ronin-sql 0.2.1 → 0.2.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- data/History.txt +7 -0
- data/README.txt +2 -1
- data/Rakefile +4 -1
- data/lib/ronin/sql/injection.rb +20 -18
- data/lib/ronin/sql/version.rb +1 -1
- metadata +14 -4
data/History.txt
CHANGED
@@ -1,3 +1,10 @@
|
|
1
|
+
=== 0.2.2 / 2009-01-22
|
2
|
+
|
3
|
+
* Depend on the new ronin-web library.
|
4
|
+
* Replace Hpricot with Nokogiri.
|
5
|
+
* Use the new Ronin::Web::Spider, instead of directly using Spidr.
|
6
|
+
* Use the new Nokogiri extensions from ronin-web.
|
7
|
+
|
1
8
|
=== 0.2.1 / 2009-01-09
|
2
9
|
|
3
10
|
* Added missing files to the Manifest.
|
data/README.txt
CHANGED
data/Rakefile
CHANGED
@@ -9,7 +9,10 @@ Hoe.new('ronin-sql', Ronin::SQL::VERSION) do |p|
|
|
9
9
|
p.rubyforge_name = 'ronin'
|
10
10
|
p.developer('Postmodern','postmodern.mod3@gmail.com')
|
11
11
|
p.remote_rdoc_dir = 'docs/ronin-sql'
|
12
|
-
p.extra_deps = [
|
12
|
+
p.extra_deps = [
|
13
|
+
['ronin', '>=0.1.4'],
|
14
|
+
['ronin-web', '>=0.1.0']
|
15
|
+
]
|
13
16
|
end
|
14
17
|
|
15
18
|
# vim: syntax=Ruby
|
data/lib/ronin/sql/injection.rb
CHANGED
@@ -25,8 +25,10 @@ require 'ronin/sql/error'
|
|
25
25
|
require 'ronin/code/sql/injection'
|
26
26
|
require 'ronin/sessions/http'
|
27
27
|
require 'ronin/extensions/uri'
|
28
|
-
require 'ronin/web/extensions/
|
29
|
-
require 'ronin/web/
|
28
|
+
require 'ronin/web/extensions/nokogiri'
|
29
|
+
require 'ronin/web/spider'
|
30
|
+
|
31
|
+
require 'nokogiri'
|
30
32
|
|
31
33
|
module Ronin
|
32
34
|
module SQL
|
@@ -77,7 +79,7 @@ module Ronin
|
|
77
79
|
def Injection.spider(url,options={},&block)
|
78
80
|
injections = []
|
79
81
|
|
80
|
-
Web.
|
82
|
+
Web::Spider.site(url,options) do |spider|
|
81
83
|
spider.every_url_like(/\?[a-zA-Z0-9_]/) do |vuln_url|
|
82
84
|
found = vuln_url.sql_injections
|
83
85
|
|
@@ -134,10 +136,10 @@ module Ronin
|
|
134
136
|
return false
|
135
137
|
end
|
136
138
|
|
137
|
-
body1 =
|
138
|
-
body2 =
|
139
|
+
body1 = Nokogiri::HTML(body1)
|
140
|
+
body2 = Nokogiri::HTML(body2)
|
139
141
|
|
140
|
-
return body1 < body2
|
142
|
+
return body1.total_children < body2.total_children
|
141
143
|
end
|
142
144
|
|
143
145
|
def has_column?(column,options={})
|
@@ -150,10 +152,10 @@ module Ronin
|
|
150
152
|
return false
|
151
153
|
end
|
152
154
|
|
153
|
-
body1 =
|
154
|
-
body2 =
|
155
|
+
body1 = Nokogiri::HTML(body1)
|
156
|
+
body2 = Nokogiri::HTML(body2)
|
155
157
|
|
156
|
-
return body1 == body2
|
158
|
+
return body1.total_children == body2.total_children
|
157
159
|
end
|
158
160
|
|
159
161
|
def has_table?(table,options={})
|
@@ -166,10 +168,10 @@ module Ronin
|
|
166
168
|
return false
|
167
169
|
end
|
168
170
|
|
169
|
-
body1 =
|
170
|
-
body2 =
|
171
|
+
body1 = Nokogiri::HTML(body1)
|
172
|
+
body2 = Nokogiri::HTML(body2)
|
171
173
|
|
172
|
-
return body1 == body2
|
174
|
+
return body1.total_children == body2.total_children
|
173
175
|
end
|
174
176
|
|
175
177
|
def uses_column?(column,options={})
|
@@ -182,10 +184,10 @@ module Ronin
|
|
182
184
|
return false
|
183
185
|
end
|
184
186
|
|
185
|
-
body1 =
|
186
|
-
body2 =
|
187
|
+
body1 = Nokogiri::HTML(body1)
|
188
|
+
body2 = Nokogiri::HTML(body2)
|
187
189
|
|
188
|
-
return body1 == body2
|
190
|
+
return body1.total_children == body2.total_children
|
189
191
|
end
|
190
192
|
|
191
193
|
def uses_table?(table,options={})
|
@@ -198,10 +200,10 @@ module Ronin
|
|
198
200
|
return false
|
199
201
|
end
|
200
202
|
|
201
|
-
body1 =
|
202
|
-
body2 =
|
203
|
+
body1 = Nokogiri::HTML(body1)
|
204
|
+
body2 = Nokogiri::HTML(body2)
|
203
205
|
|
204
|
-
return body1 == body2
|
206
|
+
return body1.total_children == body2.total_children
|
205
207
|
end
|
206
208
|
|
207
209
|
def to_s
|
data/lib/ronin/sql/version.rb
CHANGED
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: ronin-sql
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.2.
|
4
|
+
version: 0.2.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Postmodern
|
@@ -9,7 +9,7 @@ autorequire:
|
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
11
|
|
12
|
-
date: 2009-01-
|
12
|
+
date: 2009-01-22 00:00:00 -08:00
|
13
13
|
default_executable:
|
14
14
|
dependencies:
|
15
15
|
- !ruby/object:Gem::Dependency
|
@@ -20,7 +20,17 @@ dependencies:
|
|
20
20
|
requirements:
|
21
21
|
- - ">="
|
22
22
|
- !ruby/object:Gem::Version
|
23
|
-
version: 0.1.
|
23
|
+
version: 0.1.4
|
24
|
+
version:
|
25
|
+
- !ruby/object:Gem::Dependency
|
26
|
+
name: ronin-web
|
27
|
+
type: :runtime
|
28
|
+
version_requirement:
|
29
|
+
version_requirements: !ruby/object:Gem::Requirement
|
30
|
+
requirements:
|
31
|
+
- - ">="
|
32
|
+
- !ruby/object:Gem::Version
|
33
|
+
version: 0.1.0
|
24
34
|
version:
|
25
35
|
- !ruby/object:Gem::Dependency
|
26
36
|
name: hoe
|
@@ -30,7 +40,7 @@ dependencies:
|
|
30
40
|
requirements:
|
31
41
|
- - ">="
|
32
42
|
- !ruby/object:Gem::Version
|
33
|
-
version: 1.8.
|
43
|
+
version: 1.8.3
|
34
44
|
version:
|
35
45
|
description: Ronin SQL is a Ruby library for Ronin that provids support for SQL related security tasks. Ronin is a Ruby platform designed for information security and data exploration tasks. Ronin allows for the rapid development and distribution of code over many of the common Source-Code-Management (SCM) systems.
|
36
46
|
email:
|