ronin-sql 0.2.4 → 1.0.0

data/Manifest.txt

@@ -1,108 +0,0 @@
-History.txt
-COPYING.txt
-Manifest.txt
-README.txt
-Rakefile
-bin/ronin-sql
-lib/ronin/code/sql.rb
-lib/ronin/code/sql/exceptions.rb
-lib/ronin/code/sql/exceptions/unknown_dialect.rb
-lib/ronin/code/sql/exceptions/unknown_statement.rb
-lib/ronin/code/sql/exceptions/unknown_clause.rb
-lib/ronin/code/sql/add_column_clause.rb
-lib/ronin/code/sql/alter_table.rb
-lib/ronin/code/sql/asc.rb
-lib/ronin/code/sql/as.rb
-lib/ronin/code/sql/between.rb
-lib/ronin/code/sql/binary_expr.rb
-lib/ronin/code/sql/clause.rb
-lib/ronin/code/sql/code.rb
-lib/ronin/code/sql/common_dialect.rb
-lib/ronin/code/sql/create_index.rb
-lib/ronin/code/sql/create.rb
-lib/ronin/code/sql/create_table.rb
-lib/ronin/code/sql/create_view.rb
-lib/ronin/code/sql/default_values_clause.rb
-lib/ronin/code/sql/delete.rb
-lib/ronin/code/sql/desc.rb
-lib/ronin/code/sql/dialect.rb
-lib/ronin/code/sql/drop_index.rb
-lib/ronin/code/sql/drop.rb
-lib/ronin/code/sql/drop_table.rb
-lib/ronin/code/sql/drop_view.rb
-lib/ronin/code/sql/emittable.rb
-lib/ronin/code/sql/exceptions.rb
-lib/ronin/code/sql/expr.rb
-lib/ronin/code/sql/field.rb
-lib/ronin/code/sql/fields_clause.rb
-lib/ronin/code/sql/from_clause.rb
-lib/ronin/code/sql/function.rb
-lib/ronin/code/sql/group_by_clause.rb
-lib/ronin/code/sql/having_clause.rb
-lib/ronin/code/sql/injected_statement.rb
-lib/ronin/code/sql/injection.rb
-lib/ronin/code/sql/in.rb
-lib/ronin/code/sql/insert.rb
-lib/ronin/code/sql/intersect_clause.rb
-lib/ronin/code/sql/join_clause.rb
-lib/ronin/code/sql/like.rb
-lib/ronin/code/sql/limit_clause.rb
-lib/ronin/code/sql/modifier.rb
-lib/ronin/code/sql/offset_clause.rb
-lib/ronin/code/sql/on_clause.rb
-lib/ronin/code/sql/order_by_clause.rb
-lib/ronin/code/sql/program.rb
-lib/ronin/code/sql/rename_to_clause.rb
-lib/ronin/code/sql/replace.rb
-lib/ronin/code/sql/select.rb
-lib/ronin/code/sql/set_clause.rb
-lib/ronin/code/sql/statement.rb
-lib/ronin/code/sql/token.rb
-lib/ronin/code/sql/unary_expr.rb
-lib/ronin/code/sql/union_all_clause.rb
-lib/ronin/code/sql/union_clause.rb
-lib/ronin/code/sql/update.rb
-lib/ronin/code/sql/values_clause.rb
-lib/ronin/code/sql/where_clause.rb
-lib/ronin/formatting/sql.rb
-lib/ronin/formatting/extensions/sql.rb
-lib/ronin/formatting/extensions/sql/string.rb
-lib/ronin/sql/extensions.rb
-lib/ronin/sql/extensions/uri.rb
-lib/ronin/sql/extensions/uri/http.rb
-lib/ronin/sql/error.rb
-lib/ronin/sql/error/extensions.rb
-lib/ronin/sql/error/extensions/string.rb
-lib/ronin/sql/error/message.rb
-lib/ronin/sql/error/pattern.rb
-lib/ronin/sql/error/error.rb
-lib/ronin/sql/error/patterns.rb
-lib/ronin/sql/injection.rb
-lib/ronin/sql/version.rb
-lib/ronin/sql.rb
-tasks/spec.rb
-tasks/yard.rb
-spec/spec_helper.rb
-spec/sql_spec.rb
-spec/helpers/code.rb
-spec/code/sql/has_default_values_clause_examples.rb
-spec/code/sql/has_fields_clause_examples.rb
-spec/code/sql/has_from_clause_examples.rb
-spec/code/sql/has_values_clause_examples.rb
-spec/code/sql/has_where_clause_examples.rb
-spec/code/sql/create_examples.rb
-spec/code/sql/create_table_spec.rb
-spec/code/sql/create_index_spec.rb
-spec/code/sql/create_view_spec.rb
-spec/code/sql/drop_examples.rb
-spec/code/sql/drop_table_spec.rb
-spec/code/sql/drop_index_spec.rb
-spec/code/sql/drop_view_spec.rb
-spec/code/sql/insert_spec.rb
-spec/code/sql/select_spec.rb
-spec/code/sql/update_spec.rb
-spec/code/sql/replace_spec.rb
-spec/code/sql/delete_spec.rb
-spec/code/sql/common_dialect_spec.rb
-spec/sql/error_spec.rb
-spec/sql/extensions/uri/http_spec.rb

data/README.txt

@@ -1,112 +0,0 @@
-= Ronin SQL
-
-* http://ronin.rubyforge.org/sql/
-* http://github.com/postmodern/ronin-sql
-* irc.freenode.net #ronin
-* Postmodern (postmodern.mod3 at gmail.com)
-
-== DESCRIPTION:
-
-Ronin SQL is a Ruby library for Ronin that provids support for SQL related
-security tasks.
-
-Ronin is a Ruby platform for exploit development and security research.
-Ronin allows for the rapid development and distribution of code, exploits
-or payloads over many common Source-Code-Management (SCM) systems.
-
-=== Ruby
-
-Ronin's Ruby environment allows security researchers to leverage Ruby with
-ease. The Ruby environment contains a multitude of convenience methods
-for working with data in Ruby, a Ruby Object Database, a customized Ruby
-Console and an extendable command-line interface.
-
-=== Extend
-
-Ronin's more specialized features are provided by additional Ronin
-libraries, which users can choose to install. These libraries can allow
-one to write and run Exploits and Payloads, scan for PHP vulnerabilities,
-perform Google Dorks  or run 3rd party scanners.
-
-=== Publish
-
-Ronin allows users to publish and share code, exploits, payloads or other
-data via Overlays. Overlays are directories of code and data that can be
-hosted on any SVN, Hg, Git or Rsync server. Ronin makes it easy to create,
-install or update Overlays.
-
-== FEATURES:
-
-* Provides an Domain Specific Language (DSL) for crafting normal SQL and
-  SQL injections.
-* Provides tests for finding SQL injections.
-
-== SYNOPSIS:
-
-* Start the Ronin Console with Ronin SQL preloaded:
-
-    $ ronin-sql
-
-== EXAMPLES:
-
-* Generate valid SQL using the Ronin SQL DSL:
-
-    Code.sql {
-      select(:from => :users, :where => (name == 'bob'))
-    }.to_s
-    # => "SELECT * FROM users WHERE name = 'bob'"
-
-* Generate valid SQL injections using the Ronin SQL injection DSL:
-
-    Code.sql_injection {
-      escape_string { has_table?(:users) }
-    }.to_s
-    # => "' AND (SELECT count(*) FROM users) = 1 --"
-
-* Test a URL for SQL Injection (SQLi):
-
-    require 'ronin/sql'
-
-    url = URI('http://redteatrosalternativos.com/_05enlaces/links/phpHoo3.php?viewCat=1')
-    url.has_sqli?
-    # => true
-
-* Get the first viable SQLi vulnerability:
-
-    url.first_sqli
-    # => #<Ronin::SQL::Injection:0x67d6d38cba60 @http_method=:get, @url=#<URI::HTTP:0x67d6d8697190 URL:http://redteatrosalternativos.com/_05enlaces/links/phpHoo3.php?viewCat=1>, @params={:http_method=>:get}, @sql_options={:escape=>"1"}, @param="viewCat">
-
-* Scan a URL for SQLi vulnerabilities:
-
-    url.sqli_scan
-    # => [#<Ronin::SQL::Injection:0x67d6d38792d8 @http_method=:get, @url=#<URI::HTTP:0x67d6d8697190 URL:http://redteatrosalternativos.com/_05enlaces/links/phpHoo3.php?viewCat=1>, @params={:http_method=>:get}, @sql_options={:escape=>"1"}, @param="viewCat">]
-
-== REQUIREMENTS:
-
-* {ronin}[http://ronin.rubyforge.org/] >= 0.3.0
-* {ronin-web}[http://ronin.rubyforge.org/web/] >= 0.2.0
-
-== INSTALL:
-
-  $ sudo gem install ronin-sql
-
-== LICENSE:
-
-Ronin SQL - A Ruby library for Ronin that provids support for SQL related
-security tasks.
-
-Copyright (c) 2006-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-
-This program is free software; you can redistribute it and/or modify
-it under the terms of the GNU General Public License as published by
-the Free Software Foundation; either version 2 of the License, or
-(at your option) any later version.
-
-This program is distributed in the hope that it will be useful,
-but WITHOUT ANY WARRANTY; without even the implied warranty of
-MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-GNU General Public License for more details.
-
-You should have received a copy of the GNU General Public License
-along with this program; if not, write to the Free Software
-Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA

data/lib/ronin/code/sql.rb

@@ -1,22 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/code/sql/code'

data/lib/ronin/code/sql/add_column_clause.rb

@@ -1,42 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/code/sql/clause'
-
-module Ronin
-  module Code
-    module SQL
-      class AddColumnClause < Clause
-
-        attr_accessor :table
-
-        def initialize(table)
-          @table = table
-        end
-
-        def emit
-          emit_token('ADD COLUMN') + emit_value(@table)
-        end
-
-      end
-    end
-  end
-end

data/lib/ronin/code/sql/alter_table.rb

@@ -1,52 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/code/sql/statement'
-require 'ronin/code/sql/rename_to_clause'
-require 'ronin/code/sql/add_column_clause'
-
-module Ronin
-  module Code
-    module SQL
-      class AlterTable < Statement
-
-        clause :rename_to, RenameToClause
-        clause :add_column, AddColumnClause
-
-        def initialize(dialect,table=nil,options={},&block)
-          @table = table
-
-          super(dialect,options,&block)
-        end
-
-        def table(name=nil)
-          @table = name if name
-          return @table
-        end
-
-        def emit
-          emit_token('ALTER TABLE') + emit_value(@table) + super
-        end
-
-      end
-    end
-  end
-end

data/lib/ronin/code/sql/asc.rb

@@ -1,36 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/code/sql/modifier'
-
-module Ronin
-  module Code
-    module SQL
-      class Asc < Modifier
-
-        def initialize(expr)
-          super(expr,'ASC')
-        end
-
-      end
-    end
-  end
-end

data/lib/ronin/code/sql/between.rb

@@ -1,66 +0,0 @@
-#
-# Ronin SQL - A Ronin library providing support for SQL related security
-# tasks.
-#
-# Copyright (c) 2007-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#
-
-require 'ronin/code/sql/expr'
-
-module Ronin
-  module Code
-    module SQL
-      class Between < Expr
-
-        # Expression
-        attr_reader :expr
-
-        # Lower bound
-        attr_reader :lower
-
-        # Higher bound
-        attr_reader :higher
-
-        def initialize(expr,lower,higher)
-          @expr = expr
-          @lower = lower
-          @higher = higher
-          @negated = false
-        end
-
-        def not!
-          @negated = true
-          return self
-        end
-
-        def emit
-          tokens = emit_value(@expr)
-
-          tokens += emit_token('NOT') if @negated
-          tokens += emit_token('BETWEEN')
-
-          tokens += emit_value(@lower)
-          tokens += emit_token('AND')
-          tokens += emit_value(@higher)
-
-          return tokens
-        end
-
-      end
-    end
-  end
-end