \fB--help\fR
19
+ Print help information
20
+ .LP
21
+ .SH AUTHOR
22
+ .LP
23
+ .PP
24
+ Postmodern
25
+ .MT postmodern\.mod3\[at]gmail\.com
26
+ .ME
27
+ .LP
28
+ .SH SEE ALSO
29
+ .LP
30
+ .PP
31
+ ronin\-exploits\-list(1) ronin\-exploits\-show(1) ronin\-exploits\-run(1)
@@ -0,0 +1,22 @@
1
+ # ronin-exploits-irb 1 "May 2022" Ronin "User Manuals"
2
+
3
+ ## SYNOPSIS
4
+
5
+ `ronin-exploits irb` [*options*]
6
+
7
+ ## DESCRIPTION
8
+
9
+ Starts an interactive Ruby shell with `ronin/exploits` loaded.
10
+
11
+ ## OPTIONS
12
+
13
+ `-h`, `--help`
14
+ Print help information
15
+
16
+ ## AUTHOR
17
+
18
+ Postmodern <postmodern.mod3@gmail.com>
19
+
20
+ ## SEE ALSO
21
+
22
+ ronin-exploits-list(1) ronin-exploits-show(1) ronin-exploits-run(1)
@@ -0,0 +1,37 @@
1
+ .\" Generated by kramdown-man 0.1.8
2
+ .\" https://github.com/postmodern/kramdown-man#readme
3
+ .TH ronin-exploits-list 1 "May 2022" Ronin "User Manuals"
4
+ .LP
5
+ .SH SYNOPSIS
6
+ .LP
7
+ .HP
8
+ \fBronin-exploits list\fR \[lB]\fIoptions\fP\[rB] \fIDIR\fP
9
+ .LP
10
+ .SH DESCRIPTION
11
+ .LP
12
+ .PP
13
+ Lists available exploits\.
14
+ .LP
15
+ .SH ARGUMENTS
16
+ .LP
17
+ .TP
18
+ \fIDIR\fP
19
+ The optional directory to list exploits from\.
20
+ .LP
21
+ .SH OPTIONS
22
+ .LP
23
+ .TP
24
+ \fB-h\fR, \fB--help\fR
25
+ Print help information
26
+ .LP
27
+ .SH AUTHOR
28
+ .LP
29
+ .PP
30
+ Postmodern
31
+ .MT postmodern\.mod3\[at]gmail\.com
32
+ .ME
33
+ .LP
34
+ .SH SEE ALSO
35
+ .LP
36
+ .PP
37
+ ronin\-exploits\-show(1) ronin\-exploits\-run(1)
@@ -0,0 +1,27 @@
1
+ # ronin-exploits-list 1 "May 2022" Ronin "User Manuals"
2
+
3
+ ## SYNOPSIS
4
+
5
+ `ronin-exploits list` [*options*] *DIR*
6
+
7
+ ## DESCRIPTION
8
+
9
+ Lists available exploits.
10
+
11
+ ## ARGUMENTS
12
+
13
+ *DIR*
14
+ The optional directory to list exploits from.
15
+
16
+ ## OPTIONS
17
+
18
+ `-h`, `--help`
19
+ Print help information
20
+
21
+ ## AUTHOR
22
+
23
+ Postmodern <postmodern.mod3@gmail.com>
24
+
25
+ ## SEE ALSO
26
+
27
+ ronin-exploits-show(1) ronin-exploits-run(1)
@@ -0,0 +1,98 @@
1
+ .\" Generated by kramdown-man 0.1.8
2
+ .\" https://github.com/postmodern/kramdown-man#readme
3
+ .TH ronin-exploits-new 1 "May 2022" Ronin "User Manuals"
4
+ .LP
5
+ .SH SYNOPSIS
6
+ .LP
7
+ .HP
8
+ \fBronin-exploits new\fR \[lB]\fIoptions\fP\[rB] \fIFILE\fP
9
+ .LP
10
+ .SH DESCRIPTION
11
+ .LP
12
+ .PP
13
+ Creates a new exploit file\.
14
+ .LP
15
+ .SH ARGUMENTS
16
+ .LP
17
+ .TP
18
+ \fIFILE\fP
19
+ The path to the exploit file to generate\.
20
+ .LP
21
+ .SH OPTIONS
22
+ .LP
23
+ .TP
24
+ \fB-t\fR, \fB--type\fR \fBexploit\fR\[or]\fBheap_overflow\fR\[or]\fBstack_overflow\fR\[or]\fBweb\fR\[or]\fBopen_redirect\fR\[or]\fBlfi\fR\[or]\fBrfi\fR\[or]\fBsqli\fR\[or]\fBssti\fR\[or]\fBxss\fR
25
+ The type for the new exploit\.
26
+ .LP
27
+ .TP
28
+ \fB-a\fR, \fB--author\fR \fINAME\fP
29
+ The name of the author\. Defaults to the configured git author name or the
30
+ \fBUSERNAME\fR environment variable\.
31
+ .LP
32
+ .TP
33
+ \fB-e\fR, \fB--author-email\fR \fIEMAIL\fP
34
+ The email address of the author\. Defaults to the configured git author email\.
35
+ .LP
36
+ .TP
37
+ \fB-s\fR, \fB--summary\fR \fITEXT\fP
38
+ One sentence summary for the exploit\.
39
+ .LP
40
+ .TP
41
+ \fB-d\fR, \fB--description\fR \fITEXT\fP
42
+ Longer description for the exploit\.
43
+ .LP
44
+ .TP
45
+ \fB-I\fR, \fB--advisory-id\fR \fIID\fP
46
+ Add the advisory ID to the exploit\.
47
+ .LP
48
+ .TP
49
+ \fB-R\fR, \fB--reference\fR \fIURL\fP
50
+ Adds a reference to the exploit\.
51
+ .LP
52
+ .TP
53
+ \fB-P\fR, \fB--has-payload\fR \fBpayload\fR\[or]\fBasm\fR\[or]\fBshellcode\fR\[or]\fBc\fR\[or]\fBshell\fR\[or]\fBpowershell\fR\[or]\fBhtml\fR\[or]\fBjavascript\fR\[or]\fBtyppescript\fR\[or]\fBjava\fR\[or]\fBsql\fR\[or]\fBphp\fR\[or]\fBnodejs\fR
54
+ The payload type the exploit uses\.
55
+ .LP
56
+ .TP
57
+ \fB-N\fR, \fB--networking\fR \fBremote_tcp\fR\[or]\fBremote_udp\fR\[or]\fBhttp\fR
58
+ The networking mixin to use\.
59
+ .LP
60
+ .TP
61
+ \fB-A\fR, \fB--arch\fR \fBx86\fR\[or]\fBx86-64\fR\[or]\fBamd64\fR\[or]\fBia64\fR\[or]\fBppc\fR\[or]\fBppc64\fR\[or]\fBarm\fR\[or]\fBarmbe\fR\[or]\fBarm64\fR\[or]\fBarm64be\fR\[or]\fBmips\fR\[or]\fBmipsle\fR\[or]\fBmips64\fR\[or]\fBmips64le\fR
62
+ The architecture to target\.
63
+ .LP
64
+ .TP
65
+ \fB-O\fR, \fB--os\fR \fBlinux\fR\[or]\fBmacos\fR\[or]\fBwindows\fR\[or]\fBfreebsd\fR\[or]\fBopenbsd\fR\[or]\fBnetbsd\fR
66
+ The Operating System (OS) to target\.
67
+ .LP
68
+ .TP
69
+ \fB--os-version\fR \fIVERSION\fP
70
+ The OS version to target\.
71
+ .LP
72
+ .TP
73
+ \fB-S\fR, \fB--software\fR \fINAME\fP
74
+ The software to target\.
75
+ .LP
76
+ .TP
77
+ \fB-V\fR, \fB--software-version\fR \fIVERSION\fP
78
+ The software version to target\.
79
+ .LP
80
+ .TP
81
+ \fB-L\fR, \fB--loot\fR
82
+ Adds the loot mixin\.
83
+ .LP
84
+ .TP
85
+ \fB-h\fR, \fB--help\fR
86
+ Print help information
87
+ .LP
88
+ .SH AUTHOR
89
+ .LP
90
+ .PP
91
+ Postmodern
92
+ .MT postmodern\.mod3\[at]gmail\.com
93
+ .ME
94
+ .LP
95
+ .SH SEE ALSO
96
+ .LP
97
+ .PP
98
+ ronin\-exploits\-show(1) ronin\-exploits\-run(1)
@@ -0,0 +1,73 @@
1
+ # ronin-exploits-new 1 "May 2022" Ronin "User Manuals"
2
+
3
+ ## SYNOPSIS
4
+
5
+ `ronin-exploits new` [*options*] *FILE*
6
+
7
+ ## DESCRIPTION
8
+
9
+ Creates a new exploit file.
10
+
11
+ ## ARGUMENTS
12
+
13
+ *FILE*
14
+ The path to the exploit file to generate.
15
+
16
+ ## OPTIONS
17
+
18
+ `-t`, `--type` `exploit`\|`heap_overflow`\|`stack_overflow`\|`web`\|`open_redirect`\|`lfi`\|`rfi`\|`sqli`\|`ssti`\|`xss`
19
+ The type for the new exploit.
20
+
21
+ `-a`, `--author` *NAME*
22
+ The name of the author. Defaults to the configured git author name or the
23
+ `USERNAME` environment variable.
24
+
25
+ `-e`, `--author-email` *EMAIL*
26
+ The email address of the author. Defaults to the configured git author email.
27
+
28
+ `-s`, `--summary` *TEXT*
29
+ One sentence summary for the exploit.
30
+
31
+ `-d`, `--description` *TEXT*
32
+ Longer description for the exploit.
33
+
34
+ `-I`, `--advisory-id` *ID*
35
+ Add the advisory ID to the exploit.
36
+
37
+ `-R`, `--reference` *URL*
38
+ Adds a reference to the exploit.
39
+
40
+ `-P`, `--has-payload` `payload`\|`asm`\|`shellcode`\|`c`\|`shell`\|`powershell`\|`html`\|`javascript`\|`typpescript`\|`java`\|`sql`\|`php`\|`nodejs`
41
+ The payload type the exploit uses.
42
+
43
+ `-N`, `--networking` `remote_tcp`\|`remote_udp`\|`http`
44
+ The networking mixin to use.
45
+
46
+ `-A`, `--arch` `x86`\|`x86-64`\|`amd64`\|`ia64`\|`ppc`\|`ppc64`\|`arm`\|`armbe`\|`arm64`\|`arm64be`\|`mips`\|`mipsle`\|`mips64`\|`mips64le`
47
+ The architecture to target.
48
+
49
+ `-O`, `--os` `linux`\|`macos`\|`windows`\|`freebsd`\|`openbsd`\|`netbsd`
50
+ The Operating System (OS) to target.
51
+
52
+ `--os-version` *VERSION*
53
+ The OS version to target.
54
+
55
+ `-S`, `--software` *NAME*
56
+ The software to target.
57
+
58
+ `-V`, `--software-version` *VERSION*
59
+ The software version to target.
60
+
61
+ `-L`, `--loot`
62
+ Adds the loot mixin.
63
+
64
+ `-h`, `--help`
65
+ Print help information
66
+
67
+ ## AUTHOR
68
+
69
+ Postmodern <postmodern.mod3@gmail.com>
70
+
71
+ ## SEE ALSO
72
+
73
+ ronin-exploits-show(1) ronin-exploits-run(1)
@@ -0,0 +1,117 @@
1
+ .\" Generated by kramdown-man 0.1.8
2
+ .\" https://github.com/postmodern/kramdown-man#readme
3
+ .TH ronin-exploits-run 1 "May 2022" Ronin "User Manuals"
4
+ .LP
5
+ .SH SYNOPSIS
6
+ .LP
7
+ .HP
8
+ \fBronin-exploits run\fR \[lB]\fIoptions\fP\[rB] \[lC]\fINAME\fP \[or] \fB--file\fR \fIFILE\fP\[rC]
9
+ .LP
10
+ .SH DESCRIPTION
11
+ .LP
12
+ .PP
13
+ Loads and runs an exploit\.
14
+ .LP
15
+ .SH ARGUMENTS
16
+ .LP
17
+ .TP
18
+ \fINAME\fP
19
+ The name of the exploit to load\.
20
+ .LP
21
+ .SH OPTIONS
22
+ .LP
23
+ .TP
24
+ \fB-f\fR, \fB--file\fR \fIFILE\fP
25
+ The exploit file to load\.
26
+ .LP
27
+ .TP
28
+ \fB-p\fR, \fB--param\fR \fINAME\fP\[eq]\fIVALUE\fP
29
+ Sets a param for the exploit\.
30
+ .LP
31
+ .TP
32
+ \fB-D\fR, \fB--dry-run\fR
33
+ Builds the exploit but does not launch it\.
34
+ .LP
35
+ .TP
36
+ \fB--payload-file\fR \fIFILE\fP
37
+ Load the payload from the given Ruby file\.
38
+ .LP
39
+ .TP
40
+ \fB--read-payload\fR \fIFILE\fP
41
+ Reads the payload string from the file\.
42
+ .LP
43
+ .TP
44
+ \fB--payload-string\fR \fISTRING\fP
45
+ Uses the raw payload string instead\.
46
+ .LP
47
+ .TP
48
+ \fB-P\fR, \fB--payload\fR \fINAME\fP
49
+ The payload to load and use\.
50
+ .LP
51
+ .TP
52
+ \fB--payload-param\fR \fINAME\fP\[eq]\fIVALUE\fP
53
+ Sets a param in the payload\.
54
+ .LP
55
+ .TP
56
+ \fB--encoder-file\fR \fIFILE\fP
57
+ Load the payload encoder from the Ruby file\.
58
+ .LP
59
+ .TP
60
+ \fB-E\fR, \fB--encoder\fR \fINAME\fP
61
+ Loads the payload encoder by name\.
62
+ .LP
63
+ .TP
64
+ \fB--encoder-param\fR \fIENCODER\fP\.\fINAME\fP\[eq]\fIVALUE\fP
65
+ Sets a param for the ENCODER\.
66
+ .LP
67
+ .TP
68
+ \fB-t\fR, \fB--target\fR \fIINDEX\fP
69
+ Selects the target by index\.
70
+ .LP
71
+ .TP
72
+ \fB-A\fR, \fB--target-arch\fR \fBx86\fR\[or]\fBx86-64\fR\[or]\fBamd64\fR\[or]\fBia64\fR\[or]\fBppc\fR\[or]\fBppc64\fR\[or]\fBarm\fR\[or]\fBarmbe\fR\[or]\fBarm64\fR\[or]\fBarm64be\fR\[or]\fBmips\fR\[or]\fBmipsle\fR\[or]\fBmips64\fR\[or]\fBmips64le\fR
73
+ Selects the target with the matching arch\.
74
+ .LP
75
+ .TP
76
+ \fB-O\fR, \fB--target-os\fR \fBlinux\fR\[or]\fBmacos\fR\[or]\fBwindows\fR\[or]\fBfreebsd\fR\[or]\fBopenbsd\fR\[or]\fBnetbsd\fR
77
+ Selects the target with the matching OS\.
78
+ .LP
79
+ .TP
80
+ \fB--target-os-version\fR \fIVERSION\fP
81
+ Selects the target with the matching OS version\.
82
+ .LP
83
+ .TP
84
+ \fB-S\fR, \fB--target-software\fR \fINAME\fP
85
+ Selects the target with the matching software name\.
86
+ .LP
87
+ .TP
88
+ \fB-V\fR, \fB--target-version\fR \fIVERSION\fP
89
+ Selects the target with the matching software version\.
90
+ .LP
91
+ .TP
92
+ \fB-L\fR, \fB--save-loot\fR \fIDIR\fP
93
+ Saves any found loot to the \fIDIR\fP\.
94
+ .LP
95
+ .TP
96
+ \fB-D\fR, \fB--debug\fR
97
+ Enables debugging messages\.
98
+ .LP
99
+ .TP
100
+ \fB--irb\fR
101
+ Open an interactive Ruby shell inside the exploit\.
102
+ .LP
103
+ .TP
104
+ \fB-h\fR, \fB--help\fR
105
+ Print help information
106
+ .LP
107
+ .SH AUTHOR
108
+ .LP
109
+ .PP
110
+ Postmodern
111
+ .MT postmodern\.mod3\[at]gmail\.com
112
+ .ME
113
+ .LP
114
+ .SH SEE ALSO
115
+ .LP
116
+ .PP
117
+ ronin\-exploits\-list(1) ronin\-exploits\-show(1) ronin\-exploits\-new(1)
@@ -0,0 +1,87 @@
1
+ # ronin-exploits-run 1 "May 2022" Ronin "User Manuals"
2
+
3
+ ## SYNOPSIS
4
+
5
+ `ronin-exploits run` [*options*] {*NAME* \| `--file` *FILE*}
6
+
7
+ ## DESCRIPTION
8
+
9
+ Loads and runs an exploit.
10
+
11
+ ## ARGUMENTS
12
+
13
+ *NAME*
14
+ The name of the exploit to load.
15
+
16
+ ## OPTIONS
17
+
18
+ `-f`, `--file` *FILE*
19
+ The exploit file to load.
20
+
21
+ `-p`, `--param` *NAME*=*VALUE*
22
+ Sets a param for the exploit.
23
+
24
+ `-D`, `--dry-run`
25
+ Builds the exploit but does not launch it.
26
+
27
+ `--payload-file` *FILE*
28
+ Load the payload from the given Ruby file.
29
+
30
+ `--read-payload` *FILE*
31
+ Reads the payload string from the file.
32
+
33
+ `--payload-string` *STRING*
34
+ Uses the raw payload string instead.
35
+
36
+ `-P`, `--payload` *NAME*
37
+ The payload to load and use.
38
+
39
+ `--payload-param` *NAME*=*VALUE*
40
+ Sets a param in the payload.
41
+
42
+ `--encoder-file` *FILE*
43
+ Load the payload encoder from the Ruby file.
44
+
45
+ `-E`, `--encoder` *NAME*
46
+ Loads the payload encoder by name.
47
+
48
+ `--encoder-param` *ENCODER*.*NAME*=*VALUE*
49
+ Sets a param for the ENCODER.
50
+
51
+ `-t`, `--target` *INDEX*
52
+ Selects the target by index.
53
+
54
+ `-A`, `--target-arch` `x86`\|`x86-64`\|`amd64`\|`ia64`\|`ppc`\|`ppc64`\|`arm`\|`armbe`\|`arm64`\|`arm64be`\|`mips`\|`mipsle`\|`mips64`\|`mips64le`
55
+ Selects the target with the matching arch.
56
+
57
+ `-O`, `--target-os` `linux`\|`macos`\|`windows`\|`freebsd`\|`openbsd`\|`netbsd`
58
+ Selects the target with the matching OS.
59
+
60
+ `--target-os-version` *VERSION*
61
+ Selects the target with the matching OS version.
62
+
63
+ `-S`, `--target-software` *NAME*
64
+ Selects the target with the matching software name.
65
+
66
+ `-V`, `--target-version` *VERSION*
67
+ Selects the target with the matching software version.
68
+
69
+ `-L`, `--save-loot` *DIR*
70
+ Saves any found loot to the *DIR*.
71
+
72
+ `-D`, `--debug`
73
+ Enables debugging messages.
74
+
75
+ `--irb`
76
+ Open an interactive Ruby shell inside the exploit.
77
+
78
+ `-h`, `--help`
79
+ Print help information
80
+
81
+ ## AUTHOR
82
+
83
+ Postmodern <postmodern.mod3@gmail.com>
84
+
85
+ ## SEE ALSO
86
+
87
+ ronin-exploits-list(1) ronin-exploits-show(1) ronin-exploits-new(1)
@@ -0,0 +1,45 @@
1
+ .\" Generated by kramdown-man 0.1.8
2
+ .\" https://github.com/postmodern/kramdown-man#readme
3
+ .TH ronin-exploits-show 1 "May 2022" Ronin "User Manuals"
4
+ .LP
5
+ .SH SYNOPSIS
6
+ .LP
7
+ .HP
8
+ \fBronin-exploits show\fR \[lB]\fIoptions\fP\[rB] \[lC]\fINAME\fP \[or] \-\-file \fIFILE\fP\[rC]
9
+ .LP
10
+ .SH DESCRIPTION
11
+ .LP
12
+ .PP
13
+ Prints information about an exploit\.
14
+ .LP
15
+ .SH ARGUMENTS
16
+ .LP
17
+ .TP
18
+ \fINAME\fP
19
+ The name of the exploit to load\.
20
+ .LP
21
+ .SH OPTIONS
22
+ .LP
23
+ .TP
24
+ \fB-v\fR, \fB--verbose\fR
25
+ Prints additional information about the exploit\.
26
+ .LP
27
+ .TP
28
+ \fB-f\fR, \fB--file\fR \fIFILE\fP
29
+ Optionally loads the exploit from the file\.
30
+ .LP
31
+ .TP
32
+ \fB-h\fR, \fB--help\fR
33
+ Print help information
34
+ .LP
35
+ .SH AUTHOR
36
+ .LP
37
+ .PP
38
+ Postmodern
39
+ .MT postmodern\.mod3\[at]gmail\.com
40
+ .ME
41
+ .LP
42
+ .SH SEE ALSO
43
+ .LP
44
+ .PP
45
+ ronin\-exploits\-list(1) ronin\-exploits\-run(1)