ronin-vulns 0.1.0.beta1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (64) hide show
  1. checksums.yaml +7 -0
  2. data/.document +5 -0
  3. data/.github/workflows/ruby.yml +31 -0
  4. data/.gitignore +13 -0
  5. data/.rspec +1 -0
  6. data/.ruby-version +1 -0
  7. data/.yardopts +1 -0
  8. data/COPYING.txt +165 -0
  9. data/ChangeLog.md +22 -0
  10. data/Gemfile +34 -0
  11. data/README.md +328 -0
  12. data/Rakefile +34 -0
  13. data/bin/ronin-vulns +19 -0
  14. data/data/rfi_test.asp +21 -0
  15. data/data/rfi_test.aspx +25 -0
  16. data/data/rfi_test.cfm +27 -0
  17. data/data/rfi_test.jsp +19 -0
  18. data/data/rfi_test.php +24 -0
  19. data/data/rfi_test.pl +25 -0
  20. data/gemspec.yml +41 -0
  21. data/lib/ronin/vulns/cli/command.rb +39 -0
  22. data/lib/ronin/vulns/cli/commands/lfi.rb +145 -0
  23. data/lib/ronin/vulns/cli/commands/open_redirect.rb +119 -0
  24. data/lib/ronin/vulns/cli/commands/reflected_xss.rb +99 -0
  25. data/lib/ronin/vulns/cli/commands/rfi.rb +156 -0
  26. data/lib/ronin/vulns/cli/commands/scan.rb +316 -0
  27. data/lib/ronin/vulns/cli/commands/sqli.rb +133 -0
  28. data/lib/ronin/vulns/cli/commands/ssti.rb +126 -0
  29. data/lib/ronin/vulns/cli/logging.rb +78 -0
  30. data/lib/ronin/vulns/cli/web_vuln_command.rb +347 -0
  31. data/lib/ronin/vulns/cli.rb +45 -0
  32. data/lib/ronin/vulns/lfi/test_file.rb +91 -0
  33. data/lib/ronin/vulns/lfi.rb +266 -0
  34. data/lib/ronin/vulns/open_redirect.rb +118 -0
  35. data/lib/ronin/vulns/reflected_xss/context.rb +224 -0
  36. data/lib/ronin/vulns/reflected_xss/test_string.rb +149 -0
  37. data/lib/ronin/vulns/reflected_xss.rb +184 -0
  38. data/lib/ronin/vulns/rfi.rb +224 -0
  39. data/lib/ronin/vulns/root.rb +28 -0
  40. data/lib/ronin/vulns/sqli/error_pattern.rb +89 -0
  41. data/lib/ronin/vulns/sqli.rb +397 -0
  42. data/lib/ronin/vulns/ssti/test_expression.rb +104 -0
  43. data/lib/ronin/vulns/ssti.rb +203 -0
  44. data/lib/ronin/vulns/url_scanner.rb +218 -0
  45. data/lib/ronin/vulns/version.rb +26 -0
  46. data/lib/ronin/vulns/vuln.rb +49 -0
  47. data/lib/ronin/vulns/web_vuln/http_request.rb +223 -0
  48. data/lib/ronin/vulns/web_vuln.rb +774 -0
  49. data/man/ronin-vulns-lfi.1 +107 -0
  50. data/man/ronin-vulns-lfi.1.md +80 -0
  51. data/man/ronin-vulns-open-redirect.1 +98 -0
  52. data/man/ronin-vulns-open-redirect.1.md +73 -0
  53. data/man/ronin-vulns-reflected-xss.1 +95 -0
  54. data/man/ronin-vulns-reflected-xss.1.md +71 -0
  55. data/man/ronin-vulns-rfi.1 +107 -0
  56. data/man/ronin-vulns-rfi.1.md +80 -0
  57. data/man/ronin-vulns-scan.1 +138 -0
  58. data/man/ronin-vulns-scan.1.md +103 -0
  59. data/man/ronin-vulns-sqli.1 +107 -0
  60. data/man/ronin-vulns-sqli.1.md +80 -0
  61. data/man/ronin-vulns-ssti.1 +99 -0
  62. data/man/ronin-vulns-ssti.1.md +74 -0
  63. data/ronin-vulns.gemspec +60 -0
  64. metadata +161 -0
metadata ADDED
@@ -0,0 +1,161 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: ronin-vulns
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.0.beta1
5
+ platform: ruby
6
+ authors:
7
+ - Postmodern
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2023-01-01 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: ronin-support
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: 1.0.0.beta1
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: 1.0.0.beta1
27
+ - !ruby/object:Gem::Dependency
28
+ name: ronin-core
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - "~>"
32
+ - !ruby/object:Gem::Version
33
+ version: 0.1.0.beta1
34
+ type: :runtime
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - "~>"
39
+ - !ruby/object:Gem::Version
40
+ version: 0.1.0.beta1
41
+ - !ruby/object:Gem::Dependency
42
+ name: bundler
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - "~>"
46
+ - !ruby/object:Gem::Version
47
+ version: '2.0'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - "~>"
53
+ - !ruby/object:Gem::Version
54
+ version: '2.0'
55
+ description: |
56
+ ronin-vulns is a Ruby library for blind vulnerability testing.
57
+ It currently supports testing for Local File Inclusion (LFI),
58
+ Remote File Inclusion (RFI), SQL injection (SQLi), reflective Cross Site
59
+ Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
60
+ email: postmodern.mod3@gmail.com
61
+ executables:
62
+ - ronin-vulns
63
+ extensions: []
64
+ extra_rdoc_files:
65
+ - COPYING.txt
66
+ - ChangeLog.md
67
+ - README.md
68
+ files:
69
+ - ".document"
70
+ - ".github/workflows/ruby.yml"
71
+ - ".gitignore"
72
+ - ".rspec"
73
+ - ".ruby-version"
74
+ - ".yardopts"
75
+ - COPYING.txt
76
+ - ChangeLog.md
77
+ - Gemfile
78
+ - README.md
79
+ - Rakefile
80
+ - bin/ronin-vulns
81
+ - data/rfi_test.asp
82
+ - data/rfi_test.aspx
83
+ - data/rfi_test.cfm
84
+ - data/rfi_test.jsp
85
+ - data/rfi_test.php
86
+ - data/rfi_test.pl
87
+ - gemspec.yml
88
+ - lib/ronin/vulns/cli.rb
89
+ - lib/ronin/vulns/cli/command.rb
90
+ - lib/ronin/vulns/cli/commands/lfi.rb
91
+ - lib/ronin/vulns/cli/commands/open_redirect.rb
92
+ - lib/ronin/vulns/cli/commands/reflected_xss.rb
93
+ - lib/ronin/vulns/cli/commands/rfi.rb
94
+ - lib/ronin/vulns/cli/commands/scan.rb
95
+ - lib/ronin/vulns/cli/commands/sqli.rb
96
+ - lib/ronin/vulns/cli/commands/ssti.rb
97
+ - lib/ronin/vulns/cli/logging.rb
98
+ - lib/ronin/vulns/cli/web_vuln_command.rb
99
+ - lib/ronin/vulns/lfi.rb
100
+ - lib/ronin/vulns/lfi/test_file.rb
101
+ - lib/ronin/vulns/open_redirect.rb
102
+ - lib/ronin/vulns/reflected_xss.rb
103
+ - lib/ronin/vulns/reflected_xss/context.rb
104
+ - lib/ronin/vulns/reflected_xss/test_string.rb
105
+ - lib/ronin/vulns/rfi.rb
106
+ - lib/ronin/vulns/root.rb
107
+ - lib/ronin/vulns/sqli.rb
108
+ - lib/ronin/vulns/sqli/error_pattern.rb
109
+ - lib/ronin/vulns/ssti.rb
110
+ - lib/ronin/vulns/ssti/test_expression.rb
111
+ - lib/ronin/vulns/url_scanner.rb
112
+ - lib/ronin/vulns/version.rb
113
+ - lib/ronin/vulns/vuln.rb
114
+ - lib/ronin/vulns/web_vuln.rb
115
+ - lib/ronin/vulns/web_vuln/http_request.rb
116
+ - man/ronin-vulns-lfi.1
117
+ - man/ronin-vulns-lfi.1.md
118
+ - man/ronin-vulns-open-redirect.1
119
+ - man/ronin-vulns-open-redirect.1.md
120
+ - man/ronin-vulns-reflected-xss.1
121
+ - man/ronin-vulns-reflected-xss.1.md
122
+ - man/ronin-vulns-rfi.1
123
+ - man/ronin-vulns-rfi.1.md
124
+ - man/ronin-vulns-scan.1
125
+ - man/ronin-vulns-scan.1.md
126
+ - man/ronin-vulns-sqli.1
127
+ - man/ronin-vulns-sqli.1.md
128
+ - man/ronin-vulns-ssti.1
129
+ - man/ronin-vulns-ssti.1.md
130
+ - ronin-vulns.gemspec
131
+ homepage: https://ronin-rb.dev/
132
+ licenses:
133
+ - LGPL-3.0
134
+ metadata:
135
+ documentation_uri: https://rubydoc.info/gems/ronin-vulns
136
+ source_code_uri: https://github.com/ronin-rb/ronin-vulns
137
+ bug_tracker_uri: https://github.com/ronin-rb/ronin-vulns/issues
138
+ changelog_uri: https://github.com/ronin-rb/ronin-vulns/blob/master/ChangeLog.md
139
+ rubygems_mfa_required: 'true'
140
+ post_install_message:
141
+ rdoc_options: []
142
+ require_paths:
143
+ - lib
144
+ required_ruby_version: !ruby/object:Gem::Requirement
145
+ requirements:
146
+ - - ">="
147
+ - !ruby/object:Gem::Version
148
+ version: 3.0.0
149
+ required_rubygems_version: !ruby/object:Gem::Requirement
150
+ requirements:
151
+ - - ">="
152
+ - !ruby/object:Gem::Version
153
+ version: '0'
154
+ requirements: []
155
+ rubygems_version: 3.3.26
156
+ signing_key:
157
+ specification_version: 4
158
+ summary: Tests URLs for Local File Inclusion (LFI), Remove File Inclusion (RFI), SQL
159
+ injection (SQLi), Cross Site Scripting (XSS), Server Side Template Injection (SSTI),
160
+ and Open Redirects.
161
+ test_files: []