Ronin 0.1.3 "shake down" Released

After many bug-fixes and testing Ronin 0.1.3, codenamed "shake down", has finally been released. I split out Ronin::Context into the Contextify library. Contextify is very handy for frameworks that want to load objects from Ruby files (without using YAML or defining specially named Classes/Modules). I've also refactored reverse-require, integrating it closer with RubyGems 1.3.0. Again, reverse-require is useful for frameworks that want to have a plugin system, but don't want to mess with the archaic gem_plugin. I eventually hope to get some of the code from reverse-requires merged into RubyGems. The Ronin::Objectify and Ronin::UI::CommandLine modules also got a fresh refactoring.

ronin-sql also received some refactoring love. It's SQL/Injection DSL was rewritten to uses a token emitter / formatter strategy for generating SQL syntax from the DSL. The use of tokens greatly simplified generating complex syntax from an Abstract Syntax Tree (AST).

>> require 'ronin/sql'
=> true
>> puts Code.sql_injection { has_table?(:users) }
AND (SELECT count(*) FROM users) = 1
=> nil

Not only were there updates, but also some libraries released for the very first time. After sitting on github for a while, ronin-exploits and ronin-scanners were finally released.

The ronin-exploits library provides the ability to define exploits and payloads, as well as caching them in Ronin's database. Since ronin-exploits uses Contextify, writing exploits becomes easy and elegant:

# test_exploit.rb
require 'ronin/sessions/tcp'

ronin_exploit do

  extend Sessions::TCP

  self.name = 'test'
  self.version = '0.2'
  self.license = License.cc_by_nc

  self.author(:name => 'postmodern', :organization => 'SophSec')

  def builder
    @buffer = 'some data'
  end

  def deployer
    tcp_send(@buffer)
  end

end

The library also allows one to associate Vulnerability Taxonomy information with Exploits or Payloads.

The ronin-scanners library provides interfaces to various security scanners. Currently, ronin-scanners provides a Rubyful interface to the Nmap network scanner and all of it's options.

>> require 'ronin/scanners'
=> true
>> puts Scanners::Nmap.scan(:targets => 'www.google.com', :ports => [80,21,25], :service_scan => true)
Starting Nmap 4.68 ( http://nmap.org ) at 2009-01-09 16:51 PST
Interesting ports on mh-in-f99.google.com (209.85.173.99):
PORT   STATE    SERVICE VERSION
21/tcp filtered ftp
25/tcp filtered smtp
80/tcp open     http    Google httpd 1.3 (GFE)
Service Info: OS: Linux

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 11.627 seconds
=> nil

The library also uses ScanDB, so that Nmap scan results can be stored or queried using ScanDB's database.

Now that I've completed another round of refactoring and releasing updated libraries, I can focus on other things, such as improving Ronin's website and build a presentation for Ronin. Recently I was invited by evoltech from HackBloc to trek down to the Bay Area and give a mini-presentation on Ronin at this years Hack Meet. Hack Meet is a semi-regular non-corporate hacker meet-up / mini-conference, where hackers gather and share their latest projects.