ronin-vulns 0.2.0 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4f85a5bba0bb4a422a95316e0dddb0c7bc6dace635dacdfb70383ac925dbbab5
-  data.tar.gz: 800a23af5c4644241de686603742f4cf83ea6fb470c040b2f19107078c4489bd
+  metadata.gz: 35653f9125d0af1492343dc82a17c6d7e645fa2649b75ee828647ea13e256676
+  data.tar.gz: dbe4ada050f9dbcedea4eb8197a59217affec0276205e49ec5708b4d73865e23
 SHA512:
-  metadata.gz: b297246e840a328cac9da408fc5f9721c0d23b586cda220be8343ee106e52a4f24a04d62ba58796ea2bdbcb3626f6dffaa6b9d38a6b72323eb7423c2efaa3437
-  data.tar.gz: f7f0b65146e05e9480395c6cb0f97affb2bd2f269322a097bece4c66f54c12aa9c3e3662603bed4b5199a2e6e9432b9d016fc6845f5ab6d937a385da40afce33
+  metadata.gz: 8573bc7cbb8f8da72c27d453bdd904457ad0076723700171f89aafa82ad499dd1d0a206426858e148261196e387eb3a8d18395cff9feebd65b0783320b38b760
+  data.tar.gz: e647b631bd189433fe527ac88f8411ed0f1a40690711449ebc8596c3e55a43671a05318f71f1166ed9071a7bfd2243dea2162fba772921b39b3ea0be92ef1da9

data/.github/workflows/ruby.yml

@@ -13,6 +13,7 @@ jobs:
           - '3.1'
           - '3.2'
           - '3.3'
+          - '3.4'
           # - jruby
           - truffleruby
     name: Ruby ${{ matrix.ruby }}

data/ChangeLog.md

@@ -1,3 +1,15 @@
+### 0.2.1 / 2025-02-14
+
+* Added the `base64` gem as a dependency for Bundler and Ruby 3.4.0.
+* Added missing `ronin/vulns` Ruby file.
+* Use `require_relative` to improve load times.
+* Documentation fixes.
+
+#### CLI
+
+* Fixed a bug in the `ronin-vulns irb` command where the `ronin/vulns` Ruby file
+  was missing.
+
 ### 0.2.0 / 2024-07-22
 
 * Require [ronin-db] ~> 0.2

data/README.md

@@ -89,7 +89,7 @@ $ ronin-vulns lfi "http://www.example.com/page.php?lang=en"
 Test a URL for SQL injection (SQLi):
 
 ```shell
-$ ronin-vulns sqli "http://www.example.com/page.php?lang=en"
+$ ronin-vulns sqli "http://testphp.vulnweb.com/listproducts.php?cat=1"
 ```
 
 Test a URL for Server Side Template Injection (SSTI):
@@ -185,17 +185,17 @@ Test a URL for SQL Injection (SQLi):
 ```ruby
 require 'ronin/vulns/sqli'
 
-vuln = Ronin::Vulns::SQLI.test('http://www.example.com/page.php?lang=en')
+vuln = Ronin::Vulns::SQLI.test('http://testphp.vulnweb.com/listproducts.php?cat=1')
 # => #<Ronin::Vulns::SQLI: ...>
 ```
 
 Finds all Server Side Template Injection (SQLI) vulnerabilities for a given URL:
 
 ```ruby
-vulns = Ronin::Vulns::SQLI.scan('http://www.example.com/page.php?lang=en')
+vulns = Ronin::Vulns::SQLI.scan('http://testphp.vulnweb.com/listproducts.php?cat=1')
 # => [#<Ronin::Vulns::SQLI: ...>, ...]
 
-vulns = Ronin::Vulns::SQLI.scan('http://www.example.com/page.php?lang=en') do |vuln|
+vulns = Ronin::Vulns::SQLI.scan('http://testphp.vulnweb.com/listproducts.php?cat=1') do |vuln|
   puts "Found SQLi on #{vuln.url} query param #{vuln.query_param}"
 end
 # => [#<Ronin::Vulns::SQLI: ...>, ...]
@@ -274,6 +274,7 @@ end
 ## Requirements
 
 * [Ruby] >= 3.0.0
+* [base64] ~> 0.1
 * [ronin-support] ~> 1.0
 * [ronin-core] ~> 0.2
 * [ronin-db] ~> 0.2
@@ -309,7 +310,7 @@ gem.add_dependency 'ronin-vulns', '~> 0.1'
 
 ## License
 
-Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 
 ronin-vulns is free software: you can redistribute it and/or modify
 it under the terms of the GNU Lesser General Public License as published
@@ -327,6 +328,7 @@ along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 [Ruby]: https://www.ruby-lang.org
 [ronin-rb]: https://ronin-rb.dev
 
+[base64]: https://github.com/ruby/base64#readme
 [ronin-support]: https://github.com/ronin-rb/ronin-support#readme
 [ronin-core]: https://github.com/ronin-rb/ronin-core#readme
 [ronin-db]: https://github.com/ronin-rb/ronin-db#readme

data/data/completions/ronin-vulns

@@ -28,10 +28,22 @@ _ronin-vulns_completions() {
   local compline="${compwords[*]}"
 
   case "$compline" in
+    'command_injection'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
+      ;;
+
     'command_injection'*'--input')
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
+    'reflected_xss'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
+      ;;
+
+    'open_redirect'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
+      ;;
+
     'reflected_xss'*'--input')
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
@@ -56,23 +68,43 @@ _ronin-vulns_completions() {
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'reflected_xss'*)
-      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--db --db-uri --db-file --import --first -F --all -A --print-curl --print-http --request-method -M --header -H --user-agent-string -U --user-agent -u --cookie -C --cookie-param -c --referer -R --form-param -F --test-query-param --test-all-query-params --test-header-name --test-cookie-param --test-all-cookie-params --test-form-param --test-all-form-params --input -i")" -- "$cur")
+    'scan'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
+      ;;
+
+    'sqli'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
+      ;;
+
+    'ssti'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
       ;;
 
     'open_redirect'*)
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--db --db-uri --db-file --import --first -F --all -A --print-curl --print-http --request-method -M --header -H --user-agent-string -U --user-agent -u --cookie -C --cookie-param -c --referer -R --form-param -F --test-query-param --test-all-query-params --test-header-name --test-cookie-param --test-all-cookie-params --test-form-param --test-all-form-params --input -i --test-url -T")" -- "$cur")
       ;;
 
-    'scan'*'--input')
+    'reflected_xss'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--db --db-uri --db-file --import --first -F --all -A --print-curl --print-http --request-method -M --header -H --user-agent-string -U --user-agent -u --cookie -C --cookie-param -c --referer -R --form-param -F --test-query-param --test-all-query-params --test-header-name --test-cookie-param --test-all-cookie-params --test-form-param --test-all-form-params --input -i")" -- "$cur")
+      ;;
+
+    'lfi'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
+      ;;
+
+    'rfi'*'--db-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -A directory -- "$cur")
+      ;;
+
+    'ssti'*'--input')
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'sqli'*'--input')
+    'scan'*'--input')
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'ssti'*'--input')
+    'sqli'*'--input')
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
@@ -88,11 +120,11 @@ _ronin-vulns_completions() {
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--print --install --uninstall")" -- "$cur")
       ;;
 
-    'sqli'*'-i')
+    'scan'*'-i')
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'scan'*'-i')
+    'sqli'*'-i')
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
@@ -108,14 +140,14 @@ _ronin-vulns_completions() {
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
       ;;
 
-    'scan'*)
-      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--db --db-uri --db-file --import --first -F --all -A --print-curl --print-http --request-method -M --header -H --user-agent-string -U --user-agent -u --cookie -C --cookie-param -c --referer -R --form-param -F --test-query-param --test-all-query-params --test-header-name --test-cookie-param --test-all-cookie-params --test-form-param --test-all-form-params --input -i --lfi-os --lfi-depth --lfi-filter-bypass --rfi-filter-bypass --rfi-script-lang --rfi-test-script-url --sqli-escape-quote --sqli-escape-parens --sqli-terminate --ssti-test-expr --open-redirect-url")" -- "$cur")
-      ;;
-
     'sqli'*)
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--db --db-uri --db-file --import --first -F --all -A --print-curl --print-http --request-method -M --header -H --user-agent-string -U --user-agent -u --cookie -C --cookie-param -c --referer -R --form-param -F --test-query-param --test-all-query-params --test-header-name --test-cookie-param --test-all-cookie-params --test-form-param --test-all-form-params --input -i --escape-quote -Q --escape-parens -P --terminate -T")" -- "$cur")
       ;;
 
+    'scan'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--db --db-uri --db-file --import --first -F --all -A --print-curl --print-http --request-method -M --header -H --user-agent-string -U --user-agent -u --cookie -C --cookie-param -c --referer -R --form-param -F --test-query-param --test-all-query-params --test-header-name --test-cookie-param --test-all-cookie-params --test-form-param --test-all-form-params --input -i --lfi-os --lfi-depth --lfi-filter-bypass --rfi-filter-bypass --rfi-script-lang --rfi-test-script-url --sqli-escape-quote --sqli-escape-parens --sqli-terminate --ssti-test-expr --open-redirect-url")" -- "$cur")
+      ;;
+
     'ssti'*)
       while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-vulns_completions_filter "--db --db-uri --db-file --import --first -F --all -A --print-curl --print-http --request-method -M --header -H --user-agent-string -U --user-agent -u --cookie -C --cookie-param -c --referer -R --form-param -F --test-query-param --test-all-query-params --test-header-name --test-cookie-param --test-all-cookie-params --test-form-param --test-all-form-params --input -i --test-expr -T")" -- "$cur")
       ;;

data/gemspec.yml

@@ -9,7 +9,7 @@ description: |
   Remote File Inclusion (RFI), SQL injection (SQLi), reflective Cross Site
   Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
 
-license: LGPL-3.0
+license: LGPL-3.0-or-later
 authors: Postmodern
 email: postmodern.mod3@gmail.com
 homepage: https://ronin-rb.dev/
@@ -39,6 +39,8 @@ generated_files:
   - man/ronin-vulns-scan.1
 
 dependencies:
+  base64: ~> 0.1
+  # Ronin dependencies:
   ronin-support: ~> 1.0, >= 1.0.1
   ronin-core: ~> 0.2
   ronin-db: ~> 0.2

data/lib/ronin/vulns/cli/command.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,9 +18,10 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/root'
 require 'ronin/core/cli/command'
 
+require_relative '../root'
+
 module Ronin
   module Vulns
     class CLI

data/lib/ronin/vulns/cli/commands/command_injection.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/command_injection'
+require_relative '../web_vuln_command'
+require_relative '../../command_injection'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/completion.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,9 +18,10 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/root'
 require 'ronin/core/cli/completion_command'
 
+require_relative '../../root'
+
 module Ronin
   module Vulns
     class CLI

data/lib/ronin/vulns/cli/commands/irb.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/command'
-require 'ronin/vulns/cli/ruby_shell'
+require_relative '../command'
+require_relative '../ruby_shell'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/lfi.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/lfi'
+require_relative '../web_vuln_command'
+require_relative '../../lfi'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/open_redirect.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/open_redirect'
+require_relative '../web_vuln_command'
+require_relative '../../open_redirect'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/reflected_xss.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/reflected_xss'
+require_relative '../web_vuln_command'
+require_relative '../../reflected_xss'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/rfi.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/rfi'
+require_relative '../web_vuln_command'
+require_relative '../../rfi'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/scan.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/url_scanner'
+require_relative '../web_vuln_command'
+require_relative '../../url_scanner'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/sqli.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/sqli'
+require_relative '../web_vuln_command'
+require_relative '../../sqli'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/commands/ssti.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/web_vuln_command'
-require 'ronin/vulns/ssti'
+require_relative '../web_vuln_command'
+require_relative '../../ssti'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/cli/importable.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,9 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/importer'
-require 'ronin/vulns/cli/printing'
+require_relative 'printing'
+require_relative '../importer'
+
 require 'ronin/db/cli/database_options'
 require 'ronin/db/cli/printing'
 

data/lib/ronin/vulns/cli/printing.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/vulns/cli/ruby_shell.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/vulns/cli/web_vuln_command.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,9 +18,9 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/cli/command'
-require 'ronin/vulns/cli/importable'
-require 'ronin/vulns/cli/printing'
+require_relative 'command'
+require_relative 'importable'
+require_relative 'printing'
 
 require 'ronin/support/network/http/cookie'
 require 'ronin/support/network/http/user_agents'

data/lib/ronin/vulns/cli.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,13 +18,14 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/version'
 require 'ronin/core/cli/help/banner'
 
 require 'command_kit/commands'
 require 'command_kit/commands/auto_load'
 require 'command_kit/options/version'
 
+require_relative 'version'
+
 module Ronin
   module Vulns
     #

data/lib/ronin/vulns/command_injection.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,7 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
+require_relative 'web_vuln'
 
 require 'time'
 
@@ -114,7 +114,7 @@ module Ronin
       # @param [Array<String, nil>, String, nil] escape_operator
       #   The optional escape operator character(s) to test.
       #
-      # @param [Array<String, nil>, Stirng, nil] terminator
+      # @param [Array<String, nil>, String, nil] terminator
       #   The optional command termination character(s) to test.
       #
       # @param [Ronin::Support::Network::HTTP, nil] http

data/lib/ronin/vulns/importer.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/vulns/lfi/test_file.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library to blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,7 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
+require_relative '../web_vuln'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/lfi.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,12 +18,13 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
-require 'ronin/vulns/lfi/test_file'
+require_relative 'web_vuln'
+require_relative 'lfi/test_file'
 
 require 'ronin/support/text/patterns'
 require 'ronin/support/crypto'
 require 'ronin/support/compression'
+
 require 'uri/query_params'
 require 'base64'
 

data/lib/ronin/vulns/open_redirect.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,7 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
+require_relative 'web_vuln'
 
 require 'chars'
 require 'cgi'

data/lib/ronin/vulns/reflected_xss/context.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,7 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
+require_relative '../web_vuln'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/reflected_xss/test_string.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,7 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
+require_relative '../web_vuln'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/reflected_xss.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,9 +18,9 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
-require 'ronin/vulns/reflected_xss/test_string'
-require 'ronin/vulns/reflected_xss/context'
+require_relative 'web_vuln'
+require_relative 'reflected_xss/test_string'
+require_relative 'reflected_xss/context'
 
 require 'set'
 

data/lib/ronin/vulns/rfi.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
-require 'ronin/vulns/version'
+require_relative 'web_vuln'
+require_relative 'version'
 
 require 'ronin/support/network/http'
 require 'uri/query_params'

data/lib/ronin/vulns/root.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/vulns/sqli/error_pattern.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,7 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
+require_relative '../web_vuln'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/sqli.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
-require 'ronin/vulns/sqli/error_pattern'
+require_relative 'web_vuln'
+require_relative 'sqli/error_pattern'
 
 require 'time'
 

data/lib/ronin/vulns/ssti/test_expression.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,7 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
+require_relative '../web_vuln'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/ssti.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,8 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/web_vuln'
-require 'ronin/vulns/ssti/test_expression'
+require_relative 'web_vuln'
+require_relative 'ssti/test_expression'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/url_scanner.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,13 +18,13 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/lfi'
-require 'ronin/vulns/rfi'
-require 'ronin/vulns/sqli'
-require 'ronin/vulns/ssti'
-require 'ronin/vulns/reflected_xss'
-require 'ronin/vulns/open_redirect'
-require 'ronin/vulns/command_injection'
+require_relative 'lfi'
+require_relative 'rfi'
+require_relative 'sqli'
+require_relative 'ssti'
+require_relative 'reflected_xss'
+require_relative 'open_redirect'
+require_relative 'command_injection'
 
 module Ronin
   module Vulns

data/lib/ronin/vulns/version.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -21,6 +21,6 @@
 module Ronin
   module Vulns
     # The ronin-vulns version
-    VERSION = '0.2.0'
+    VERSION = '0.2.1'
   end
 end

data/lib/ronin/vulns/vuln.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published

data/lib/ronin/vulns/web_vuln/http_request.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,7 +18,8 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/vuln'
+require_relative '../vuln'
+
 require 'ronin/support/network/http/cookie'
 require 'ronin/support/network/http/user_agents'
 

data/lib/ronin/vulns/web_vuln.rb

@@ -2,7 +2,7 @@
 #
 # ronin-vulns - A Ruby library for blind vulnerability testing.
 #
-# Copyright (c) 2022-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # ronin-vulns is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -18,10 +18,10 @@
 # along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
 #
 
-require 'ronin/vulns/vuln'
-require 'ronin/vulns/web_vuln/http_request'
-require 'ronin/support/network/http'
+require_relative 'vuln'
+require_relative 'web_vuln/http_request'
 
+require 'ronin/support/network/http'
 require 'chars'
 
 module Ronin

data/lib/ronin/vulns.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+#
+# ronin-vulns - A Ruby library for blind vulnerability testing.
+#
+# Copyright (c) 2022-2025 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# ronin-vulns is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Lesser General Public License as published
+# by the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-vulns is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public License
+# along with ronin-vulns.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+require_relative 'vulns/vuln'
+require_relative 'vulns/web_vuln'
+require_relative 'vulns/lfi'
+require_relative 'vulns/rfi'
+require_relative 'vulns/sqli'
+require_relative 'vulns/ssti'
+require_relative 'vulns/command_injection'
+require_relative 'vulns/open_redirect'
+require_relative 'vulns/reflected_xss'
+require_relative 'vulns/url_scanner'
+require_relative 'vulns/importer'
+require_relative 'vulns/version'

metadata

@@ -1,15 +1,29 @@
 --- !ruby/object:Gem::Specification
 name: ronin-vulns
 version: !ruby/object:Gem::Version
-  version: 0.2.0
+  version: 0.2.1
 platform: ruby
 authors:
 - Postmodern
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-07-22 00:00:00.000000000 Z
+date: 2025-02-15 00:00:00.000000000 Z
 dependencies:
+- !ruby/object:Gem::Dependency
+  name: base64
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '0.1'
 - !ruby/object:Gem::Dependency
   name: ronin-support
   requirement: !ruby/object:Gem::Requirement
@@ -107,6 +121,7 @@ files:
 - data/rfi_test.php
 - data/rfi_test.pl
 - gemspec.yml
+- lib/ronin/vulns.rb
 - lib/ronin/vulns/cli.rb
 - lib/ronin/vulns/cli/command.rb
 - lib/ronin/vulns/cli/commands/command_injection.rb
@@ -168,7 +183,7 @@ files:
 - scripts/setup
 homepage: https://ronin-rb.dev/
 licenses:
-- LGPL-3.0
+- LGPL-3.0-or-later
 metadata:
   documentation_uri: https://ronin-rb.dev/docs/ronin-vulns
   source_code_uri: https://github.com/ronin-rb/ronin-vulns
@@ -190,7 +205,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.11
+rubygems_version: 3.5.22
 signing_key:
 specification_version: 4
 summary: Tests URLs for Local File Inclusion (LFI), Remove File Inclusion (RFI), SQL