ronin-sql 0.2.3 → 0.2.4

data/History.txt

@@ -1,3 +1,14 @@
+=== 0.2.4 / 2009-09-24
+
+* Require ronin >= 0.3.0.
+* Require ronin-web >= 0.2.0.
+* Require rspec >= 1.1.12.
+* Require yard >= 0.2.3.5.
+* Updated the project summary and 3-point description for Ronin SQL.
+* Moved to YARD based documentation.
+* Fixed a formatting issue in the README.txt file, which was causing RDoc
+  to crash.
+
 === 0.2.3 / 2009-07-02
 
 * Use Hoe >= 2.0.0.

data/Manifest.txt

@@ -3,6 +3,7 @@ COPYING.txt
 Manifest.txt
 README.txt
 Rakefile
+bin/ronin-sql
 lib/ronin/code/sql.rb
 lib/ronin/code/sql/exceptions.rb
 lib/ronin/code/sql/exceptions/unknown_dialect.rb
@@ -80,6 +81,7 @@ lib/ronin/sql/injection.rb
 lib/ronin/sql/version.rb
 lib/ronin/sql.rb
 tasks/spec.rb
+tasks/yard.rb
 spec/spec_helper.rb
 spec/sql_spec.rb
 spec/helpers/code.rb

data/README.txt

@@ -2,7 +2,7 @@
 
 * http://ronin.rubyforge.org/sql/
 * http://github.com/postmodern/ronin-sql
-* irc.freenode.net ##ronin
+* irc.freenode.net #ronin
 * Postmodern (postmodern.mod3 at gmail.com)
 
 == DESCRIPTION:
@@ -10,32 +10,30 @@
 Ronin SQL is a Ruby library for Ronin that provids support for SQL related
 security tasks.
 
-Ronin is a Ruby platform designed for information security and data
-exploration tasks. Ronin allows for the rapid development and distribution
-of code over many of the common Source-Code-Management (SCM) systems.
+Ronin is a Ruby platform for exploit development and security research.
+Ronin allows for the rapid development and distribution of code, exploits
+or payloads over many common Source-Code-Management (SCM) systems.
 
-=== Free
+=== Ruby
 
-All source code within Ronin is licensed under the GPL-2, therefore no user
-will ever have to pay for Ronin or updates to Ronin. Not only is the
-source code free, the Ronin project will not sell enterprise grade security
-snake-oil solutions, give private training classes or later turn Ronin into
-commercial software.
+Ronin's Ruby environment allows security researchers to leverage Ruby with
+ease. The Ruby environment contains a multitude of convenience methods
+for working with data in Ruby, a Ruby Object Database, a customized Ruby
+Console and an extendable command-line interface.
 
-=== Modular
+=== Extend
 
-Ronin was not designed as one monolithic framework but instead as a
-collection of libraries which can be individually installed. This allows
-users to pick and choose what functionality they want in Ronin.
+Ronin's more specialized features are provided by additional Ronin
+libraries, which users can choose to install. These libraries can allow
+one to write and run Exploits and Payloads, scan for PHP vulnerabilities,
+perform Google Dorks  or run 3rd party scanners.
 
-=== Decentralized
+=== Publish
 
-Ronin does not have a central repository of exploits and payloads which
-all developers contribute to. Instead Ronin has Overlays, repositories of
-code that can be hosted on any CVS/SVN/Git/Rsync server. Users can then use
-Ronin to quickly install or update Overlays. This allows developers and
-users to form their own communities, independent of the main developers
-of Ronin.
+Ronin allows users to publish and share code, exploits, payloads or other
+data via Overlays. Overlays are directories of code and data that can be
+hosted on any SVN, Hg, Git or Rsync server. Ronin makes it easy to create,
+install or update Overlays.
 
 == FEATURES:
 
@@ -43,35 +41,54 @@ of Ronin.
   SQL injections.
 * Provides tests for finding SQL injections.
 
-== REQUIREMENTS:
+== SYNOPSIS:
 
-* {ronin}[http://ronin.rubyforge.org/] >= 0.1.2
-* {ronin-web}[http://ronin.rubyforge.org/web/] >= 0.1.0
+* Start the Ronin Console with Ronin SQL preloaded:
 
-== INSTALL:
+    $ ronin-sql
 
-  $ sudo gem install --no-rdoc ronin-sql
+== EXAMPLES:
 
-* Due to a bug in RDoc ronin-sql must be installed with RDoc documentation
-  disabled.
+* Generate valid SQL using the Ronin SQL DSL:
 
-== EXAMPLES:
+    Code.sql {
+      select(:from => :users, :where => (name == 'bob'))
+    }.to_s
+    # => "SELECT * FROM users WHERE name = 'bob'"
+
+* Generate valid SQL injections using the Ronin SQL injection DSL:
+
+    Code.sql_injection {
+      escape_string { has_table?(:users) }
+    }.to_s
+    # => "' AND (SELECT count(*) FROM users) = 1 --"
+
+* Test a URL for SQL Injection (SQLi):
+
+    require 'ronin/sql'
 
-* Generate valid SQL using the Ronin SQL DSL.
+    url = URI('http://redteatrosalternativos.com/_05enlaces/links/phpHoo3.php?viewCat=1')
+    url.has_sqli?
+    # => true
 
-  puts Code.sql {
-    select(:from => :users, :where => (name == 'bob'))
-  }
-  SELECT * FROM users WHERE name = 'bob'
-  => nil
+* Get the first viable SQLi vulnerability:
 
-* Generate valid SQL injections using the Ronin SQL injection DSL.
+    url.first_sqli
+    # => #<Ronin::SQL::Injection:0x67d6d38cba60 @http_method=:get, @url=#<URI::HTTP:0x67d6d8697190 URL:http://redteatrosalternativos.com/_05enlaces/links/phpHoo3.php?viewCat=1>, @params={:http_method=>:get}, @sql_options={:escape=>"1"}, @param="viewCat">
+
+* Scan a URL for SQLi vulnerabilities:
+
+    url.sqli_scan
+    # => [#<Ronin::SQL::Injection:0x67d6d38792d8 @http_method=:get, @url=#<URI::HTTP:0x67d6d8697190 URL:http://redteatrosalternativos.com/_05enlaces/links/phpHoo3.php?viewCat=1>, @params={:http_method=>:get}, @sql_options={:escape=>"1"}, @param="viewCat">]
+
+== REQUIREMENTS:
+
+* {ronin}[http://ronin.rubyforge.org/] >= 0.3.0
+* {ronin-web}[http://ronin.rubyforge.org/web/] >= 0.2.0
+
+== INSTALL:
 
-  puts Code.sql_injection {
-    escape_string { has_table?(:users) }
-  }
-  ' AND (SELECT count(*) FROM users) = 1 --
-  => nil
+  $ sudo gem install ronin-sql
 
 == LICENSE:
 

data/Rakefile

@@ -4,15 +4,23 @@ require 'rubygems'
 require 'hoe'
 require 'hoe/signing'
 require './tasks/spec.rb'
+require './tasks/yard.rb'
 
 Hoe.spec('ronin-sql') do
   self.rubyforge_name = 'ronin'
   self.developer('Postmodern','postmodern.mod3@gmail.com')
   self.remote_rdoc_dir = 'docs/ronin-sql'
   self.extra_deps = [
-    ['ronin', '>=0.2.4'],
-    ['ronin-web', '>=0.1.3']
+    ['ronin', '>=0.3.0'],
+    ['ronin-web', '>=0.2.0']
   ]
+
+  self.extra_dev_deps = [
+    ['rspec', '>=1.2.8'],
+    ['yard', '>=0.2.3.5']
+  ]
+
+  self.spec_extras = {:has_rdoc => 'yard'}
 end
 
 # vim: syntax=Ruby

data/bin/ronin-sql

@@ -0,0 +1,14 @@
+#!/usr/bin/env ruby
+
+require 'rubygems'
+
+lib_dir = File.expand_path(File.join(File.dirname(__FILE__),'..','lib'))
+unless $LOAD_PATH.include?(lib_dir)
+  $LOAD_PATH << lib_dir
+end
+
+require 'ronin/ui/command_line/commands/console'
+require 'ronin/ui/console'
+
+Ronin::UI::Console.auto_load << 'ronin/sql'
+Ronin::UI::CommandLine::Commands::Console.start

data/lib/ronin/code/sql/add_column_clause.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/clause'

data/lib/ronin/code/sql/alter_table.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/statement'

data/lib/ronin/code/sql/as.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/modifier'

data/lib/ronin/code/sql/asc.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/modifier'

data/lib/ronin/code/sql/between.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/expr'

data/lib/ronin/code/sql/binary_expr.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/expr'

data/lib/ronin/code/sql/clause.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/emittable'

data/lib/ronin/code/sql/common_dialect.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/dialect'

data/lib/ronin/code/sql/create.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/statement'

data/lib/ronin/code/sql/create_index.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/create'

data/lib/ronin/code/sql/create_table.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/create'

data/lib/ronin/code/sql/create_view.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/create'

data/lib/ronin/code/sql/default_values_clause.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/default_values_clause'

data/lib/ronin/code/sql/delete.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/statement'

data/lib/ronin/code/sql/desc.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/modifier'

data/lib/ronin/code/sql/dialect.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/exceptions/unknown_dialect'

data/lib/ronin/code/sql/drop.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/statement'

data/lib/ronin/code/sql/drop_index.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/drop'

data/lib/ronin/code/sql/drop_table.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/drop'

data/lib/ronin/code/sql/drop_view.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/drop'

data/lib/ronin/code/sql/emittable.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/emittable'

data/lib/ronin/code/sql/exceptions/unknown_clause.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 module Ronin

data/lib/ronin/code/sql/exceptions/unknown_dialect.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 module Ronin

data/lib/ronin/code/sql/exceptions/unknown_statement.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 module Ronin

data/lib/ronin/code/sql/exceptions.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/exceptions/unknown_dialect'

data/lib/ronin/code/sql/expr.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/emittable'

data/lib/ronin/code/sql/field.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/expr'

data/lib/ronin/code/sql/fields_clause.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/clause'

data/lib/ronin/code/sql/from_clause.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/clause'

data/lib/ronin/code/sql/function.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/expr'

data/lib/ronin/code/sql/group_by_clause.rb

@@ -1,5 +1,4 @@
 #
-#--
 # Ronin SQL - A Ronin library providing support for SQL related security
 # tasks.
 #
@@ -18,7 +17,6 @@
 # You should have received a copy of the GNU General Public License
 # along with this program; if not, write to the Free Software
 # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
-#++
 #
 
 require 'ronin/code/sql/clause'