ronin 1.5.1 → 2.0.0.beta1

data/lib/ronin/ui/cli/commands/exec.rb

@@ -1,127 +0,0 @@
-#
-# Copyright (c) 2006-2021 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This file is part of ronin.
-#
-# Ronin is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# Ronin is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with Ronin.  If not, see <https://www.gnu.org/licenses/>.
-#
-
-require 'ronin/ui/output/helpers'
-require 'ronin/repository'
-require 'ronin/database'
-
-module Ronin
-  module UI
-    module CLI
-      module Commands
-        #
-        # Runs a Ruby script in the Ronin environment.
-        #
-        # ## Usage
-        #
-        #     ronin exec SCRIPT [ARGS...]
-        #
-        class Exec
-
-          include Output::Helpers
-
-          #
-          # Initializes the `exec` command.
-          #
-          # @param [String] script
-          #   The name or path of the script to run.
-          #
-          # @param [Array<String>] arguments
-          #   The arguments to the script with.
-          #
-          # @since 1.0.0
-          #
-          def initialize(script,arguments=[])
-            @script = script
-            @arguments = arguments
-          end
-
-          #
-          # Runs the `exec` command.
-          #
-          # @param [Array<String>] argv
-          #   The arguments to run the `exec` command with.
-          #
-          def self.start(argv=ARGV)
-            case argv[0]
-            when '-h', '--help', nil
-              puts "Usage:\n  ronin-exec SCRIPT [ARGS...]\n\n"
-              puts "Runs a script from a Ronin Repository"
-              return false
-            end
-
-            self.new(argv[0],argv[1..-1]).execute
-          end
-
-          #
-          # Executes the `exec` command.
-          #
-          # @since 1.0.0
-          #
-          def execute
-            if File.file?(@script)
-              require 'ronin'
-
-              setup_argv { load File.expand_path(@script) }
-              return true
-            end
-
-            Database.setup
-
-            Repository.each do |repo|
-              path = repo.path.join(Repository::BIN_DIR,@script)
-
-              if path.file?
-                require 'ronin'
-
-                repo.activate!
-
-                setup_argv { load path }
-                return true
-              end
-            end
-
-            print_error "Could not find the script #{@script.dump}."
-            return false
-          end
-
-          protected
-
-          #
-          # Temporarily populates the `ARGV` constant.
-          #
-          # @since 1.0.0
-          #
-          def setup_argv
-            original_argv = ARGV.dup
-            ARGV.clear
-            @arguments.each { |arg| ARGV << arg }
-
-            result = yield
-
-            ARGV.clear
-            original_argv.each { |arg| ARGV << arg }
-            return result
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/ronin/ui/cli/commands/fuzzer.rb

@@ -1,306 +0,0 @@
-#
-# Copyright (c) 2006-2021 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This file is part of ronin.
-#
-# Ronin is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# Ronin is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with Ronin.  If not, see <https://www.gnu.org/licenses/>.
-#
-
-require 'ronin/ui/cli/command'
-require 'ronin/fuzzing/repeater'
-require 'ronin/fuzzing/fuzzer'
-
-require 'shellwords'
-require 'tempfile'
-require 'socket'
-
-module Ronin
-  module UI
-    module CLI
-      module Commands
-        #
-        # Performs basic fuzzing of files, commands or TCP/UDP services.
-        #
-        # ## Usage
-        #
-        #     ronin fuzzer [options]
-        #
-        # ## Options
-        #
-        #     -v, --[no-]verbose               Enable verbose output.
-        #     -q, --[no-]quiet                 Disable verbose output.
-        #         --[no-]silent                Silence all output.
-        #         --[no-]color                 Enables color output.
-        #                                      Default: true
-        #     -r [[PATTERN|/REGEXP/]:[METHOD|STRING*N[-M]]],
-        #         --rule                       Fuzzing rules.
-        #     -i, --input [FILE]               Input file to fuzz.
-        #     -o, --output [FILE]              Output file path.
-        #     -c [PROGRAM [OPTIONS|#string#|#path#] ...],
-        #         --command                    Template command to run.
-        #     -t, --tcp [HOST:PORT]            TCP service to fuzz.
-        #     -u, --udp [HOST:PORT]            UDP service to fuzz.
-        #
-        # ## Examples
-        #
-        #     ronin fuzzer -i request.txt -r unix_path:bad_strings -o bad.txt
-        #
-        # @since 1.5.0
-        #
-        class Fuzzer < Command
-
-          summary 'Performs basic fuzzing of files'
-
-          option :input, :type        => String,
-                         :flag        => '-i',
-                         :usage       => 'FILE',
-                         :description => 'Input file to fuzz'
-
-          option :rules, :type        => Hash[String => String],
-                         :flag        => '-r',
-                         :usage       => '[PATTERN|/REGEXP/|STRING]:[METHOD|STRING*N[-M]]',
-                         :description => 'Fuzzing rules'
-
-          option :output, :type        => String,
-                          :flag        => '-o',
-                          :usgae       => 'PATH',
-                          :description => 'Output file path'
-
-          option :command, :type        => String,
-                           :flag        => '-c',
-                           :usage       => 'PROGRAM [OPTIONS|#string#|#path#] ...',
-                           :description => 'Template command to run'
-
-          option :tcp, :type        => String,
-                       :flag        => '-t',
-                       :usage       => 'HOST:PORT',
-                       :description => 'TCP service to fuzz'
-
-          option :udp, :type        => String,
-                       :flag        => '-u',
-                       :usage       => 'HOST:PORT',
-                       :description => 'UDP service to fuzz'
-
-          examples [
-            "ronin fuzzer -i request.txt -o bad.txt -r unix_path:bad_strings"
-          ]
-
-          #
-          # Sets up the fuzz command.
-          #
-          def setup
-            super
-
-            unless rules?
-              print_error "Must specify at least one fuzzing rule"
-              exit -1
-            end
-
-            @rules = Hash[@rules.map { |pattern,substitution|
-              [parse_pattern(pattern), parse_substitution(substitution)]
-            }]
-
-            if output?
-              @file_ext  = File.extname(@output)
-              @file_name = @file.chomp(@file_ext)
-            elsif command?
-              @command = shellwords(@command)
-            elsif (tcp? || udp?)
-              @socket_class = if    tcp? then TCPSocket
-                              elsif udp? then UDPSocket
-                              end
-
-              @host, @port = (@tcp || @udp).split(':',2)
-              @port = @port.to_i
-            end
-          end
-
-          def execute
-            data   = if input? then File.read(@input)
-                     else           $stdin.read
-                     end
-
-            method = if    output?        then method(:fuzz_file)
-                     elsif command?       then method(:fuzz_command)
-                     elsif (tcp? || udp?) then method(:fuzz_network)
-                     else                      method(:print_fuzz)
-                     end
-
-            fuzzer = Fuzzing::Fuzzer.new(@rules)
-            fuzzer.each(data).each_with_index do |string,index|
-              index = index + 1
-
-              method.call(string,index)
-            end
-          end
-
-          protected
-
-          include Shellwords
-
-          #
-          # Writes the fuzzed string to a file.
-          #
-          # @param [String] string
-          #   The fuzzed string.
-          #
-          # @param [Integer] index
-          #   The iteration number.
-          #
-          def fuzz_file(string,index)
-            path = "#{@file_name}-#{index}#{@file_ext}"
-
-            print_info "Creating file ##{index}: #{path} ..."
-
-            File.open(path,'wb') do |file|
-              file.write string
-            end
-          end
-
-          #
-          # Runs the fuzzed string in a command.
-          #
-          # @param [String] string
-          #   The fuzzed string.
-          #
-          # @param [Integer] index
-          #   The iteration number.
-          #
-          def fuzz_command(string,index)
-            Tempfile.open("ronin-fuzzer-#{index}") do |tempfile|
-              tempfile.write(string)
-              tempfile.flush
-
-              arguments = @command.map do |argument|
-                if argument.include?('#path#')
-                  argument.sub('#path#',tempfile.path)
-                elsif argument.include?('#string#')
-                  argument.sub('#string#',string)
-                else
-                  argument
-                end
-              end
-
-              print_info "Running command #{index}: #{arguments.join(' ')} ..."
-
-              # run the command as it's own process
-              unless system(*arguments)
-                status = $?
-
-                if status.coredump?
-                  # jack pot!
-                  print_error "Process ##{status.pid} coredumped!"
-                else
-                  # process errored out
-                  print_warning "Process ##{status.pid} exited with status #{status.exitstatus}"
-                end
-              end
-            end
-          end
-
-          #
-          # Sends the fuzzed string to a TCP/UDP Service.
-          #
-          # @param [String] string
-          #   The fuzzed string.
-          #
-          # @param [Integer] index
-          #   The iteration number.
-          #
-          def fuzz_network(string,index)
-            print_debug "Connecting to #{@host}:#{@port} ..."
-            socket = @socket_class.new(@host,@port)
-
-            print_info "Sending message ##{index}: #{string.inspect} ..."
-            socket.write(string)
-            socket.flush
-
-            print_debug "Disconnecting from #{@host}:#{@port} ..."
-            socket.close
-          end
-
-          #
-          # Prints the fuzzed string to STDOUT.
-          #
-          # @param [String] string
-          #   The fuzzed string.
-          #
-          # @param [Integer] index
-          #   The iteration number.
-          #
-          def print_fuzz(string,index)
-            print_debug "String ##{index} ..."
-
-            puts string
-          end
-
-          #
-          # Parses a fuzz pattern.
-          #
-          # @param [String] string
-          #   The string to parse.
-          #
-          # @return [Regexp, String]
-          #   The parsed pattern.
-          #
-          def parse_pattern(string)
-            case string
-            when /^\/.+\/$/
-              Regexp.new(string[1..-2])
-            when /^[a-z][a-z_]+$/
-              const = string.upcase
-
-              if (Regexp.const_defined?(const) &&
-                  Regexp.const_get(const).kind_of?(Regexp))
-                Regexp.const_get(const)
-              else
-                string
-              end
-            else
-              string
-            end
-          end
-
-          #
-          # Parses a fuzz substitution Enumerator.
-          #
-          # @param [String] string
-          #   The string to parse.
-          #
-          # @return [Enumerator]
-          #   The parsed substitution Enumerator.
-          #
-          def parse_substitution(string)
-            if string.include?('*')
-              string, lengths = string.split('*',2)
-
-              lengths = if lengths.include?('-')
-                          min, max = lengths.split('-',2)
-
-                          (min.to_i .. max.to_i)
-                        else
-                          lengths.to_i
-                        end
-
-              Fuzzing::Repeater.new(lengths).each(string)
-            else
-              Fuzzing[string]
-            end
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/ronin/ui/cli/commands/help.rb

@@ -1,87 +0,0 @@
-#
-# Copyright (c) 2006-2021 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This file is part of ronin.
-#
-# Ronin is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# Ronin is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with Ronin.  If not, see <https://www.gnu.org/licenses/>.
-#
-
-require 'ronin/ui/cli/command'
-require 'ronin/ui/cli/cli'
-require 'ronin/installation'
-
-module Ronin
-  module UI
-    module CLI
-      module Commands
-        #
-        # Displays the list of available commands or prints information on a
-        # specific command.
-        #
-        # ## Usage
-        #
-        #     ronin help [options] COMMAND
-        #
-        # ## Options
-        #
-        #      -v, --[no-]verbose               Enable verbose output.
-        #      -q, --[no-]quiet                 Disable verbose output.
-        #          --[no-]silent                Silence all output.
-        #          --[no-]color                 Enables color output.
-        #
-        # ## Arguments
-        #
-        #      COMMAND                          The command to display
-        #
-        class Help < Command
-
-          summary 'Displays the list of available commands or prints information on a specific command'
-
-          argument :command, :type        => String,
-                             :description => 'The command to display'
-
-          #
-          # Lists the available commands.
-          #
-          def execute
-            if command?
-              name = command.gsub(/^ronin-/,'')
-
-              unless CLI.commands.include?(name)
-                print_error "Unknown command: #{@command.dump}"
-                exit -1
-              end
-
-              man_page = "ronin-#{name.tr(':','-')}.1"
-
-              Installation.paths.each do |path|
-                man_path = File.join(path,'man',man_page)
-
-                if File.file?(man_path)
-                  return system('man',man_path)
-                end
-              end
-
-              print_error "No man-page for the command: #{@command.dump}"
-              exit -1
-            end
-
-            print_array CLI.commands, :title => 'Available commands'
-          end
-
-        end
-      end
-    end
-  end
-end

data/lib/ronin/ui/cli/commands/hosts.rb

@@ -1,177 +0,0 @@
-#
-# Copyright (c) 2006-2021 Hal Brodigan (postmodern.mod3 at gmail.com)
-#
-# This file is part of ronin.
-#
-# Ronin is free software: you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# Ronin is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with Ronin.  If not, see <https://www.gnu.org/licenses/>.
-#
-
-require 'ronin/ui/cli/resources_command'
-require 'ronin/host_name'
-
-module Ronin
-  module UI
-    module CLI
-      module Commands
-        #
-        # Manages {HostName HostNames}.
-        #
-        # ## Usage
-        #
-        #     ronin hosts [options]
-        #
-        # ## Options
-        #
-        #      -v, --[no-]verbose               Enable verbose output.
-        #      -q, --[no-]quiet                 Disable verbose output.
-        #          --[no-]silent                Silence all output.
-        #          --[no-]color                 Enables color output.
-        #          --database [URI]             The Database URI.
-        #          --[no-]csv                   CSV output.
-        #          --[no-]xml                   XML output.
-        #          --[no-]yaml                  YAML output.
-        #          --[no-]json                  JSON output.
-        #      -i, --import [FILE]
-        #      -I, --with-ips [IP [...]]
-        #      -p, --with-ports [PORT [...]]
-        #      -D, --domain [DOMAIN]
-        #      -T, --tld [TLD]
-        #      -l, --[no-]list                  Default: true
-        #      -L, --lookup [IP]
-        #
-        class Hosts < ResourcesCommand
-
-          model HostName
-
-          summary 'Manages HostNames'
-
-          query_option :with_ips, :type        => Array,
-                                  :flag        => '-I',
-                                  :usage       => 'IP [...]',
-                                  :description => 'Searches for the associated IP(s)'
-
-          query_option :with_ports, :type        => Array[Integer],
-                                    :flag        => '-p',
-                                    :usage       => 'PORT [...]',
-                                    :description => 'Searches for the associated PORT(s)'
-
-          query_option :domain, :type        => String,
-                                :flag        => '-D',
-                                :usage       => 'DOMAIN',
-                                :description => 'Searches for the associated parent DOMAIN'
-
-          query_option :tld, :type        => String,
-                             :flag        => '-T',
-                             :usage       => 'TLD',
-                             :description => 'Searches for the associated TLD'
-
-          option :list, :type        => true,
-                        :default     => true,
-                        :flag        => '-l',
-                        :description => 'Lists the HostNames'
-
-          option :lookup, :type        => String,
-                          :flag        => '-L',
-                          :usage       => 'IP',
-                          :description => 'Looks up HostNames for the IP'
-
-          option :import, :type        => String,
-                          :flag        => '-i',
-                          :usage       => 'FILE',
-                          :description => 'Imports HostNames from the FILE'
-
-          #
-          # Queries the {HostName} model.
-          #
-          # @since 1.0.0
-          #
-          def execute
-            if lookup? then lookup(@lookup)
-            else            super
-            end
-          end
-
-          protected
-
-          #
-          # Looks up an IP address.
-          #
-          # @param [String] ip
-          #   The IP address to look up.
-          #
-          # @since 1.0.0
-          #
-          def lookup(ip)
-            print_info "Looking up #{ip} ..."
-
-            HostName.lookup(ip).each do |host|
-              print_info "  #{host}"
-            end
-
-            print_info "Looked up #{ip}"
-          end
-
-          #
-          # Prints a host name.
-          #
-          # @param [HostName] host
-          #   The host name to print.
-          #
-          # @since 1.0.0
-          #
-          def print_resource(host)
-            return super(host) unless verbose?
-
-            print_title host.address
-
-            indent do
-              if (org = host.organization)
-                print_hash 'Organization' => org
-              end
-
-              if (last_scanned_at = host.last_scanned_at)
-                print_hash 'Last Scanned' => last_scanned_at
-              end
-
-              unless host.ip_addresses.empty?
-                print_array host.ip_addresses, :title => 'IP Addresses'
-              end
-
-              unless host.open_ports.empty?
-                print_section 'Open Ports' do
-                  host.open_ports.each do |port|
-                    if port.service
-                      puts "#{port}\t#{port.service}"
-                    else
-                      puts port
-                    end
-                  end
-                end
-              end
-
-              unless host.email_addresses.empty?
-                print_array host.email_addresses, :title => 'Email Addresses'
-              end
-
-              unless host.urls.empty?
-                print_array host.urls, :title => 'URLs'
-              end
-            end
-          end
-
-        end
-      end
-    end
-  end
-end