ronin 0.3.0 → 1.0.0.pre1

data/lib/ronin/host_name.rb

@@ -0,0 +1,181 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/address'
+require 'ronin/host_name_ip_address'
+require 'ronin/url'
+require 'ronin/email_address'
+require 'ronin/model'
+
+require 'resolv'
+
+module Ronin
+  class HostName < Address
+
+    # The IP Address associations
+    has 0..n, :host_name_ip_addresses, :model => 'HostNameIPAddress'
+
+    # The IP Addresses that host the host name
+    has 0..n, :ip_addresses, :through => :host_name_ip_addresses,
+                             :model => 'IPAddress'
+
+    # Open ports of the host
+    has 0..n, :open_ports, :through => :ip_addresses
+
+    # Ports of the host
+    has 0..n, :ports, :through => :ip_addresses
+
+    # The email addresses that are associated with the host-name.
+    has 0..n, :email_addresses
+
+    # URLs that point to this host name
+    has 0..n, :urls, :model => 'URL'
+
+    #
+    # Searches for host names associated with the given IP address(es).
+    #
+    # @param [Array<String>, String] ips
+    #   The IP address(es) to search for.
+    #
+    # @return [Array<HostName>]
+    #   The matching host names.
+    #
+    # @since 1.0.0
+    #
+    def self.with_ips(ips)
+      all('ip_addresses.address' => ips)
+    end
+
+    #
+    # Searches for host names with the given open port(s).
+    #
+    # @param [Array<Integer>, Integer] numbers
+    #   The open port(s) to search for.
+    #
+    # @return [Array<HostName>]
+    #   The matching host names.
+    #
+    # @since 1.0.0
+    #
+    def self.with_ports(numbers)
+      all('ports.number' => numbers)
+    end
+
+    #
+    # Searches for all host names under the Top-Level Domain (TLD).
+    #
+    # @param [String] name
+    #   The Top-Level Domain (TLD).
+    #
+    # @return [Array<HostName>]
+    #   The matching host names.
+    #
+    # @since 1.0.0
+    #
+    def self.tld(name)
+      all(:address.like => "%.#{name}")
+    end
+
+    #
+    # Searches for all host names sharing a common domain name.
+    #
+    # @param [String] name
+    #   The common domain name to search for.
+    #
+    # @return [Array<HostName>]
+    #   The matching host names.
+    #
+    # @since 1.0.0
+    #
+    def self.domain(name)
+      all(:address.like => "#{name}.%") | all(:address.like => "%.#{name}.%")
+    end
+
+    #
+    # Looks up all host names associated with an IP address.
+    #
+    # @param [IPAddr, String] addr
+    #   The IP address to lookup.
+    #
+    # @return [Array<HostName>]
+    #   The host names associated with the IP address.
+    #
+    # @since 1.0.0
+    #
+    def self.lookup(addr)
+      ip = self.ip_addresses.model.first_or_new(:address => addr)
+
+      return Resolv.getnames(addr.to_s).map do |name|
+        ip.host_names.first_or_new(:address => name)
+      end
+    end
+
+    alias name address
+
+    #
+    # Looks up all IP Addresses for the host name.
+    #
+    # @return [Array<IPAddress>]
+    #   The IP Addresses for the host name.
+    #
+    # @since 1.0.0
+    #
+    def lookup!
+      Resolv.getaddresses(self.address).map do |ip|
+        self.ip_addresses.first_or_new(:address => ip)
+      end
+    end
+
+    #
+    # The IP Address that was most recently used by the host name.
+    #
+    # @return [IpAddress]
+    #   The IP Address that most recently used by the host name.
+    #
+    # @since 1.0.0
+    #
+    def recent_ip_address
+      relation = self.host_name_ip_addresses.first(
+        :order => [:created_at.desc]
+      )
+
+      if relation
+        return relation.ip_address
+      end
+    end
+
+    #
+    # Determines when the host was last scanned.
+    #
+    # @return [Time, nil]
+    #   The time the host was last scanned at.
+    #
+    # @since 1.0.0
+    #
+    def last_scanned_at
+      last_scanned_url = self.urls.first(
+        :order_by => [:last_scanned_at.desc]
+      )
+
+      return last_scanned_url.last_scanned_at if last_scanned_url
+    end
+
+  end
+end

data/lib/ronin/host_name_ip_address.rb

@@ -0,0 +1,42 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/host_name'
+require 'ronin/ip_address'
+require 'ronin/model'
+
+require 'dm-timestamps'
+
+module Ronin
+  class HostNameIPAddress
+
+    include Model
+
+    # The host name pointing to the IP Address
+    belongs_to :host_name, :key => true
+
+    # The IP Address
+    belongs_to :ip_address, :key => true, :model => 'IPAddress'
+
+    # Tracks when a IP Address is associated with a host name
+    timestamps :created_at
+
+  end
+end

data/lib/ronin/installation.rb

@@ -0,0 +1,169 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2006-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'enumerator'
+
+module Ronin
+  #
+  # The {Installation} module provides methods which help reflect on the
+  # installation of Ronin on the system.
+  #
+  module Installation
+    @gems = {}
+    @paths = {}
+
+    #
+    # Finds the installed Ronin libraries via RubyGems.
+    #
+    # @return [Hash{String => Gem::Specification}]
+    #   The names and gem-specs of the installed Ronin libraries.
+    #
+    # @since 1.0.0
+    #
+    def Installation.gems
+      Installation.load_gemspecs! if @gems.empty?
+      return @gems
+    end
+
+    #
+    # The names of the additional Ronin libraries installed on the system.
+    #
+    # @return [Array<String>]
+    #   The library names.
+    #
+    # @since 1.0.0
+    #
+    def Installation.libraries
+      Installation.gems.keys
+    end
+
+    #
+    # The installation paths of installed Ronin libraries.
+    #
+    # @return [Hash{String => String}]
+    #   The paths to the installed Ronin libraries.
+    #
+    # @since 1.0.0
+    #
+    def Installation.paths
+      Installation.load_gemspecs! if @paths.empty?
+      return @paths
+    end
+
+    #
+    # Enumerates over all files within a given directory found in any
+    # of the installed Ronin libraries.
+    #
+    # @param [String] directory
+    #   The directory path to search within.
+    #
+    # @yield [file]
+    #   The given block will be passed each file found within the directory.
+    #
+    # @yieldparam [String] file
+    #   The sub-path to the file found within the directory.
+    #
+    # @return [Enumerator]
+    #   Returns an Enumerator if no block is given.
+    #
+    # @since 1.0.0
+    #
+    def Installation.each_file(directory)
+      return enum_for(:each_file,directory) unless block_given?
+
+      directory = File.join(directory,'')
+
+      # query the installed gems
+      Installation.gems.each_value do |gem|
+        gem.files.each do |file|
+          if file[0...directory.length] == directory
+            yield file[directory.length..-1]
+          end
+        end
+      end
+
+      return nil
+    end
+
+    #
+    # Requires all files within the given directory.
+    #
+    # @param [String] directory
+    #   A directory that resides within `lib/`.
+    #
+    # @return [Boolean]
+    #   Specifies whether any files were successfully required.
+    #
+    # @since 1.0.0
+    #
+    def Installation.require_all(directory)
+      lib_dir = File.join('lib',directory)
+      result = false
+
+      Installation.each_file(lib_dir) do |name|
+        result |= (require File.join(directory,name))
+      end
+
+      return result
+    end
+
+    protected
+
+    #
+    # Loads the gemspecs for any installed Ronin libraries.
+    #
+    # @return [true]
+    #   All Ronin libraries were successfully found.
+    #
+    # @since 1.0.0
+    #
+    def Installation.load_gemspecs!
+      ronin_gem = Gem.loaded_specs['ronin']
+
+      if ronin_gem
+        @gems['ronin'] = ronin_gem
+        @paths['ronin'] = ronin_gem.full_gem_path
+
+        ronin_gem.dependent_gems.each do |gems|
+          gem = gems.first
+
+          @gems[gem.name] = gem
+          @paths[gem.name] = gem.full_gem_path
+        end
+      else
+        # if we cannot find an installed ronin gem, search the $LOAD_PATH
+        # for ronin gemspecs and load those
+        $LOAD_PATH.each do |lib_dir|
+          root_dir = File.expand_path(File.join(lib_dir,'..'))
+          gemspec_path = Dir[File.join(root_dir,'ronin*.gemspec')].first
+
+          if gemspec_path
+            gem = Gem::SourceIndex.load_specification(gemspec_path)
+
+            @gems[gem.name] = gem
+            @paths[gem.name] = root_dir
+          end
+        end
+      end
+
+      return true
+    end
+  end
+end

data/lib/ronin/ip_address.rb

@@ -0,0 +1,273 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/model'
+require 'ronin/address'
+require 'ronin/ip_address_mac_address'
+require 'ronin/host_name_ip_address'
+require 'ronin/os_guess'
+require 'ronin/os'
+
+require 'ipaddr'
+require 'resolv'
+
+module Ronin
+  class IPAddress < Address
+
+    # The IP Address
+    property :address, Property::IPAddress, :required => true,
+                                            :unique => true
+
+    # Type of the address
+    property :version, Integer, :set => [4, 6],
+                                :default => lambda { |ip_addr,version|
+                                  if ip_addr.address
+                                    if ip_addr.address.ipv6?
+                                      6
+                                    else
+                                      4
+                                    end
+                                  end
+                                }
+
+    # The MAC Addresses associations
+    has 0..n, :ip_address_mac_addresses, :model => 'IPAddressMACAddress'
+
+    # The MAC Addresses associated with the IP Address
+    has 0..n, :mac_addresses, :through => :ip_address_mac_addresses,
+                              :model => 'MACAddress'
+
+    # The host-names that the IP Address serves
+    has 0..n, :host_name_ip_addresses, :model => 'HostNameIPAddress'
+
+    # The host-names associated with the IP Address
+    has 0..n, :host_names, :through => :host_name_ip_addresses
+
+    # Open ports of the host
+    has 0..n, :open_ports
+
+    # Ports of the host
+    has 0..n, :ports, :through => :open_ports
+
+    # Any OS guesses against the IP Address
+    has 0..n, :os_guesses, :model => 'OSGuess'
+
+    # Any OSes that the IP Address might be running
+    has 0..n, :oses, :through => :os_guesses,
+                     :model => 'OS',
+                     :via => :os
+
+    #
+    # Searches for all IPv4 addresses.
+    #
+    # @return [Array<IPAddress>]
+    #   The IPv4 addresses.
+    #
+    # @since 1.0.0
+    #
+    def self.v4
+      all(:version => 4)
+    end
+
+    #
+    # Searches for all IPv6 addresses.
+    #
+    # @return [Array<IPAddress>]
+    #   The IPv6 addresses.
+    #
+    # @since 1.0.0
+    #
+    def self.v6
+      all(:version => 6)
+    end
+
+    #
+    # Searches for all IP addresses associated with specific MAC addresses.
+    #
+    # @param [Array<String>, String] macs
+    #   The MAC address(es) to search for.
+    #
+    # @return [Array<IPAddress>]
+    #   The matching IP addresses.
+    #
+    # @since 1.0.0
+    #
+    def self.with_macs(macs)
+      all('mac_addresses.address' => macs)
+    end
+
+    #
+    # Searches for IP addresses associated with the given host names.
+    #
+    # @param [Array<String>, String] names
+    #   The host name(s) to search for.
+    #
+    # @return [Array<IPAddress>]
+    #   The matching IP addresses.
+    #
+    # @since 1.0.0
+    #
+    def self.with_hosts(names)
+      all('host_names.address' => names)
+    end
+
+    #
+    # Searches for IP addresses with the given open ports.
+    #
+    # @param [Array<Integer>, Integer] numbers
+    #   The port number(s) to search for.
+    #
+    # @return [Array<IPAddress>]
+    #   The matching IP addresses.
+    #
+    # @since 1.0.0
+    #
+    def self.with_ports(numbers)
+      all('ports.number' => numbers)
+    end
+
+    #
+    # Looks up the host name to multiple IP addresses.
+    #
+    # @param [String] name
+    #   The host name to look up.
+    #
+    # @return [Array<IPAddress>]
+    #   The new or previously saved IP Addresses for the host name.
+    #
+    # @since 1.0.0
+    #
+    def self.lookup(name)
+      host = self.host_names.model.first_or_new(:address => name)
+
+      return Resolv.getaddresses(name).map do |ip|
+        host.ip_addresses.first_or_new(:address => ip)
+      end
+    end
+
+    #
+    # Performs a reverse lookup on the IP address.
+    #
+    # @return [Array<HostName>]
+    #   The host-names associated with the IP Address.
+    #
+    # @since 1.0.0
+    #
+    def lookup!
+      Resolv.getnames(self.address.to_s).map do |name|
+        self.host_names.first_or_new(:address => name)
+      end
+    end
+
+    #
+    # The MAC Address that was most recently used by the IP Address.
+    #
+    # @return [MacAddress]
+    #   The MAC Address that most recently used the IP Address.
+    #
+    # @since 1.0.0
+    #
+    def recent_mac_address
+      relation = self.ip_address_mac_addresses.first(
+        :order => [:created_at.desc]
+      )
+
+      if relation
+        return relation.mac_address
+      end
+    end
+
+    #
+    # The host-name that was most recently used by the IP Address.
+    #
+    # @return [HostName]
+    #   The host-name that most recently used by the IP Address.
+    #
+    # @since 1.0.0
+    #
+    def recent_host_name
+      relation = self.host_name_ip_addresses.first(
+        :order => [:created_at.desc]
+      )
+
+      if relation
+        return relation.host_name
+      end
+    end
+
+    #
+    # The Operating System that was most recently guessed for the IP
+    # Address.
+    #
+    # @return [OS]
+    #   The Operating System that most recently was guessed.
+    #
+    # @since 1.0.0
+    #
+    def recent_os_guess
+      relation = self.os_guesses.first(:order => [:created_at.desc])
+
+      if relation
+        return relation.os
+      end
+    end
+
+    #
+    # Determines when the IP address was last scanned.
+    #
+    # @return [Time, nil]
+    #   The time the IP address was last scanned at.
+    #
+    # @since 1.0.0
+    #
+    def last_scanned_at
+      last_scanned_port = self.open_ports.first(
+        :order_by => [:last_scanned_at.desc]
+      )
+
+      return last_scanned_port.last_scanned_at if last_scanned_port
+    end
+
+    #
+    # Converts the address to an IP address object.
+    #
+    # @return [IPAddr]
+    #   The IPAddr object representing either the IPv4 or IPv6 address.
+    #
+    # @since 1.0.0
+    #
+    def to_ip
+      self.address
+    end
+
+    #
+    # Converts the address to an Integer.
+    #
+    # @return [Integer]
+    #   The network representation of the IP address.
+    #
+    # @since 1.0.0
+    #
+    def to_i
+      self.address.to_i
+    end
+
+  end
+end

data/lib/ronin/ip_address_mac_address.rb

@@ -0,0 +1,42 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/ip_address'
+require 'ronin/mac_address'
+require 'ronin/model'
+
+require 'dm-timestamps'
+
+module Ronin
+  class IPAddressMACAddress
+
+    include Model
+
+    # The IP Address
+    belongs_to :ip_address, :key => true, :model => 'IPAddress'
+
+    # The Mac Address
+    belongs_to :mac_address, :key => true, :model => 'MACAddress'
+
+    # Tracks when an IP Address becomes associated with a MAC Address
+    timestamps :created_at
+
+  end
+end