ronin 1.5.1 → 2.0.0.beta1

data/data/new/script.rb.erb

@@ -0,0 +1,6 @@
+#!/usr/bin/env ruby
+
+require 'ronin/support'
+include Ronin::Support
+
+# code goes here

data/data/tips/cli/console.txt

@@ -0,0 +1,4 @@
+Open an interactive Ruby console with Ronin pre-loaded:
+
+    $ ronin console
+

data/data/tips/cli/help.txt

@@ -0,0 +1,12 @@
+Get a list of all ronin commands:
+
+    $ ronin help
+
+Get help information for a specific command:
+
+    $ ronin help 
+
+Get a list of all commands available from another ronin-* command:
+
+    $ ronin-repos help
+

data/data/tips/ruby/array_join.txt

@@ -0,0 +1,5 @@
+Join an Array of elements:
+
+    [1,2,3,4].join(', ')
+    # => "1, 2, 3, 4"
+

data/data/tips/ruby/binary_string.txt

@@ -0,0 +1,4 @@
+Define a binary String:
+
+    "\x00\xff\x01\xef".b
+

data/data/tips/ruby/file_binread.txt

@@ -0,0 +1,4 @@
+Read a binary file:
+
+    data = File.binread('/bin/ls')
+

data/data/tips/ruby/file_each_line.txt

@@ -0,0 +1,6 @@
+Process each line of a text-file:
+
+    File.each_line('wordlist.txt', chomp: true) do |word|
+      # ...
+    end
+

data/data/tips/ruby/force_encoding.txt

@@ -0,0 +1,4 @@
+Forcibly change the encoding of a String:
+
+    data.force_encoding!(Encoding::UTF_16)
+

data/data/tips/ruby/integer_binary_format.txt

@@ -0,0 +1,10 @@
+Format an Integer as binary:
+
+    "%b" % 0x41
+    # => "1000001"
+
+Or even simpler:
+
+    0x41.to_s(2)
+    # => "1000001"
+

data/data/tips/ruby/integer_chr.txt

@@ -0,0 +1,5 @@
+Convert a byte to a character:
+
+    0x41.chr
+    # => "A"
+

data/data/tips/ruby/integer_hex_format.txt

@@ -0,0 +1,10 @@
+Format an Integer as binary:
+
+    "0x%x" % 65535
+    # => "0xffff"
+
+Or even simpler:
+
+    65535.to_s(16)
+    # => "ffff"
+

data/data/tips/ruby/string_bytes.txt

@@ -0,0 +1,17 @@
+Get the bytes of a String:
+
+    "hello".bytes
+    # => [104, 101, 108, 108, 111]
+
+Get a byte from a String:
+
+    str = "hello"
+    str.getbyte(0)
+    # => 104
+
+Sets a byte in a String:
+
+    str.setbyte(0,0x41)
+    str
+    # => "Aello"
+

data/data/tips/ruby/string_chars.txt

@@ -0,0 +1,17 @@
+Get the character in a String:
+
+    "hello".chars
+    # => ["h", "e", "l", "l", "o"]
+
+Get a character from a String:
+
+    str = "hello"
+    str[0]
+    # => "h"
+
+Set a character in a String:
+
+    str[0] = 'X'
+    str
+    # => "Xello"
+

data/data/tips/ruby/string_ord.txt

@@ -0,0 +1,5 @@
+Convert a character to a byte:
+
+    'A'.ord
+    # => 65
+

data/data/tips/ruby/string_split.txt

@@ -0,0 +1,13 @@
+Split a comma separated String into an Array:
+
+    parts = "foo,bar,baz,qux".split(',')
+
+Split a comma separated String, but only into three parts:
+
+    a,b,c = "foo,bar,baz,qux".split(',',3)
+    # => ["foo", "bar", "baz,qux"]
+
+Split a comma separated String, but only capture the first and third fields:
+
+    a,_,c,_ = "foo,bar,baz,qux".split(',')
+

data/data/tips/scripting/array_pack.txt

@@ -0,0 +1,5 @@
+Packing an Array:
+
+    [0x05, "hello"].pack(:uint16_be, :string)
+    # => "\x00\x05hello\x00"
+

data/data/tips/scripting/base64_decode.txt

@@ -0,0 +1,5 @@
+Base64 decode a String:
+
+    "c2VjcmV0\n".base64_decode
+    # => "secret"
+

data/data/tips/scripting/base64_encode.txt

@@ -0,0 +1,5 @@
+Base64 encode a String:
+
+    "hello\0world".base64_encode
+    # => "aGVsbG8Ad29ybGQ=\n"
+

data/data/tips/scripting/build_wordlist.txt

@@ -0,0 +1,9 @@
+Build a wordlist:
+
+    Wordlist::Builder.open('path/to/file.txt.gz') do |builder|
+      builder.add(word)
+      builder.append(words)
+      builder.parse(text)
+      builder.parse_file('path/to/text.txt')
+    end
+ 

data/data/tips/scripting/chars.txt

@@ -0,0 +1,8 @@
+Work with character sets:
+
+    Chars.hexadecimal
+    # => #<Chars::CharSet: {"0", "1", "2", "3", "4", "5", "6", "7", "8", "9", "A", "B", "C", "D", "E", "F", "a", "b", "c", "d", "e", "f"}>
+
+    (Chars.printable - Chars.alpha_numeric).bytes.sort
+    # => [32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 58, 59, 60, 61, 62, 63, 64, 91, 92, 93, 94, 95, 96, 123, 124, 125, 126]
+

data/data/tips/scripting/chars_strings_in.txt

@@ -0,0 +1,12 @@
+Find alpha-numeric Strings from a file:
+
+    Chars.alpha_numeric.strings_in(File.binread('/bin/ls'))
+    # => ["lib64",
+    #     "linux",
+    #     "type",
+    #     "name",
+    #     "coreutils",
+    #     "version",
+    #     "fc36",
+    #     ...
+

data/data/tips/scripting/dir_traversal.txt

@@ -0,0 +1,5 @@
+Escaping a directory:
+
+    Ronin::Support::Path.up(7) / 'etc' / 'passwd'
+    # => #<Ronin::Support::Path:../../../../../../../etc/passwd>
+

data/data/tips/scripting/dns_get_address.txt

@@ -0,0 +1,5 @@
+Lookup an address of a Domain name:
+
+    dns_get_address 'example.com'
+    # => "93.184.216.34"
+

data/data/tips/scripting/dns_get_addresses.txt

@@ -0,0 +1,5 @@
+Lookup all addresses of a Domain name:
+
+    dns_get_addresses 'example.com'
+    # => ["93.184.216.34"]
+

data/data/tips/scripting/extract_ips.txt

@@ -0,0 +1,6 @@
+Extract IP addresses from text:
+
+    data = "One two 10.1.1.2 three ..."
+    data.scan(Regexp::IP)
+    # => ["10.1.1.2"]
+

data/data/tips/scripting/file_each_row.txt

@@ -0,0 +1,6 @@
+Process rows of data from a text file:
+
+    File.each_row('passwords.txt', ',') do |user,password|
+      # ...
+    end
+

data/data/tips/scripting/file_hexdump.txt

@@ -0,0 +1,4 @@
+Hexdump a file:
+
+    File.hexdump('/bin/ls')
+

data/data/tips/scripting/float_pack.txt

@@ -0,0 +1,5 @@
+Packing a Float:
+
+    0.02.pack(:double)
+    # => "{\x14\xAEG\xE1z\x94?"
+

data/data/tips/scripting/ftp_connect.txt

@@ -0,0 +1,14 @@
+Connecting to an FTP server:
+
+    ftp = ftp_connect('ftp.osuosl.org')
+    # => #<Net::FTP:...>
+    ftp.chdir('/pub')
+    puts ftp.list
+
+Or create a temporary FTP session that automatically closes:
+
+    ftp_connect('ftp.osuosl.org') do |ftp|
+      ftp.chdir('/pub')
+      puts ftp.list
+    end
+

data/data/tips/scripting/generate_self_signed_cert.txt

@@ -0,0 +1,20 @@
+Generate a self-signed certificate:
+
+    key  = Ronin::Support::Crypto::Key::RSA.random
+    cert = Ronin::Support::Crypto::Cert.generate(
+      key: key,
+      subject: {
+        common_name:         'localhost',
+        organization:        'Test Co..',
+        organizational_unit: 'Test Dept',
+        locality:            'Test City',
+        state:               'XX',
+        country:             'US'
+      },
+      extensions: {
+        'subjectAltName' => 'DNS: localhost, IP: 127.0.0.1'
+      }
+    )
+    key.save('cert.key')
+    cert.save('cert.pem')
+

data/data/tips/scripting/http_get_body.txt

@@ -0,0 +1,5 @@
+Return the response body from a HTTP GET request:
+
+    http_get_body 'https://example.com/'
+    # => "<!doctype html>\n<html>\n<head>\n    <title>Example Domain</title>\n\n    <meta charset=\"utf-8\" />\n    <meta http-equiv=\"Content-type\" content=\"text/html; charset=utf-8\" />\n    <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\" />\n    <style type=\"text/css\">\n    body {\n        background-color: #f0f0f2;\n        margin: 0;\n        padding: 0;\n        font-family: -apple-system, system-ui, BlinkMacSystemFont, \"Segoe UI\", \"Open Sans\", \"Helvetica Neue\", Helvetica, Arial, sans-serif;\n        \n    }\n    div {\n        width: 600px;\n        margin: 5em auto;\n        padding: 2em;\n        background-color: #fdfdff;\n        border-radius: 0.5em;\n        box-shadow: 2px 3px 7px 2px rgba(0,0,0,0.02);\n    }\n    a:link, a:visited {\n        color: #38488f;\n        text-decoration: none;\n    }\n    @media (max-width: 700px) {\n        div {\n            margin: 0 auto;\n            width: auto;\n        }\n    }\n    </style>    \n</head>\n\n<body>\n<div>\n    <h1>Example Domain</h1>\n    <p>This domain is for use in illustrative examples in documents. You may use this\n    domain in literature without prior coordination or asking for permission.</p>\n    <p><a href=\"https://www.iana.org/domains/example\">More information...</a></p>\n</div>\n</body>\n</html>\n"
+

data/data/tips/scripting/http_get_headers.txt

@@ -0,0 +1,17 @@
+Return the response Headers from a HTTP GET Request:
+
+    http_get_headers 'http://example.com/'
+    # => {"Accept-Ranges"=>"bytes",
+    #     "Age"=>"283888",
+    #     "Cache-Control"=>"max-age=604800",
+    #     "Content-Type"=>"text/html; charset=UTF-8",
+    #     "Date"=>"Thu, 15 Dec 2022 22:29:04 GMT",
+    #     "Etag"=>"\"3147526947+ident\"",
+    #     "Expires"=>"Thu, 22 Dec 2022 22:29:04 GMT",
+    #     "Last-Modified"=>"Thu, 17 Oct 2019 07:18:26 GMT",
+    #     "Server"=>"ECS (sec/96DC)",
+    #     "Vary"=>"Accept-Encoding",
+    #     "X-Cache"=>"HIT",
+    #     "Content-Length"=>"1256",
+    #     "Connection"=>"close"}
+

data/data/tips/scripting/integer_pack.txt

@@ -0,0 +1,5 @@
+Packing an Integer:
+
+    0x1337.pack(:uint32_le)
+    # => "7\x13\0\0"
+

data/data/tips/scripting/ip_range_cidr.txt

@@ -0,0 +1,6 @@
+Enumerate through CIDR IP ranges:
+
+    Ronin::Support::Network::IPRange.each('10.1.1.1/24') do |ip|
+      # ...
+    end
+

data/data/tips/scripting/ip_range_glob.txt

@@ -0,0 +1,6 @@
+Enumerate through an nmap range of IP addresses:
+
+    Ronin::Support::Network::IPRange.each('10.1.*.1-128') do |ip|
+      # ...
+    end
+

data/data/tips/scripting/load_cert.txt

@@ -0,0 +1,5 @@
+Load a SSL/TLS certificate from a file:
+
+    key  = Ronin::Support::Crypto::Key.load_file('cert.key')
+    cert = Ronin::Support::Crypto::Cert.load_file('cert.pem')
+

data/data/tips/scripting/md5.txt

@@ -0,0 +1,5 @@
+Return the MD5 checksum of a String:
+
+    "leet school".md5
+    # => "1b11ba66f5e9d40a7eef699cd812e362"
+

data/data/tips/scripting/printing_messages.txt

@@ -0,0 +1,11 @@
+Print diagnostic messages:
+
+    print_info "Senting data ..."
+    # [*] Sending data ..."
+
+    print_success "Data sent!"
+    # [+] Data sent!
+
+    print_error "Received invalid input: #{data}"
+    # [!] Received invalid input: "USER \xff\xff\xff\0"
+

data/data/tips/scripting/random_alpha.txt

@@ -0,0 +1,5 @@
+Generate a random alphabetic String:
+
+    random_alpha(10)
+    # => "EDSHqzDHpi"
+

data/data/tips/scripting/random_alpha_numeric.txt

@@ -0,0 +1,5 @@
+Generate a random alpha-numeric String:
+
+    random_alpha_numeric(10)
+    # => "9yUGmmD6Nn"
+

data/data/tips/scripting/random_hex.txt

@@ -0,0 +1,5 @@
+Generate a random hex String:
+
+    random_hex(10)
+    # => "4E3c2cd29f"
+

data/data/tips/scripting/read_wordlist.txt

@@ -0,0 +1,7 @@
+Read a wordlist:
+
+    wordlist = Wordlist.open('path/to/wordlist.txt')
+    wordlist.each do |word|
+      # ...
+    end
+

data/data/tips/scripting/ronin_support.txt

@@ -0,0 +1,5 @@
+Load the ronin-support library in a ruby script:
+
+    require 'ronin/support'
+    include Ronin::Support
+

data/data/tips/scripting/sha1.txt

@@ -0,0 +1,5 @@
+Return the SHA1 checksum of a String:
+
+    "lol train".sha1
+    # => "37f05f0cc2914615c580af396df5c66316112f48"
+

data/data/tips/scripting/sha256.txt

@@ -0,0 +1,5 @@
+Return the SHA256 checksum of a String:
+
+    "admin".sha256
+    # => "8c6976e5b5410415bde908bd4dee15dfb167a9c873fc4bb8a81f6f2ab448a918"
+

data/data/tips/scripting/sha512.txt

@@ -0,0 +1,5 @@
+Return the SHA512 checksum of a String:
+
+    "thunder growl".sha512
+    # => "b2a1e560a497514dafda024f9e6fc2dfbfb178483251a708f07a88d4e157e5561604460da313ebc88dde2814ae58a15ae4085d00efb6a825a62f5be3215f5cbf"
+

data/data/tips/scripting/ssl_cert.txt

@@ -0,0 +1,10 @@
+Get the SSL certificate from a port:
+
+    cert = ssl_cert('example.com',443)
+    # => #<Ronin::Support::Crypto::Cert
+    #     subject=#<Ronin::Support::Crypto::Cert::Name CN=www.example.org,O=Internet\C2\A0Corporation\C2\A0for\C2\A0Assigned\C2\A0Names\C2\A0and\C2\A0Numbers,L=Los Angeles,ST=California,C=US>,                                           
+    #     issuer=#<Ronin::Support::Crypto::Cert::Name CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US>,                                 
+    #     serial=#<OpenSSL::BN 20823119674429668393338028820299337114>,
+    #     not_before=2022-03-14 00:00:00 UTC,        
+    #     not_after=2023-03-14 23:59:59 UTC>         
+

data/data/tips/scripting/ssl_socket.txt

@@ -0,0 +1,12 @@
+Create a SSL Socket to a specified host and port:
+
+    socket = ssl_connect('github.com',443)
+    # => #<OpenSSL::SSL::SSLSocket:0x00000002f60458>
+
+Or create a temporary SSL Socket that automatically closes:
+
+    ssl_socket('github.com',443) do |socket|
+      socket.write("GET /\r\n")
+      puts socket.read
+    end
+

data/data/tips/scripting/string_hexdump.txt

@@ -0,0 +1,5 @@
+Hexdump a String:
+
+    "hello\x00\x90\a\b\t\r\n".hexdump
+    # 00000000  68 65 6c 6c 6f 00 90 07  08 09 0d 0a              |hello.......|
+

data/data/tips/scripting/string_random_case.txt

@@ -0,0 +1,5 @@
+Randomize the case of a String:
+
+    "hello world".random_case
+    # => "HeLLO WoRLd"
+

data/data/tips/scripting/string_unpack.txt

@@ -0,0 +1,5 @@
+Unpacking a String:
+
+    "\x00\x05hello\x00".unpack(:uint16_be, :string)
+    # => [5, "hello"]
+

data/data/tips/scripting/tcp_accept.txt

@@ -0,0 +1,6 @@
+Listen on a port and accept the first TCP connection:
+
+    tcp_accept(1337) do |client|
+      client.write(buffer)
+    end
+

data/data/tips/scripting/tcp_banner.txt

@@ -0,0 +1,5 @@
+Grabbing the banner from a TCP service:
+
+    tcp_banner('www.example.com',22)
+    # => "SSH-2.0-OpenSSH_4.3p2 Debian-8ubuntu1.4\n"
+

data/data/tips/scripting/tcp_connect.txt

@@ -0,0 +1,12 @@
+Creating a TCP Socket to a specified host and port:
+
+    socket = tcp_connect('www.example.com',25)
+    # => #<TCPSocket:0xb7bbde6c>
+
+Or create a temporary TCP Socket that automatically closes:
+
+    tcp_connect('www.example.com',1212) do |socket|
+      socket.write("this is just a test\n")
+      puts socket.readline
+    end
+

data/data/tips/scripting/tcp_open.txt

@@ -0,0 +1,5 @@
+Test if a TCP port is open:
+
+    tcp_open?('example.com',80)
+    # => true
+

data/data/tips/scripting/tcp_send.txt

@@ -0,0 +1,5 @@
+Send data to a TCP server:
+
+    buffer = 'A' * 1024
+    tcp_send(buffer,'example.com',1212)
+

data/data/tips/scripting/tcp_server_loop.txt

@@ -0,0 +1,6 @@
+Listen on a TCP port and accept connections, infinitely:
+
+    tcp_server_loop(1337) do |client|
+      client.write(buffer)
+    end
+

data/data/tips/scripting/try.txt

@@ -0,0 +1,4 @@
+Run a block of Ruby code, and ignore any exceptions:
+
+    try { Resolv.getaddress(readline) }
+

data/data/tips/scripting/udp_connect.txt

@@ -0,0 +1,8 @@
+Creating a temporary UDP socket which will be automatically closed:
+
+    udp_connect('example.com',1212) do |socket|
+      socket.write("PING")
+      mesg, _ = socket.recv(1024)
+      puts mesg
+    end
+

data/data/tips/scripting/udp_open.txt

@@ -0,0 +1,5 @@
+Test if a UDP port is open:
+
+    udp_open?('4.2.2.1',53)
+    # => true
+

data/data/tips/scripting/udp_recv.txt

@@ -0,0 +1,7 @@
+Listen on a port, and receive only one UDP message:
+
+    udp_recv(1337) do |socket,(host,port),mesg|
+      print_info "#{host}:#{port}"
+      puts mesg
+    end
+

data/data/tips/scripting/udp_send.txt

@@ -0,0 +1,5 @@
+Send data to a UDP Server:
+
+    buffer = 'A' * 1024
+    udp_send(buffer,'example.com',1212)
+

data/data/tips/scripting/udp_server_loop.txt

@@ -0,0 +1,7 @@
+Listen on a port and receive UDP messages, infinitely:
+
+    udp_server_loop(1337) do |server,(host,port),mesg|
+      print_info "#{host}:#{port}"
+      puts mesg
+    end
+

data/data/tips/scripting/unix_accept.txt

@@ -0,0 +1,7 @@
+Opens a UNIX Socket and accepts one connection:
+
+    buffer = 'A' * 1024
+    unix_accept('/tmp/race_condition.socket') do |socket|
+      sockets.puts(buffer)
+    end
+

data/data/tips/scripting/unix_connect.txt

@@ -0,0 +1,12 @@
+Connecting to a UNIX Socket:
+
+    unix_connect('/tmp/haproxy.stats.socket')
+    # => #<UNIXSocket:...>
+
+Or create a temporary UNIX Socket which will automatically be closed:
+
+    unix_session('/tmp/haproxy.stats.socket') do |socket|
+      socket.puts("command here")
+      puts socket.readline
+    end
+

data/data/tips/scripting/zlib_deflate.txt

@@ -0,0 +1,5 @@
+Zlib deflate a String:
+
+    "secret".zlib_deflate
+    # => "x\x9c+NM.J-\x01\0\b\xd1\x02\x87"
+

data/data/tips/scripting/zlib_inflate.txt

@@ -0,0 +1,5 @@
+Zlib inflate a String:
+
+    "x\x9c+NM.J-\x01\0\b\xd1\x02\x87AAAAAAA".zlib_inflate
+    # => "secret"
+