ronin-payloads 0.1.6 → 0.2.0.rc1

data/lib/ronin/payloads/mixins/c_compiler.rb

@@ -0,0 +1,250 @@
+# frozen_string_literal: true
+#
+# ronin-payloads - A Ruby micro-framework for writing and running exploit
+# payloads.
+#
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# ronin-payloads is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-payloads is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-payloads.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+module Ronin
+  module Payloads
+    module Mixins
+      #
+      # Mixin for using the C compiler.
+      #
+      # ## Features
+      #
+      # * Supports `gcc` and `clang`.
+      # * Supports automatically switching to a cross compiler to cross compile
+      #   for different architectures and OSes.
+      # * Supports using `mingw32` to cross-compile for Windows.
+      #
+      # @since 0.2.0
+      #
+      module CCompiler
+        #
+        # The default C compiler.
+        #
+        # @return [String, nil]
+        #
+        # @api private
+        #
+        def self.cc
+          ENV['CC']
+        end
+
+        #
+        # Adds the `cc`, `c_compiler`, `arch`, `vendor`, and `os` params
+        # to the payload class that included {Mixins::CCompiler}.
+        #
+        # @param [Class<Payload>] payload_class
+        #   The payload class including {Mixins::CCompiler}.
+        #
+        # @api private
+        #
+        def self.included(payload_class)
+          payload_class.param :cc, default:  -> { cc },
+                                   desc:     'The C compiler command to use'
+
+          payload_class.param :c_compiler, Core::Params::Types::Enum[
+                                             :gcc,
+                                             :clang
+                                           ], default: :gcc,
+                                              desc:    'The C compiler to use'
+
+          payload_class.param :arch, Core::Params::Types::Enum[
+                                       :"x86-64",
+                                       :i686,
+                                       :aarch64,
+                                       :arm,
+                                       :arm64,
+                                       :armbe,
+                                       :armbe64,
+                                       :mips,
+                                       :mips64,
+                                       :ppc,
+                                       :ppc64
+                                     ], desc: 'The target architecture'
+
+          payload_class.param :vendor, Core::Params::Types::Enum[
+                                         :pc,
+                                         :unknown
+                                       ], desc: 'The target vendor'
+
+          payload_class.param :os, Core::Params::Types::Enum[
+                                     :linux,
+                                     :macos,
+                                     :freebsd,
+                                     :windows,
+                                     :"windows-gnu",
+                                     :"windows-msvc"
+                                   ], desc: 'The target OS'
+        end
+
+        #
+        # The target architecture to compile for.
+        #
+        # @return [String]
+        #   The target architecture string.
+        #
+        # @api private
+        #
+        def target_arch
+          if params[:arch]
+            params[:arch].to_s.tr('-','_')
+          end
+        end
+
+        #
+        # The target vendor to compile for.
+        #
+        # @return [String]
+        #   The target vendor string.
+        #
+        # @api private
+        #
+        def target_vendor
+          if params[:os] == :windows
+            'w64'
+          elsif params[:vendor]
+            params[:vendor].to_s
+          end
+        end
+
+        #
+        # The target OS to compile for.
+        #
+        # @return [String]
+        #   The target OS string.
+        #
+        # @api private
+        #
+        def target_os
+          case params[:os]
+          when :linux   then 'linux-gnu'
+          when :windows then 'mingw32'
+          else               params[:os].to_s
+          end
+        end
+
+        #
+        # The target platform to compile for.
+        #
+        # @return [String, nil]
+        #   The target triple string, if the `arch` and `os` params are set.
+        #
+        # @api private
+        #
+        def target_platform
+          arch = target_arch
+          os   = target_os
+
+          if arch && os
+            if (vendor = target_vendor)
+              "#{arch}-#{vendor}-#{os}"
+            else
+              "#{arch}-#{os}"
+            end
+          end
+        end
+
+        #
+        # The C compiler command to use.
+        #
+        # @return [String]
+        #   The command name.
+        #
+        # @api private
+        #
+        def cc
+          params[:cc] || case params[:c_compiler]
+                         when :gcc
+                           if (target = target_platform)
+                             "#{target}-gcc"
+                           else
+                             'gcc'
+                           end
+                         when :clang then 'clang'
+                         else             'cc'
+                         end
+        end
+
+        #
+        # Compiles one or more source files using `cc`.
+        #
+        # @param [Array<String>] source_files
+        #   The source file(s) to compile.
+        #
+        # @param [String] output
+        #   The output file path.
+        #
+        # @param [Array<String>, Hash{Symbol,String => String}, nil] defs
+        #   Additional macro definitions to pass to the compiler.
+        #
+        # @param [Array<String>] libs
+        #   Libraries to link to.
+        #
+        # @raise [ArgumentError]
+        #   `defs` was not an Array or a Hash.
+        #
+        # @raise [BuildFailed]
+        #   The `cc` command failed or is not installed.
+        #
+        def compile_c(*source_files, output: , defs: nil, libs: nil)
+          target = target_platform
+          args   = [cc]
+
+          if target && params[:c_compiler] == :clang
+            args << '-target' << target
+          end
+
+          if defs
+            case defs
+            when Array
+              defs.each do |value|
+                args << "-D#{value}"
+              end
+            when Hash
+              defs.each do |name,value|
+                args << "-D#{name}=#{value}"
+              end
+            else
+              raise(ArgumentError,"defs must be either an Array or a Hash: #{defs.inspect}")
+            end
+          end
+
+          args << '-o' << output
+          args.concat(source_files)
+
+          if libs
+            libs.each do |lib|
+              args << "-l#{lib}"
+            end
+          end
+
+          case system(*args)
+          when false
+            raise(BuildFailed,"cc command failed: #{args.join(' ')}")
+          when nil
+            raise(BuildFailed,"cc command not installed")
+          end
+        end
+
+        alias compile compile_c
+      end
+    end
+  end
+end

data/lib/ronin/payloads/mixins/erb.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/mixins/network.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/mixins/post_ex.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/mixins/resolve_host.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/mixins/reverse_shell.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -43,9 +43,11 @@ module Ronin
         #
         def self.included(payload)
           payload.param :host, String, required: true,
+                                       default:  '0.0.0.0',
                                        desc:     'The host to connect back to'
 
           payload.param :port, Integer, required: true,
+                                        default:  4444,
                                         desc:     'The port to connect back to'
         end
 

data/lib/ronin/payloads/mixins/tempfile.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/mixins/typescript.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -58,7 +58,9 @@ module Ronin
         # @raise [BuildFailed]
         #   The `tsc` command failed or is not installed.
         #
-        def compile(*source_files)
+        # @since 0.2.0
+        #
+        def compile_ts(*source_files)
           args = [params[:tsc]]
           args.concat(source_files)
 
@@ -69,6 +71,8 @@ module Ronin
             raise(BuildFailed,"tsc command not installed")
           end
         end
+
+        alias compile compile_ts
       end
     end
   end

data/lib/ronin/payloads/nashorn_payload.rb

@@ -0,0 +1,51 @@
+# frozen_string_literal: true
+#
+# ronin-payloads - A Ruby micro-framework for writing and running exploit
+# payloads.
+#
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# ronin-payloads is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-payloads is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-payloads.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+require 'ronin/payloads/javascript_payload'
+
+module Ronin
+  module Payloads
+    #
+    # A {Payload} class that represents all [Nashorn] JavaScript payloads.
+    #
+    # [Nashorn]: https://www.oracle.com/technical-resources/articles/java/jf14-nashorn.html
+    #
+    # @since 0.2.0
+    #
+    class NashornPayload < JavaScriptPayload
+
+      #
+      # Returns the type or kind of payload.
+      #
+      # @return [Symbol]
+      #
+      # @note
+      #   This is used internally to map an payload class to a printable type.
+      #
+      # @api private
+      #
+      def self.payload_type
+        :nashorn
+      end
+
+    end
+  end
+end

data/lib/ronin/payloads/node_js_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/php_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/powershell_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/python_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/registry.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/root.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/ruby_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/rust_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -63,7 +63,9 @@ module Ronin
       # @raise [BuildFailed]
       #   The `rustc` command failed or is not installed.
       #
-      def compile(*source_files, output: nil, target: nil, cfg: nil)
+      # @since 0.2.0
+      #
+      def compile_rust(*source_files, output: nil, target: nil, cfg: nil)
         args = ['rustc']
 
         if output
@@ -99,6 +101,8 @@ module Ronin
         end
       end
 
+      alias compile compile_rust
+
     end
   end
 end

data/lib/ronin/payloads/shell_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/shellcode/bind_shell_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/shellcode/exec_shell_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/shellcode/reverse_shell_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/shellcode_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/sql_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/url_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads/version.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -22,6 +22,6 @@
 module Ronin
   module Payloads
     # ronin-payloads version
-    VERSION = '0.1.6'
+    VERSION = '0.2.0.rc1'
   end
 end

data/lib/ronin/payloads/xml_payload.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/payloads.rb

@@ -3,7 +3,7 @@
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
 # payloads.
 #
-# Copyright (c) 2007-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2007-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-payloads is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published