violent_ruby 1.0.2 → 1.0.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 78327ef750cd644b89bd5d50896b26c2ca5dd0b2
-  data.tar.gz: '023914456dbb398ff1e69d7396d7449607ffc4e5'
+  metadata.gz: 36df46fac3b5e765196fd4c99a078c58205bec12
+  data.tar.gz: a74b82b5fa060d884c57eb4597ab8ee2cd53bbf2
 SHA512:
-  metadata.gz: afeb2b8210ab525feb7aac6fb3aeb551d3658199269254844152dc9602fd768b87a24ac3ddb1f86e368a3f09040562b58e38092d1c1df46c70225c4d9bae7aae
-  data.tar.gz: 06cf309dabfd9830956c243e59251ab5e63171e58b4efb3c7d8da88efbebb54a1f75d3aad88648051a2550a6426bd7ead4abb5d4592fa6411414c2e7f06e7587
+  metadata.gz: 0cc15bf5760f8c1ad417b4fe3c8a5a622042fb34c887d522eff189484cbd6f0c2d0f08fcece08c19f6098c1bec2ff70ee46b4a82dce4fd2ea398e06c7c8a6e2a
+  data.tar.gz: 951d7386d81bb0829220d2694dd64bbcfce3fd61ff5fdb03fb9b4fb771cb8dbefa1c94b9854c365772b50faab5af5974974a1c4f5d200f2d8edd57323b568de9

data/README.md

@@ -16,6 +16,18 @@ Violent Ruby is a collection of tools for Hackers, Forensic Analysts, Penetratio
 require 'violent_ruby'
 ```
 
+### Banner Grabber
+
+The banner grabber provides a simple interface to do a banner grab.
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new(ip: 'localhost', port: 2222)
+banner_grabber.grab do |result|
+  # do something with result
+end
+```
+
 ### Vulnerability Scanner
 
 The vulnerability scanner is a banner grabber that can check banners on ports and check if they're known to be vulnerable. However, you will need to provide the list of known vulnerable banners yourself.

data/lib/violent_ruby/banner_grabber/README.md

@@ -0,0 +1,66 @@
+# Vulnerability Scanner
+
+The vulnerability scanner class provides a simple way to check if service banners match a list of known vulnerabilities.
+
+## Initialization
+
+The Vulnerability Scanner scanner class can be setup in a few flexible ways.
+
+### Basic Setup
+
+Provide no targets, ip addresses or ports.
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new
+```
+
+### Provide Some IP Addresses with Setup
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new(ips: ['10.0.0.2', '10.0.0.3'])
+```
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new(ip: '10.0.0.2')
+```
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new
+banner_graber.ips = ['10.0.0.2', '10.0.0.3']
+```
+
+### Provide Some Ports with Setup
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new(ports: [22, 2222])
+```
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new(port: 2222)
+```
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new
+banner_grabber.ports = [22, 2222]
+```
+
+## Banner Grabbing
+
+```ruby
+require 'violent_ruby'
+banner_grabber = ViolentRuby::BannerGrabber.new(ip: 'localhost', port: 2222)
+banner_grabber.grab do |result|
+  # do something with result
+  ip_address = result[:ip]
+  port       = result[:port]
+  banner     = result[:banner]
+  puts "#{ip}:#{port} --> #{banner}" if result[:open] and result[:banner]
+end
+```

data/lib/violent_ruby/banner_grabber/banner_grabber.rb

@@ -0,0 +1,150 @@
+require 'socket'
+
+module ViolentRuby
+  # This Banner Grabber class is meant to provide a simple
+  # interface to, well... grab banners from services running
+  # on a target to determine the potential attack vectors
+  # avaialable to you.
+  # @author Kent 'picat' Gruber
+  #
+  # @example Basic Usage
+  #   BannerGrabber.new(ip: 'localhost', port: 22).grab do |result|
+  #     puts result
+  #     # => {:ip=>"localhost", :port=>22, :open=>false}
+  #   end
+  #
+  # @example Basic Usage with HTTP Connection
+  #   BannerGrabber.new(ip: '0.0.0.0', port: 4567 http: true).grab do |result|
+  #     puts result
+  #     # => => {:ip=>"0.0.0.0", :port=>4567, :open=>true, :banner=>""}
+  #   end
+  #
+  # @example Advanced Usage
+  #   banner_grabber = BannerGrabber.new
+  #   banner_grabber.ips   = ['192.168.0.2', '192.168.0.3']
+  #   banner_grabber.ports = [22, 2222]
+  #   banner_grabber.grab do |result|
+  #     puts result
+  #     # => {:ip=>"192.168.0.2", :port=>22, :open=>true, :banner=>"SSH-2.0-OpenSSH_6.7p1 Debian-5+deb8u3\r\n"}
+  #   end
+  #
+  class BannerGrabber
+    # @attr ips [Arrray<String>, nil] Target IP Addresses.
+    attr_accessor :ips
+    # @attr ports [Arrray<Integer>, nil] Target ports.
+    attr_accessor :ports
+
+    # Create a new Banner Grabber. If a block if given,
+    # @param args [Hash]
+    # @option args [String] :ip IP address to connect to.
+    # @option args [Array<String>] :ips An array of IP address to connect to.
+    # @option args [Integer] :port Port to connect to.
+    # @option args [Array<Integer>] :ports An array of ports to connect to.
+    # @see use_ips
+    # @see use_ports
+    # @return [void]
+    # @yield [Hash]
+    def initialize(args = {})
+      @ips   = use_ips(args)   if args[:ips]   || args[:ip]
+      @ports = use_ports(args) if args[:ports] || args[:port]
+    end
+
+    # Attempt to grab the banner. Optionally, an HTTP option
+    # can help simulate HTTP GET requests to a webserver.
+    # @param args [Hash]
+    # @option args [Boolean] :http Perform an HTTP GET request.
+    # @see use_ips
+    # @see use_ports
+    # @yield [Hash]
+    def grab(args = {})
+      ips   = use_ips(args)
+      ports = use_ports(args)
+      ips.each do |ip|
+        ports.each do |port|
+          if socket = connect(ip, port)
+            if args[:http]
+              socket.puts("GET / HTTP/1.1\r\nHost:3.1.3.3.7\r\n\r\n")
+            end
+            unless banner = socket.recv(1024)
+              banner = false
+            end
+          end
+          if socket
+            yield format_result(ip, port, true, banner)
+            socket.close
+          else
+            yield format_result(ip, port, false)
+          end
+        end
+      end
+    end
+
+    # Because sometimes you need to say it with more emphasis!
+    alias grab! grab
+
+    # Connect to a given IP address and port.
+    # @param ip [String]
+    # @param port [Integer]
+    # @return [TCPSocket, false]
+    def connect(ip, port)
+      TCPSocket.new(ip, port)
+    rescue
+      false
+    end
+
+    private
+
+    # @api private
+    # Format the result for a banner grab.
+    # @param ip [String] IP address associated with the result.
+    # @param port [Integer] Port associated with the result.
+    # @param open [Boolean] If the port/connection was open to connect to.
+    # @param banner [String, Boolean] If a banner was able to be retrieved.
+    # @see grab
+    # @return [Hash]
+    def format_result(ip, port, open = false, banner = false)
+      result = { ip: ip, port: port }
+      result[:open]   = open
+      result[:banner] = banner if banner
+      result
+    end
+
+    # @api private
+    # Determine what IP address(es) to use from a given arguments hash.
+    # @param args [Hash]
+    # @option args [String] :ip IP address to connect to.
+    # @option args [Array<String>] :ips An array of IP address to connect to.
+    # @return [Array<String>]
+    # @raise [StandardError] If no IP address(es) can be determined.
+    def use_ips(args)
+      if args[:ips]
+        args[:ips]
+      elsif args[:ip]
+        [args[:ip]]
+      elsif @ips
+        @ips
+      else
+        raise 'No IP address(es) given!'
+      end
+    end
+
+    # @api private
+    # Determine what port(s) to use from a given arguments hash.
+    # @param args [Hash]
+    # @option args [Integer] :port Port to connect to.
+    # @option args [Array<Integer>] :ports An array of ports to connect to.
+    # @return [Array<Integer>]
+    # @raise [StandardError] If no ports(s) can be determined.
+    def use_ports(args)
+      if args[:ports]
+        args[:ports]
+      elsif args[:port]
+        [args[:port]]
+      elsif @ports
+        @ports
+      else
+        raise 'No port(s) given!'
+      end
+    end
+  end
+end

data/lib/violent_ruby/version.rb

@@ -1,3 +1,3 @@
 module ViolentRuby
-  VERSION = "1.0.2"
+  VERSION = "1.0.3"
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: violent_ruby
 version: !ruby/object:Gem::Version
-  version: 1.0.2
+  version: 1.0.3
 platform: ruby
 authors:
 - Kent Gruber
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-04-08 00:00:00.000000000 Z
+date: 2017-04-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: net-ssh
@@ -99,6 +99,8 @@ files:
 - Rakefile
 - bin/python_sucks
 - lib/violent_ruby.rb
+- lib/violent_ruby/banner_grabber/README.md
+- lib/violent_ruby/banner_grabber/banner_grabber.rb
 - lib/violent_ruby/ftp_brute_forcer/README.md
 - lib/violent_ruby/ftp_brute_forcer/Vagrantfile
 - lib/violent_ruby/ftp_brute_forcer/ftp_brute_forcer.rb