ronin 0.3.0 → 1.0.0.pre1

data/lib/ronin/network/mixins/udp.rb

@@ -0,0 +1,210 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2006-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This library is free software; you can redistribute it and/or
+# modify it under the terms of the GNU Lesser General Public
+# License as published by the Free Software Foundation; either
+# version 2.1 of the License, or (at your option) any later version.
+#
+# This library is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public
+# License along with this library; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor,
+# Boston, MA  02110-1301  USA
+#
+
+require 'ronin/network/udp'
+
+require 'parameters'
+
+module Ronin
+  module Network
+    module Mixins
+      #
+      # Adds UDP convenience methods and connection parameters to a class.
+      #
+      module UDP
+        include Parameters
+
+        # UDP host
+        parameter :host,
+                  :type => String,
+                  :description => 'UDP host'
+
+        # UDP port
+        parameter :port,
+                  :type => Integer,
+                  :description => 'UDP port'
+
+        # UDP local host
+        parameter :local_host,
+                  :type => String,
+                  :description => 'UDP local host'
+
+        # UDP local port
+        parameter :local_port,
+                  :type => Integer,
+                  :description => 'UDP local port'
+
+        # UDP server host
+        parameter :server_host,
+                  :type => String,
+                  :description => 'UDP server host'
+
+        # UDP server port
+        parameter :server_port,
+                  :type => Integer,
+                  :description => 'UDP server port'
+
+        protected
+
+        #
+        # Opens a UDP connection to the host and port specified by the
+        # {#host} and {#port} parameters. If the {#local_host} and
+        # {#local_port} parameters are set, they will be used for
+        # the local host and port of the UDP connection.
+        #
+        # @yield [socket]
+        #   If a block is given, it will be passed the newly created socket.
+        #
+        # @yieldparam [UDPsocket] socket
+        #   The newly created UDPSocket object.
+        #
+        # @return [UDPSocket]
+        #   The newly created UDPSocket object.
+        #
+        # @example
+        #   udp_connect
+        #   # => UDPSocket
+        #
+        # @example
+        #   udp_connect do |sock|
+        #     puts sock.readlines
+        #   end
+        #
+        def udp_connect(&block)
+          print_info "Connecting to #{self.host}:#{self.port} ..."
+
+          return ::Net.udp_connect(self.host,self.port,self.local_host,self.local_port,&block)
+        end
+
+        #
+        # Connects to the host and port specified by the {#host} and {#port}
+        # parameters, then sends the given data. If the {#local_host} and
+        # {#local_port} instance methods are set, they will be used for the
+        # local host and port of the UDP connection.
+        #
+        # @param [String] data
+        #   The data to send through the connection.
+        #
+        # @yield [socket]
+        #   If a block is given, it will be passed the newly created socket.
+        #
+        # @yieldparam [UDPsocket] socket
+        #   The newly created UDPSocket object.
+        #
+        # @return [UDPSocket]
+        #   The newly created UDPSocket object.
+        #
+        def udp_connect_and_send(data,&block)
+          print_info "Connecting to #{self.host}:#{self.port} ..."
+          print_debug "Sending data: #{data.inspect}"
+
+          return ::Net.udp_connect_and_send(data,self.host,self.port,self.local_host,self.local_port,&block)
+        end
+
+        #
+        # Creates a UDP session to the host and port specified by the
+        # {#host} and {#port} parameters. If the {#local_host} and {#local_port}
+        # parameters are set, they will be used for the local host and port
+        # of the UDP connection.
+        #
+        # @yield [socket]
+        #   If a block is given, it will be passed the newly created socket.
+        #   After the block has returned, the socket will then be closed.
+        #
+        # @yieldparam [UDPsocket] socket
+        #   The newly created UDPSocket object.
+        #
+        # @return [nil]
+        #
+        def udp_session(&block)
+          print_info "Connecting to #{self.host}:#{self.port} ..."
+
+          ::Net.udp_session(self.host,self.port,self.local_host,self.local_port,&block)
+
+          print_info "Disconnected from #{self.host}:#{self.port}"
+          return nil
+        end
+
+        #
+        # Creates a new UDPServer object listening on {#server_host} and
+        # {#server_port} parameters.
+        #
+        # @yield [server]
+        #   The given block will be passed the newly created server.
+        #
+        # @yieldparam [UDPServer] server
+        #   The newly created server.
+        #
+        # @return [UDPServer]
+        #   The newly created server.
+        #
+        # @example
+        #   udp_server
+        #
+        def udp_server(&block)
+          if self.server_host
+            print_info "Listening on #{self.server_host}:#{self.server_port} ..."
+          else
+            print_info "Listening on #{self.server_port} ..."
+          end
+
+          return ::Net.udp_server(self.server_port,self.server_host,&block)
+        end
+
+        #
+        # Creates a new temporary UDPServer object listening on the
+        # {#server_host} and {#server_port} parameters.
+        #
+        # @yield [server]
+        #   The given block will be passed the newly created server.
+        #   When the block has finished, the server will be closed.
+        #
+        # @yieldparam [UDPServer] server
+        #   The newly created server.
+        #
+        # @return [nil]
+        #
+        # @example
+        #   udp_server_session do |server|
+        #     data, sender = server.recvfrom(1024)
+        #   end
+        #
+        def udp_server_session(&block)
+          if self.server_host
+            print_info "Listening on #{self.server_host}:#{self.server_port} ..."
+          else
+            print_info "Listening on #{self.server_port} ..."
+          end
+
+          ::Net.udp_server_session(&block)
+
+          if self.server_host
+            print_info "Closed #{self.server_host}:#{self.server_port}"
+          else
+            print_info "Closed #{self.server_port}"
+          end
+
+          return nil
+        end
+      end
+    end
+  end
+end

data/lib/ronin/network/mixins.rb

@@ -0,0 +1,29 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2006-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This library is free software; you can redistribute it and/or
+# modify it under the terms of the GNU Lesser General Public
+# License as published by the Free Software Foundation; either
+# version 2.1 of the License, or (at your option) any later version.
+#
+# This library is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+# Lesser General Public License for more details.
+#
+# You should have received a copy of the GNU Lesser General Public
+# License along with this library; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin Street, Fifth Floor,
+# Boston, MA  02110-1301  USA
+#
+
+require 'ronin/network/mixins/tcp'
+require 'ronin/network/mixins/udp'
+require 'ronin/network/mixins/smtp'
+require 'ronin/network/mixins/esmtp'
+require 'ronin/network/mixins/pop3'
+require 'ronin/network/mixins/imap'
+require 'ronin/network/mixins/telnet'
+require 'ronin/network/mixins/web'

data/lib/ronin/open_port.rb

@@ -0,0 +1,112 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/service_credential'
+require 'ronin/port'
+require 'ronin/service'
+require 'ronin/ip_address'
+require 'ronin/model'
+
+require 'dm-timestamps'
+require 'dm-tags'
+
+module Ronin
+  class OpenPort
+
+    include Model
+    include DataMapper::Timestamps
+
+    # The primary key of the open port
+    property :id, Serial
+
+    # The IP Address that was scanned
+    belongs_to :ip_address, :model => 'IPAddress'
+
+    # The port
+    belongs_to :port
+
+    # The service detected on the port
+    belongs_to :service, :required => false
+
+    # any credentials used by the service running on the port
+    has 0..n, :service_credentials
+
+    # When the open-port was last scanned
+    property :last_scanned_at, Time
+
+    # Define the created_at timestamp
+    timestamps :created_at
+
+    # Tags
+    has_tags_on :tags
+
+    #
+    # The IP Address of the open port.
+    #
+    # @return [String]
+    #   The IP Address.
+    #
+    # @since 1.0.0
+    #
+    def address
+      self.ip_address.address
+    end
+
+    #
+    # The port number.
+    #
+    # @return [Integer]
+    #   The port number.
+    #
+    # @since 1.0.0
+    #
+    def number
+      self.port.number
+    end
+
+    #
+    # Converts the open port to an integer.
+    #
+    # @return [Integer]
+    #   The port number.
+    #
+    # @since 1.0.0
+    #
+    def to_i
+      self.port.to_i
+    end
+
+    #
+    # Converts the open port to a string.
+    #
+    # @return [String]
+    #   The information of the open port.
+    #
+    # @since 1.0.0
+    #
+    def to_s
+      str = self.port.to_s
+      str << "(#{self.service})" if self.service
+
+      return str
+    end
+
+  end
+end

data/lib/ronin/organization.rb

@@ -0,0 +1,49 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/address'
+require 'ronin/model'
+require 'ronin/model/has_name'
+require 'ronin/model/has_description'
+
+require 'dm-timestamps'
+require 'dm-tags'
+
+module Ronin
+  class Organization
+
+    include Model
+    include Model::HasName
+    include Model::HasDescription
+
+    # Primary key of the organization
+    property :id, Serial
+
+    # The addresses that belong to the organization
+    has 1..n, :addresses
+
+    # Tracks when the organization was first created
+    timestamps :created_at
+
+    # Tags
+    has_tags_on :tags
+
+  end
+end

data/lib/ronin/os.rb

@@ -1,7 +1,7 @@
 #
 # Ronin - A Ruby platform for exploit development and security research.
 #
-# Copyright (c) 2006-2009 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2006-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # This program is free software; you can redistribute it and/or modify
 # it under the terms of the GNU General Public License as published by
@@ -19,29 +19,56 @@
 #
 
 require 'ronin/model'
+require 'ronin/model/has_name'
+require 'ronin/os_guess'
+require 'ronin/ip_address'
 require 'ronin/extensions/meta'
 
-require 'extlib'
-
 module Ronin
+  #
+  # Represents an Operating System and predefines other common ones
+  # ({linux}, {freebsd}, {openbsd}, {netbsd}, {osx}, {solaris}, {windows}
+  # and {unix}).
+  #
   class OS
 
     include Model
+    include Model::HasName
 
     # Primary key
     property :id, Serial
 
-    # Name of the Operating System
-    property :name, String, :index => true
-
     # Version of the Operating System
     property :version, String, :index => true
 
-    # Validates
-    validates_present :name
+    # Any OS guesses for the Operating System
+    has 0..n, :os_guesses, :model => 'OSGuess'
+
+    # Any IP Addresses that might be running the Operating System
+    has 0..n, :ip_addresses, :through => :os_guesses,
+                             :model => 'IPAddress',
+                             :via => :ip_address
+
+    #
+    # The IP Address that was most recently guessed to be using the
+    # Operating System.
+    #
+    # @return [IPAddress]
+    #   The IP Address most recently guessed to be using the
+    #   Operating System.
+    #
+    # @since 1.0.0
+    #
+    def recent_ip_address
+      relation = self.os_guesses.first(:order => [:created_at.desc])
+
+      if relation
+        return relation.ip_address
+      end
+    end
 
     #
-    # Converts the os to a String.
+    # Converts the Operating System to a String.
     #
     # @return [String]
     #   The OS name and version.
@@ -52,12 +79,33 @@ module Ronin
     #
     def to_s
       if self.version
-        return "#{self.name} #{self.version}"
+        "#{self.name} #{self.version}"
       else
-        return self.name.to_s
+        super
       end
     end
 
+    #
+    # Splits the Operating System into multiple variables.
+    #
+    # @return [Array<String>]
+    #   The name and version of the Operating System.
+    #
+    # @example
+    #   os = OS.linux('2.6.31')
+    #   name, version = os
+    #
+    #   name
+    #   # => "Linux"
+    #   version
+    #   # => "2.6.31"
+    #
+    # @since 1.0.0
+    #
+    def to_ary
+      [self.name, self.version]
+    end
+
     #
     # Defines a new predefined OS.
     #
@@ -67,6 +115,8 @@ module Ronin
     # @param [String] os_name
     #   The name of the OS.
     #
+    # @return [nil]
+    #
     # @example
     #   OS.predefine :freebsd, 'FreeBSD'
     #

data/lib/ronin/os_guess.rb

@@ -0,0 +1,42 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/ip_address'
+require 'ronin/os'
+require 'ronin/model'
+
+require 'dm-timestamps'
+
+module Ronin
+  class OSGuess
+
+    include Model
+
+    # The IP Address the OS guess was made against
+    belongs_to :ip_address, :key => true, :model => 'IPAddress'
+
+    # The guessed OS
+    belongs_to :os, :key => true, :model => 'OS'
+
+    # Tracks when an OS guess is made against an IP Address
+    timestamps :created_at
+
+  end
+end

data/lib/ronin/password.rb

@@ -0,0 +1,126 @@
+#
+# Ronin - A Ruby platform for exploit development and security research.
+#
+# Copyright (c) 2009-2010 Hal Brodigan (postmodern.mod3 at gmail.com)
+#
+# This program is free software; you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation; either version 2 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with this program; if not, write to the Free Software
+# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
+#
+
+require 'ronin/credential'
+require 'ronin/model'
+
+require 'digest'
+
+module Ronin
+  class Password
+
+    include Model
+
+    # Primary key of the password
+    property :id, Serial
+
+    # The clear-text of the password
+    property :clear_text, String, :required => true,
+                                  :unique => true
+
+    # The credentials which use the password
+    has 0..n, :credentials
+
+    # The user names which use the password
+    has 0..n, :user_names, :through => :credentials
+
+    #
+    # Hashes the password.
+    #
+    # @param [Symbol, String] digest
+    #   The digest algorithm to use.
+    #
+    # @param [Hash] options
+    #   Additional options.
+    #
+    # @option options [String] :prepend_salt
+    #   The salt data to prepend to the password.
+    #
+    # @option options [String] :append_salt
+    #   The salt data to append to the password.
+    #
+    # @return [String]
+    #   The hex-digest of the hashed password.
+    #
+    # @raise [ArgumentError]
+    #   Unknown Digest alogrithm.
+    #
+    # @example
+    #   pass = Password.new(:clear_text => 'secret')
+    #   
+    #   pass.digest(:sha1)
+    #   # => "e5e9fa1ba31ecd1ae84f75caaa474f3a663f05f4"
+    #   
+    #   pass.digest(:sha1, :prepend_salt => "A\x90\x00")
+    #   # => "e2817656a48c49f24839ccf9295b389d8f985904"
+    #   
+    #   pass.digest(:sha1, :append_salt => "BBBB")
+    #   # => "aa6ca21e446d425fc044bbb26e950a788444a5b8"
+    #
+    # @since 1.0.0
+    #
+    def digest(algorithm,options={})
+      digest_class = begin
+                       Digest.const_get(algorithm.to_s.upcase)
+                     rescue LoadError
+                       raise(ArgumentError,"Unknown Digest algorithm #{algorithm}")
+                     end
+
+      hash = digest_class.new
+
+      if options[:prepend_salt]
+        hash << options[:prepend_salt].to_s
+      end
+
+      hash << self.clear_text
+
+      if options[:append_salt]
+        hash << options[:append_salt].to_s
+      end
+
+      return hash.hexdigest
+    end
+
+    #
+    # The number of credentials which use this password.
+    #
+    # @return [Integer]
+    #   The number of credentials that use the password.
+    #
+    # @since 1.0.0
+    #
+    def count
+      self.credentials.count
+    end
+
+    #
+    # Converts the password into a String.
+    #
+    # @return [String]
+    #   The clear-text of the password.
+    #
+    # @since 1.0.0
+    #
+    def to_s
+      self.clear_text
+    end
+
+  end
+end