ronin-exploits 1.0.4 → 1.1.0.rc1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/workflows/ruby.yml +1 -0
- data/.gitignore +1 -0
- data/ChangeLog.md +37 -0
- data/Gemfile +6 -4
- data/README.md +32 -6
- data/Rakefile +10 -0
- data/data/completions/ronin-exploits +111 -0
- data/data/completions/ronin-exploits.yml +12 -0
- data/data/new/exploit.rb.erb +5 -3
- data/gemspec.yml +3 -1
- data/lib/ronin/exploits/advisory.rb +1 -1
- data/lib/ronin/exploits/cli/command.rb +1 -1
- data/lib/ronin/exploits/cli/commands/completion.rb +64 -0
- data/lib/ronin/exploits/cli/commands/irb.rb +1 -1
- data/lib/ronin/exploits/cli/commands/list.rb +1 -1
- data/lib/ronin/exploits/cli/commands/new.rb +25 -16
- data/lib/ronin/exploits/cli/commands/run.rb +30 -4
- data/lib/ronin/exploits/cli/commands/show.rb +44 -1
- data/lib/ronin/exploits/cli/exploit_command.rb +1 -1
- data/lib/ronin/exploits/cli/exploit_methods.rb +1 -1
- data/lib/ronin/exploits/cli/ruby_shell.rb +1 -1
- data/lib/ronin/exploits/cli.rb +1 -1
- data/lib/ronin/exploits/client_side_web_vuln.rb +1 -1
- data/lib/ronin/exploits/command_injection.rb +78 -0
- data/lib/ronin/exploits/exceptions.rb +1 -1
- data/lib/ronin/exploits/exploit.rb +4 -3
- data/lib/ronin/exploits/heap_overflow.rb +1 -1
- data/lib/ronin/exploits/lfi.rb +1 -1
- data/lib/ronin/exploits/loot/file.rb +1 -1
- data/lib/ronin/exploits/loot.rb +1 -1
- data/lib/ronin/exploits/memory_corruption.rb +1 -1
- data/lib/ronin/exploits/metadata/arch.rb +1 -1
- data/lib/ronin/exploits/metadata/cookie_param.rb +1 -1
- data/lib/ronin/exploits/metadata/default_filename.rb +1 -1
- data/lib/ronin/exploits/metadata/default_port.rb +1 -1
- data/lib/ronin/exploits/metadata/header_name.rb +1 -1
- data/lib/ronin/exploits/metadata/os.rb +1 -1
- data/lib/ronin/exploits/metadata/shouts.rb +1 -1
- data/lib/ronin/exploits/metadata/url_path.rb +1 -1
- data/lib/ronin/exploits/metadata/url_query_param.rb +1 -1
- data/lib/ronin/exploits/mixins/binary.rb +1 -1
- data/lib/ronin/exploits/mixins/build_dir.rb +1 -1
- data/lib/ronin/exploits/mixins/file_builder.rb +1 -1
- data/lib/ronin/exploits/mixins/format_string.rb +1 -1
- data/lib/ronin/exploits/mixins/has_payload.rb +1 -1
- data/lib/ronin/exploits/mixins/has_targets.rb +1 -1
- data/lib/ronin/exploits/mixins/html.rb +1 -1
- data/lib/ronin/exploits/mixins/http.rb +3 -3
- data/lib/ronin/exploits/mixins/loot.rb +1 -1
- data/lib/ronin/exploits/mixins/nops.rb +1 -1
- data/lib/ronin/exploits/mixins/remote_tcp.rb +1 -1
- data/lib/ronin/exploits/mixins/remote_udp.rb +2 -2
- data/lib/ronin/exploits/mixins/seh.rb +1 -1
- data/lib/ronin/exploits/mixins/stack_overflow.rb +1 -1
- data/lib/ronin/exploits/mixins/text.rb +1 -1
- data/lib/ronin/exploits/mixins.rb +1 -1
- data/lib/ronin/exploits/open_redirect.rb +1 -1
- data/lib/ronin/exploits/params/base_url.rb +1 -1
- data/lib/ronin/exploits/params/bind_host.rb +1 -1
- data/lib/ronin/exploits/params/bind_port.rb +1 -1
- data/lib/ronin/exploits/params/filename.rb +1 -1
- data/lib/ronin/exploits/params/host.rb +1 -1
- data/lib/ronin/exploits/params/port.rb +1 -1
- data/lib/ronin/exploits/registry.rb +1 -1
- data/lib/ronin/exploits/rfi.rb +1 -1
- data/lib/ronin/exploits/root.rb +1 -1
- data/lib/ronin/exploits/seh_overflow.rb +1 -1
- data/lib/ronin/exploits/sqli.rb +1 -1
- data/lib/ronin/exploits/ssti.rb +1 -1
- data/lib/ronin/exploits/stack_overflow.rb +1 -1
- data/lib/ronin/exploits/target.rb +1 -1
- data/lib/ronin/exploits/test_result.rb +1 -1
- data/lib/ronin/exploits/use_after_free.rb +1 -1
- data/lib/ronin/exploits/version.rb +2 -2
- data/lib/ronin/exploits/web.rb +1 -1
- data/lib/ronin/exploits/web_vuln.rb +1 -1
- data/lib/ronin/exploits/xss.rb +1 -1
- data/lib/ronin/exploits.rb +2 -1
- data/man/ronin-exploits-completion.1 +76 -0
- data/man/ronin-exploits-completion.1.md +78 -0
- data/man/ronin-exploits-irb.1 +10 -15
- data/man/ronin-exploits-irb.1.md +6 -2
- data/man/ronin-exploits-list.1 +8 -16
- data/man/ronin-exploits-list.1.md +7 -3
- data/man/ronin-exploits-new.1 +23 -46
- data/man/ronin-exploits-new.1.md +24 -20
- data/man/ronin-exploits-run.1 +32 -56
- data/man/ronin-exploits-run.1.md +31 -24
- data/man/ronin-exploits-show.1 +10 -20
- data/man/ronin-exploits-show.1.md +9 -5
- data/man/ronin-exploits.1 +11 -23
- data/man/ronin-exploits.1.md +11 -7
- data/scripts/setup +58 -0
- metadata +12 -5
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -52,6 +52,7 @@ module Ronin
|
|
52
52
|
# -f, --file FILE The exploit file to load
|
53
53
|
# -p, --param NAME=VALUE Sets a param
|
54
54
|
# -D, --dry-run Builds the exploit but does not launch it
|
55
|
+
# -T --test Runs only the exploit test
|
55
56
|
# --payload-file FILE Load the payload from the given Ruby file
|
56
57
|
# --read-payload FILE Reads the payload string from the file
|
57
58
|
# --payload-string STRING Uses the raw payload string instead
|
@@ -70,7 +71,7 @@ module Ronin
|
|
70
71
|
# -S, --target-software NAME Selects the target with the matching software name
|
71
72
|
# -V, --target-version VERSION Selects the target with the matching software version
|
72
73
|
# -L, --save-loot DIR Saves any found loot to the DIR
|
73
|
-
# -
|
74
|
+
# -d, --debug Enables debugging messages
|
74
75
|
# --irb Open an interactive Ruby shell inside the exploit
|
75
76
|
# -h, --help Print help information
|
76
77
|
#
|
@@ -85,11 +86,15 @@ module Ronin
|
|
85
86
|
include Core::CLI::Options::Param
|
86
87
|
include Core::CLI::Logging
|
87
88
|
include CommandKit::Printing::Indent
|
89
|
+
include Support::CLI::Printing
|
88
90
|
|
89
91
|
# Exploit options
|
90
92
|
option :dry_run, short: '-D',
|
91
93
|
desc: 'Builds the exploit but does not launch it'
|
92
94
|
|
95
|
+
option :test, short: '-T',
|
96
|
+
desc: 'Runs only the exploit test'
|
97
|
+
|
93
98
|
# Payload options
|
94
99
|
option :payload_file, value: {
|
95
100
|
type: String,
|
@@ -211,7 +216,7 @@ module Ronin
|
|
211
216
|
},
|
212
217
|
desc: 'Saves any found loot to the DIR'
|
213
218
|
|
214
|
-
option :debug, short: '-
|
219
|
+
option :debug, short: '-d',
|
215
220
|
desc: 'Enables debugging messages' do
|
216
221
|
Support::CLI::Printing.debug = true
|
217
222
|
end
|
@@ -273,7 +278,12 @@ module Ronin
|
|
273
278
|
validate_payload
|
274
279
|
initialize_exploit
|
275
280
|
validate_exploit
|
276
|
-
|
281
|
+
|
282
|
+
if options[:test]
|
283
|
+
run_test
|
284
|
+
else
|
285
|
+
run_exploit
|
286
|
+
end
|
277
287
|
|
278
288
|
if options[:irb]
|
279
289
|
start_shell
|
@@ -382,6 +392,22 @@ module Ronin
|
|
382
392
|
end
|
383
393
|
end
|
384
394
|
|
395
|
+
#
|
396
|
+
# Run the exploit's test method, and print the result.
|
397
|
+
#
|
398
|
+
def run_test
|
399
|
+
case (result = @exploit.perform_test)
|
400
|
+
when TestResult::Vulnerable
|
401
|
+
print_positive "Vulnerable: #{result}"
|
402
|
+
when TestResult::NotVulnerable
|
403
|
+
print_negative "NotVulnerable: #{result}"
|
404
|
+
when TestResult::Unknown
|
405
|
+
print_warning "Unknown: #{result}"
|
406
|
+
else
|
407
|
+
print_error "Unexpected result: #{result.inspect}"
|
408
|
+
end
|
409
|
+
end
|
410
|
+
|
385
411
|
#
|
386
412
|
# Starts an interactive ruby shell within the exploit object.
|
387
413
|
#
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -110,6 +110,7 @@ module Ronin
|
|
110
110
|
end
|
111
111
|
|
112
112
|
print_params(exploit)
|
113
|
+
print_exploit_usage(exploit)
|
113
114
|
end
|
114
115
|
|
115
116
|
#
|
@@ -286,6 +287,48 @@ module Ronin
|
|
286
287
|
puts
|
287
288
|
end
|
288
289
|
|
290
|
+
#
|
291
|
+
# Prints an example `ronin-exploits run` command for the exploit.
|
292
|
+
#
|
293
|
+
# @param [Class<Exploit>] exploit
|
294
|
+
#
|
295
|
+
# @since 0.2.0
|
296
|
+
#
|
297
|
+
def print_exploit_usage(exploit)
|
298
|
+
puts "Usage:"
|
299
|
+
puts
|
300
|
+
puts " $ #{example_run_command(exploit)}"
|
301
|
+
puts
|
302
|
+
end
|
303
|
+
|
304
|
+
#
|
305
|
+
# Builds an example `ronin-exploits run` command for the exploit.
|
306
|
+
#
|
307
|
+
# @param [Class<Exploit>] exploit
|
308
|
+
#
|
309
|
+
# @return [String]
|
310
|
+
# The example `ronin-exploits run` command.
|
311
|
+
#
|
312
|
+
# @since 0.2.0
|
313
|
+
#
|
314
|
+
def example_run_command(exploit)
|
315
|
+
command = ['ronin-exploits', 'run']
|
316
|
+
|
317
|
+
if options[:file]
|
318
|
+
command << '-f' << options[:file]
|
319
|
+
else
|
320
|
+
command << exploit.id
|
321
|
+
end
|
322
|
+
|
323
|
+
exploit.params.each_value do |param|
|
324
|
+
if param.required? && !param.default
|
325
|
+
command << '-p' << "#{param.name}=#{param_usage(param)}"
|
326
|
+
end
|
327
|
+
end
|
328
|
+
|
329
|
+
return command.join(' ')
|
330
|
+
end
|
331
|
+
|
289
332
|
end
|
290
333
|
end
|
291
334
|
end
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
data/lib/ronin/exploits/cli.rb
CHANGED
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -0,0 +1,78 @@
|
|
1
|
+
# frozen_string_literal: true
|
2
|
+
#
|
3
|
+
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
|
+
# payload crafting functionality.
|
5
|
+
#
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
|
+
#
|
8
|
+
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
|
+
# it under the terms of the GNU Lesser General Public License as published
|
10
|
+
# by the Free Software Foundation, either version 3 of the License, or
|
11
|
+
# (at your option) any later version.
|
12
|
+
#
|
13
|
+
# ronin-exploits is distributed in the hope that it will be useful,
|
14
|
+
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
15
|
+
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
16
|
+
# GNU Lesser General Public License for more details.
|
17
|
+
#
|
18
|
+
# You should have received a copy of the GNU Lesser General Public License
|
19
|
+
# along with ronin-exploits. If not, see <https://www.gnu.org/licenses/>.
|
20
|
+
#
|
21
|
+
|
22
|
+
require 'ronin/exploits/exploit'
|
23
|
+
require 'ronin/exploits/mixins/has_payload'
|
24
|
+
require 'ronin/payloads/command_payload'
|
25
|
+
|
26
|
+
module Ronin
|
27
|
+
module Exploits
|
28
|
+
#
|
29
|
+
# Represents a command injection exploit.
|
30
|
+
#
|
31
|
+
# ## Example
|
32
|
+
#
|
33
|
+
# require 'ronin/exploits/command_injection'
|
34
|
+
# require 'ronin/exploits/mixins/http'
|
35
|
+
#
|
36
|
+
# module Ronin
|
37
|
+
# module Exploits
|
38
|
+
# class MyExploit < CommandInjection
|
39
|
+
#
|
40
|
+
# register 'my_exploit'
|
41
|
+
#
|
42
|
+
# include Mixins::HTTP
|
43
|
+
#
|
44
|
+
# def launch
|
45
|
+
# http_post '/form.php', post_data: {var: "';#{payload}#"}
|
46
|
+
# end
|
47
|
+
#
|
48
|
+
# end
|
49
|
+
# end
|
50
|
+
# end
|
51
|
+
#
|
52
|
+
# @api public
|
53
|
+
#
|
54
|
+
# @since 1.1.0
|
55
|
+
#
|
56
|
+
class CommandInjection < Exploit
|
57
|
+
|
58
|
+
include Mixins::HasPayload
|
59
|
+
|
60
|
+
payload_class Payloads::CommandPayload
|
61
|
+
|
62
|
+
#
|
63
|
+
# Returns the type or kind of exploit.
|
64
|
+
#
|
65
|
+
# @return [Symbol]
|
66
|
+
#
|
67
|
+
# @note
|
68
|
+
# This is used internally to map an exploit class to a printable type.
|
69
|
+
#
|
70
|
+
# @api private
|
71
|
+
#
|
72
|
+
def self.exploit_type
|
73
|
+
:command_injection
|
74
|
+
end
|
75
|
+
|
76
|
+
end
|
77
|
+
end
|
78
|
+
end
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -125,6 +125,7 @@ module Ronin
|
|
125
125
|
#
|
126
126
|
# Defines the quality level of the exploit. Accepted values are:
|
127
127
|
#
|
128
|
+
# * `:untested`
|
128
129
|
# * `:testing`
|
129
130
|
# * `:poc`
|
130
131
|
# * `:weaponized`
|
@@ -289,10 +290,10 @@ module Ronin
|
|
289
290
|
#
|
290
291
|
# Gets or sets the quality of the exploit.
|
291
292
|
#
|
292
|
-
# @param [:testing, :poc, :weaponized, nil] new_quality
|
293
|
+
# @param [:untested, :testing, :poc, :weaponized, nil] new_quality
|
293
294
|
# The optional new quality to set.
|
294
295
|
#
|
295
|
-
# @return [:testing, :poc, :weaponized, nil]
|
296
|
+
# @return [:untested, :testing, :poc, :weaponized, nil]
|
296
297
|
# The exploit's quality.
|
297
298
|
#
|
298
299
|
# @api public
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
data/lib/ronin/exploits/lfi.rb
CHANGED
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
data/lib/ronin/exploits/loot.rb
CHANGED
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -68,7 +68,7 @@ module Ronin
|
|
68
68
|
|
69
69
|
exploit.param :user_agent, Core::Params::Types::Enum.new(HTTP_USER_AGENT_ALIASES), desc: 'The HTTP User-Agent to select'
|
70
70
|
|
71
|
-
exploit.param :
|
71
|
+
exploit.param :user_agent_string, desc: 'The raw HTTP User-Agent string to use'
|
72
72
|
|
73
73
|
exploit.param :http_cookie, desc: 'The raw HTTP Cookie to use'
|
74
74
|
end
|
@@ -126,7 +126,7 @@ module Ronin
|
|
126
126
|
# @api private
|
127
127
|
#
|
128
128
|
def http_user_agent
|
129
|
-
params[:
|
129
|
+
params[:user_agent_string] || params[:user_agent]
|
130
130
|
end
|
131
131
|
|
132
132
|
#
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -69,7 +69,7 @@ module Ronin
|
|
69
69
|
# @param [String, nil] bind_host
|
70
70
|
# The local host to bind to.
|
71
71
|
#
|
72
|
-
# @param
|
72
|
+
# @param [Integer, nil] bind_port
|
73
73
|
# The local port to bind to.
|
74
74
|
#
|
75
75
|
# @param [Hash{Symbol => Object}] kwargs
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|
@@ -3,7 +3,7 @@
|
|
3
3
|
# ronin-exploits - A Ruby library for ronin-rb that provides exploitation and
|
4
4
|
# payload crafting functionality.
|
5
5
|
#
|
6
|
-
# Copyright (c) 2007-
|
6
|
+
# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
|
7
7
|
#
|
8
8
|
# ronin-exploits is free software: you can redistribute it and/or modify
|
9
9
|
# it under the terms of the GNU Lesser General Public License as published
|