ronin-web 1.0.2 → 2.0.0

data/data/completions/ronin-web

@@ -0,0 +1,203 @@
+# ronin-web completion                                     -*- shell-script -*-
+
+# This bash completions script was generated by
+# completely (https://github.com/dannyben/completely)
+# Modifying it manually is not recommended
+
+_ronin-web_completions_filter() {
+  local words="$1"
+  local cur=${COMP_WORDS[COMP_CWORD]}
+  local result=()
+
+  if [[ "${cur:0:1}" == "-" ]]; then
+    echo "$words"
+
+  else
+    for word in $words; do
+      [[ "${word:0:1}" != "-" ]] && result+=("$word")
+    done
+
+    echo "${result[*]}"
+
+  fi
+}
+
+_ronin-web_completions() {
+  local cur=${COMP_WORDS[COMP_CWORD]}
+  local compwords=("${COMP_WORDS[@]:1:$COMP_CWORD-1}")
+  local compline="${compwords[*]}"
+
+  case "$compline" in
+    'browser'*'--inject-js-file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
+      ;;
+
+    'screenshot'*'--directory')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A directory -- "$cur")
+      ;;
+
+    'wordlist'*'--ignore-host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'wordlist'*'--visit-host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'reverse-proxy'*'--host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'spider'*'--ignore-host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'spider'*'--git-archive')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A directory -- "$cur")
+      ;;
+
+    'spider'*'--visit-host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'vulns'*'--ignore-host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'vulns'*'--visit-host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'screenshot'*'--file')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
+      ;;
+
+    'spider'*'--archive')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A directory -- "$cur")
+      ;;
+
+    'spider'*'--history')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
+      ;;
+
+    'reverse-proxy'*'-H')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'wordlist'*'--host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'session_cookie'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--verbose -v --format -F")" -- "$cur")
+      ;;
+
+    'spider'*'--host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'server'*'--root')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A directory -- "$cur")
+      ;;
+
+    'server'*'--host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'screenshot'*'-d')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A directory -- "$cur")
+      ;;
+
+    'screenshot'*'-f')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -- "$cur")
+      ;;
+
+    'reverse-proxy'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--host -H --port -p --show-body -b --rewrite-requests --rewrite-responses")" -- "$cur")
+      ;;
+
+    'new nokogiri'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -W "$(_ronin-web_completions_filter "--url -U")" -- "$cur")
+      ;;
+
+    'vulns'*'--host')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'screenshot'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--browser -B --width -W --height -H --file -f --format -F --directory -d --full --css-path -C")" -- "$cur")
+      ;;
+
+    'new spider'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -W "$(_ronin-web_completions_filter "--host --domain --site --every-link --every-url --every-failed-url --every-url-like --all-headers --every-page --every-ok-page --every-redirect-page --every-timedout-page --every-bad-request-page --every-unauthorized-page --every-forbidden-page --every-missing-page --every-internal-server-error-page --every-txt-page --every-html-page --every-xml-page --every-xsl-page --every-javascript-page --every-css-page --every-rss-page --every-atom-page --every-ms-word-page --every-pdf-page --every-zip-page --every-doc --every-html-doc --every-xml-doc --every-xsl-doc --every-rss-doc --every-atom-doc")" -- "$cur")
+      ;;
+
+    'new server'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A file -W "$(_ronin-web_completions_filter "--host -H --port -p")" -- "$cur")
+      ;;
+
+    'completion'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--print --install --uninstall")" -- "$cur")
+      ;;
+
+    'user_agent'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--browser -B --chrome-version --firefox-version --linux-distro -D --arch -A --os -O --os-version")" -- "$cur")
+      ;;
+
+    'server'*'-H')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A hostname -- "$cur")
+      ;;
+
+    'server'*'-r')
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A directory -- "$cur")
+      ;;
+
+    'wordlist'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--host --domain --site --open-timeout --read-timeout --ssl-timeout --continue-timeout --keep-alive-timeout --proxy -P --header -H --host-header --user-agent-string -U --user-agent -u --referer -R --delay -d --limit -l --max-depth -d --enqueue --visited --strip-fragments --strip-query --visit-scheme --visit-schemes-like --ignore-scheme --ignore-schemes-like --visit-host --visit-hosts-like --ignore-host --ignore-hosts-like --visit-port --visit-ports-like --ignore-port --ignore-ports-like --visit-link --visit-links-like --ignore-link --ignore-links-like --visit-ext --visit-exts-like --ignore-ext --ignore-exts-like --robots -r --output -o --content-xpath -X --content-css-path -C --meta-tags --no-meta-tags --comments --no-comments --alt-tags --no-alt-tags --paths --query-params-names --query-param-values --only-paths --only-query-param --only-query-param-values --format -f --append -A --lang -L --stop-word --ignore-word --digits --no-digits --special-char --numbers --no-numbers --acronyms --no-acronyms --normalize-case --no-normalize-case --normalize-apostrophes --no-normalize-apostrophes --normalize-acronyms --no-normalize-acronyms")" -- "$cur")
+      ;;
+
+    'browser'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--browser -B --width -W --height -H --headless --visible --x -x --y -y --inject-js --inject-js-file --bypass-csp --print-urls --print-status --print-requests --print-responses --print-traffic --print-headers --print-cookies --print-body --shell --js-shell")" -- "$cur")
+      ;;
+
+    'new app'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -A directory -W "$(_ronin-web_completions_filter "--port --ruby-version --git --dockerfile -D")" -- "$cur")
+      ;;
+
+    'spider'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--host --domain --site --open-timeout --read-timeout --ssl-timeout --continue-timeout --keep-alive-timeout --proxy -P --header -H --host-header --user-agent-string -U --user-agent -u --referer -R --delay -d --limit -l --max-depth -d --enqueue --visited --strip-fragments --strip-query --visit-scheme --visit-schemes-like --ignore-scheme --ignore-schemes-like --visit-host --visit-hosts-like --ignore-host --ignore-hosts-like --visit-port --visit-ports-like --ignore-port --ignore-ports-like --visit-link --visit-links-like --ignore-link --ignore-links-like --visit-ext --visit-exts-like --ignore-ext --ignore-exts-like --robots -r --verbose -v --print-stauts --print-headers --print-header --history --archive --git-archive --xpath -X --css-path -C --print-hosts --print-certs --save-certs --print-js-strings --print-js-url-strings --print-js-path-strings --print-js-absolute-path-strings --print-js-relative-path-strings --print-html-comments --print-js-comments --print-comments")" -- "$cur")
+      ;;
+
+    'server'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--host -H --port -p --basic-auth -A --dir -d --file -f --root -r --redirect -R")" -- "$cur")
+      ;;
+
+    'vulns'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--host --domain --site --open-timeout --read-timeout --ssl-timeout --continue-timeout --keep-alive-timeout --proxy -P --header -H --host-header --user-agent-string -U --user-agent -u --referer -R --delay -d --limit -l --max-depth -d --enqueue --visited --strip-fragments --strip-query --visit-scheme --visit-schemes-like --ignore-scheme --ignore-schemes-like --visit-host --visit-hosts-like --ignore-host --ignore-hosts-like --visit-port --visit-ports-like --ignore-port --ignore-ports-like --visit-link --visit-links-like --ignore-link --ignore-links-like --visit-ext --visit-exts-like --ignore-ext --ignore-exts-like --robots -r --db --db-uri --db-file --first -F --all -A --print-curl --print-http --import --lfi-os --lfi-depth --lfi-filter-bypass --rfi-filter-bypass --rfi-script-lang --rfi-test-script-url --sqli-escape-quote --sqli-escape-parens --sqli-terminate --ssti-test-expr --open-redirect-url")" -- "$cur")
+      ;;
+
+    'diff'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--format -f")" -- "$cur")
+      ;;
+
+    'html'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--xpath -X --first -F --text -t --css-path -C --meta-tags -M --links -l --style -S --stylesheet-urls -s --javascript -J --javascript-urls -j --form-urls -f --urls -u")" -- "$cur")
+      ;;
+
+    'xml'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--xpath -X --first -F --text -t")" -- "$cur")
+      ;;
+
+    'new'*)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "help app nokogiri server spider")" -- "$cur")
+      ;;
+
+    *)
+      while read -r; do COMPREPLY+=("$REPLY"); done < <(compgen -W "$(_ronin-web_completions_filter "--version -V help browser completion diff html irb new reverse-proxy screenshot server session-cookie spider user-agent vulns wordlist xml")" -- "$cur")
+      ;;
+
+  esac
+} &&
+  complete -F _ronin-web_completions ronin-web
+
+# ex: filetype=sh

data/gemspec.yml

@@ -20,7 +20,10 @@ metadata:
   rubygems_mfa_required: 'true'
 
 generated_files:
+  - data/completions/ronin-web
   - man/ronin-web.1
+  - man/ronin-web-browser.1
+  - man/ronin-web-completion.1
   - man/ronin-web-diff.1
   - man/ronin-web-html.1
   - man/ronin-web-irb.1
@@ -29,22 +32,32 @@ generated_files:
   - man/ronin-web-new-server.1
   - man/ronin-web-new-spider.1
   - man/ronin-web-new-webapp.1
+  - man/ronin-web-screenshot.1
   - man/ronin-web-server.1
   - man/ronin-web-spider.1
   - man/ronin-web-reverse-proxy.1
+  - man/ronin-web-session-cookie.1
+  - man/ronin-web-user-agent.1
+  - man/ronin-web-vulns.1
+  - man/ronin-web-wordlist.1
+  - man/ronin-web-xml.1
 
 dependencies:
   nokogiri: ~> 1.4
-  nokogiri-ext: ~> 0.1
   nokogiri-diff: ~> 0.2
-  mechanize: ~> 2.0
+  robots: ~> 0.10
   open_namespace: ~> 0.4
+  wordlist: ~> 1.0, >= 1.0.1
   # Ronin dependencies:
-  ronin-support: ~> 1.0
+  ronin-support: ~> 1.1
+  ronin-support-web: ~> 0.1
+  ronin-web-browser: ~> 0.1
   ronin-web-server: ~> 0.1, >= 0.1.1
-  ronin-web-spider: ~> 0.1
+  ronin-web-spider: ~> 0.2
   ronin-web-user_agents: ~> 0.1
-  ronin-core: ~> 0.1
+  ronin-web-session_cookie: ~> 0.1
+  ronin-core: ~> 0.2
+  ronin-vulns: ~> 0.2
 
 development_dependencies:
   bundler: ~> 2.0

data/lib/ronin/web/cli/browser_options.rb

@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+#
+# ronin-web - A collection of useful web helper methods and commands.
+#
+# Copyright (c) 2006-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# ronin-web is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# ronin-web is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with ronin-web.  If not, see <https://www.gnu.org/licenses/>.
+#
+
+require 'ronin/web/browser'
+
+module Ronin
+  module Web
+    class CLI
+      #
+      # Adds options for opening a browser.
+      #
+      # @since 2.0.0
+      #
+      module BrowserOptions
+        #
+        # Adds the browser options to the command including {BrowserOptions}.
+        #
+        # @param [Class<Command>] command
+        #   The command including {BrowserOptions}.
+        #
+        def self.included(command)
+          command.option :browser, short: '-B',
+                                   value: {
+                                     type: String,
+                                     usage: 'NAME|PATH'
+                                   },
+                                   desc: 'The browser name or path to execute'
+
+          command.option :width, short: '-W',
+                                 value: {
+                                   type:    Integer,
+                                   default: 1024,
+                                   usage:   'WIDTH'
+                                 },
+                                 desc: 'Sets the width of the browser viewport'
+
+          command.option :height, short: '-H',
+                                  value: {
+                                    type:    Integer,
+                                    default: 768,
+                                    usage:   'HEIGHT'
+                                  },
+                                  desc: 'Sets the height of the browser viewport'
+        end
+
+        #
+        # The browser agent.
+        #
+        # @return [Ronin::Web::Browser::Agent]
+        #
+        def browser
+          @browser ||= Web::Browser.new(**browser_kwargs)
+        end
+
+        #
+        # Keyword arguments for `Ronin::Web::Browser.new`.
+        #
+        # @return [Hash{Symbol => Object}]
+        #   The keyword arguments.
+        #
+        def browser_kwargs
+          kwargs = {
+            window_size: [options[:width], options[:height]]
+          }
+
+          if options[:browser]
+            kwargs[:browser_path] = options[:browser]
+          end
+
+          return kwargs
+        end
+      end
+    end
+  end
+end