ronin-vulns 0.1.0.beta1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (64) hide show
  1. checksums.yaml +7 -0
  2. data/.document +5 -0
  3. data/.github/workflows/ruby.yml +31 -0
  4. data/.gitignore +13 -0
  5. data/.rspec +1 -0
  6. data/.ruby-version +1 -0
  7. data/.yardopts +1 -0
  8. data/COPYING.txt +165 -0
  9. data/ChangeLog.md +22 -0
  10. data/Gemfile +34 -0
  11. data/README.md +328 -0
  12. data/Rakefile +34 -0
  13. data/bin/ronin-vulns +19 -0
  14. data/data/rfi_test.asp +21 -0
  15. data/data/rfi_test.aspx +25 -0
  16. data/data/rfi_test.cfm +27 -0
  17. data/data/rfi_test.jsp +19 -0
  18. data/data/rfi_test.php +24 -0
  19. data/data/rfi_test.pl +25 -0
  20. data/gemspec.yml +41 -0
  21. data/lib/ronin/vulns/cli/command.rb +39 -0
  22. data/lib/ronin/vulns/cli/commands/lfi.rb +145 -0
  23. data/lib/ronin/vulns/cli/commands/open_redirect.rb +119 -0
  24. data/lib/ronin/vulns/cli/commands/reflected_xss.rb +99 -0
  25. data/lib/ronin/vulns/cli/commands/rfi.rb +156 -0
  26. data/lib/ronin/vulns/cli/commands/scan.rb +316 -0
  27. data/lib/ronin/vulns/cli/commands/sqli.rb +133 -0
  28. data/lib/ronin/vulns/cli/commands/ssti.rb +126 -0
  29. data/lib/ronin/vulns/cli/logging.rb +78 -0
  30. data/lib/ronin/vulns/cli/web_vuln_command.rb +347 -0
  31. data/lib/ronin/vulns/cli.rb +45 -0
  32. data/lib/ronin/vulns/lfi/test_file.rb +91 -0
  33. data/lib/ronin/vulns/lfi.rb +266 -0
  34. data/lib/ronin/vulns/open_redirect.rb +118 -0
  35. data/lib/ronin/vulns/reflected_xss/context.rb +224 -0
  36. data/lib/ronin/vulns/reflected_xss/test_string.rb +149 -0
  37. data/lib/ronin/vulns/reflected_xss.rb +184 -0
  38. data/lib/ronin/vulns/rfi.rb +224 -0
  39. data/lib/ronin/vulns/root.rb +28 -0
  40. data/lib/ronin/vulns/sqli/error_pattern.rb +89 -0
  41. data/lib/ronin/vulns/sqli.rb +397 -0
  42. data/lib/ronin/vulns/ssti/test_expression.rb +104 -0
  43. data/lib/ronin/vulns/ssti.rb +203 -0
  44. data/lib/ronin/vulns/url_scanner.rb +218 -0
  45. data/lib/ronin/vulns/version.rb +26 -0
  46. data/lib/ronin/vulns/vuln.rb +49 -0
  47. data/lib/ronin/vulns/web_vuln/http_request.rb +223 -0
  48. data/lib/ronin/vulns/web_vuln.rb +774 -0
  49. data/man/ronin-vulns-lfi.1 +107 -0
  50. data/man/ronin-vulns-lfi.1.md +80 -0
  51. data/man/ronin-vulns-open-redirect.1 +98 -0
  52. data/man/ronin-vulns-open-redirect.1.md +73 -0
  53. data/man/ronin-vulns-reflected-xss.1 +95 -0
  54. data/man/ronin-vulns-reflected-xss.1.md +71 -0
  55. data/man/ronin-vulns-rfi.1 +107 -0
  56. data/man/ronin-vulns-rfi.1.md +80 -0
  57. data/man/ronin-vulns-scan.1 +138 -0
  58. data/man/ronin-vulns-scan.1.md +103 -0
  59. data/man/ronin-vulns-sqli.1 +107 -0
  60. data/man/ronin-vulns-sqli.1.md +80 -0
  61. data/man/ronin-vulns-ssti.1 +99 -0
  62. data/man/ronin-vulns-ssti.1.md +74 -0
  63. data/ronin-vulns.gemspec +60 -0
  64. metadata +161 -0
metadata ADDED
@@ -0,0 +1,161 @@
1
+ --- !ruby/object:Gem::Specification
2
+ name: ronin-vulns
3
+ version: !ruby/object:Gem::Version
4
+ version: 0.1.0.beta1
5
+ platform: ruby
6
+ authors:
7
+ - Postmodern
8
+ autorequire:
9
+ bindir: bin
10
+ cert_chain: []
11
+ date: 2023-01-01 00:00:00.000000000 Z
12
+ dependencies:
13
+ - !ruby/object:Gem::Dependency
14
+ name: ronin-support
15
+ requirement: !ruby/object:Gem::Requirement
16
+ requirements:
17
+ - - "~>"
18
+ - !ruby/object:Gem::Version
19
+ version: 1.0.0.beta1
20
+ type: :runtime
21
+ prerelease: false
22
+ version_requirements: !ruby/object:Gem::Requirement
23
+ requirements:
24
+ - - "~>"
25
+ - !ruby/object:Gem::Version
26
+ version: 1.0.0.beta1
27
+ - !ruby/object:Gem::Dependency
28
+ name: ronin-core
29
+ requirement: !ruby/object:Gem::Requirement
30
+ requirements:
31
+ - - "~>"
32
+ - !ruby/object:Gem::Version
33
+ version: 0.1.0.beta1
34
+ type: :runtime
35
+ prerelease: false
36
+ version_requirements: !ruby/object:Gem::Requirement
37
+ requirements:
38
+ - - "~>"
39
+ - !ruby/object:Gem::Version
40
+ version: 0.1.0.beta1
41
+ - !ruby/object:Gem::Dependency
42
+ name: bundler
43
+ requirement: !ruby/object:Gem::Requirement
44
+ requirements:
45
+ - - "~>"
46
+ - !ruby/object:Gem::Version
47
+ version: '2.0'
48
+ type: :development
49
+ prerelease: false
50
+ version_requirements: !ruby/object:Gem::Requirement
51
+ requirements:
52
+ - - "~>"
53
+ - !ruby/object:Gem::Version
54
+ version: '2.0'
55
+ description: |
56
+ ronin-vulns is a Ruby library for blind vulnerability testing.
57
+ It currently supports testing for Local File Inclusion (LFI),
58
+ Remote File Inclusion (RFI), SQL injection (SQLi), reflective Cross Site
59
+ Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
60
+ email: postmodern.mod3@gmail.com
61
+ executables:
62
+ - ronin-vulns
63
+ extensions: []
64
+ extra_rdoc_files:
65
+ - COPYING.txt
66
+ - ChangeLog.md
67
+ - README.md
68
+ files:
69
+ - ".document"
70
+ - ".github/workflows/ruby.yml"
71
+ - ".gitignore"
72
+ - ".rspec"
73
+ - ".ruby-version"
74
+ - ".yardopts"
75
+ - COPYING.txt
76
+ - ChangeLog.md
77
+ - Gemfile
78
+ - README.md
79
+ - Rakefile
80
+ - bin/ronin-vulns
81
+ - data/rfi_test.asp
82
+ - data/rfi_test.aspx
83
+ - data/rfi_test.cfm
84
+ - data/rfi_test.jsp
85
+ - data/rfi_test.php
86
+ - data/rfi_test.pl
87
+ - gemspec.yml
88
+ - lib/ronin/vulns/cli.rb
89
+ - lib/ronin/vulns/cli/command.rb
90
+ - lib/ronin/vulns/cli/commands/lfi.rb
91
+ - lib/ronin/vulns/cli/commands/open_redirect.rb
92
+ - lib/ronin/vulns/cli/commands/reflected_xss.rb
93
+ - lib/ronin/vulns/cli/commands/rfi.rb
94
+ - lib/ronin/vulns/cli/commands/scan.rb
95
+ - lib/ronin/vulns/cli/commands/sqli.rb
96
+ - lib/ronin/vulns/cli/commands/ssti.rb
97
+ - lib/ronin/vulns/cli/logging.rb
98
+ - lib/ronin/vulns/cli/web_vuln_command.rb
99
+ - lib/ronin/vulns/lfi.rb
100
+ - lib/ronin/vulns/lfi/test_file.rb
101
+ - lib/ronin/vulns/open_redirect.rb
102
+ - lib/ronin/vulns/reflected_xss.rb
103
+ - lib/ronin/vulns/reflected_xss/context.rb
104
+ - lib/ronin/vulns/reflected_xss/test_string.rb
105
+ - lib/ronin/vulns/rfi.rb
106
+ - lib/ronin/vulns/root.rb
107
+ - lib/ronin/vulns/sqli.rb
108
+ - lib/ronin/vulns/sqli/error_pattern.rb
109
+ - lib/ronin/vulns/ssti.rb
110
+ - lib/ronin/vulns/ssti/test_expression.rb
111
+ - lib/ronin/vulns/url_scanner.rb
112
+ - lib/ronin/vulns/version.rb
113
+ - lib/ronin/vulns/vuln.rb
114
+ - lib/ronin/vulns/web_vuln.rb
115
+ - lib/ronin/vulns/web_vuln/http_request.rb
116
+ - man/ronin-vulns-lfi.1
117
+ - man/ronin-vulns-lfi.1.md
118
+ - man/ronin-vulns-open-redirect.1
119
+ - man/ronin-vulns-open-redirect.1.md
120
+ - man/ronin-vulns-reflected-xss.1
121
+ - man/ronin-vulns-reflected-xss.1.md
122
+ - man/ronin-vulns-rfi.1
123
+ - man/ronin-vulns-rfi.1.md
124
+ - man/ronin-vulns-scan.1
125
+ - man/ronin-vulns-scan.1.md
126
+ - man/ronin-vulns-sqli.1
127
+ - man/ronin-vulns-sqli.1.md
128
+ - man/ronin-vulns-ssti.1
129
+ - man/ronin-vulns-ssti.1.md
130
+ - ronin-vulns.gemspec
131
+ homepage: https://ronin-rb.dev/
132
+ licenses:
133
+ - LGPL-3.0
134
+ metadata:
135
+ documentation_uri: https://rubydoc.info/gems/ronin-vulns
136
+ source_code_uri: https://github.com/ronin-rb/ronin-vulns
137
+ bug_tracker_uri: https://github.com/ronin-rb/ronin-vulns/issues
138
+ changelog_uri: https://github.com/ronin-rb/ronin-vulns/blob/master/ChangeLog.md
139
+ rubygems_mfa_required: 'true'
140
+ post_install_message:
141
+ rdoc_options: []
142
+ require_paths:
143
+ - lib
144
+ required_ruby_version: !ruby/object:Gem::Requirement
145
+ requirements:
146
+ - - ">="
147
+ - !ruby/object:Gem::Version
148
+ version: 3.0.0
149
+ required_rubygems_version: !ruby/object:Gem::Requirement
150
+ requirements:
151
+ - - ">="
152
+ - !ruby/object:Gem::Version
153
+ version: '0'
154
+ requirements: []
155
+ rubygems_version: 3.3.26
156
+ signing_key:
157
+ specification_version: 4
158
+ summary: Tests URLs for Local File Inclusion (LFI), Remove File Inclusion (RFI), SQL
159
+ injection (SQLi), Cross Site Scripting (XSS), Server Side Template Injection (SSTI),
160
+ and Open Redirects.
161
+ test_files: []