Ronin

A hacking-environment for the rest of us.

Project Philosophy

• Best practices == happy developers.
  • Not a monolithic framework, a modular platform of libraries.
  • Packaged with RubyGems.
  • Extensive code documentation with RDoc.
  • Spec tests with RSpec.
  • Hosted on GitHub, where all the cool kids are at.
• Convenience methods help you do more in one line of code.
• You shouldn’t have to write out ASM, HTML or SQL by hand while crafting payloads. Use Ronin’s Domain Specific Languages (DSLs) to generate everything in Ruby. No need to switch between languages.
• If you can land code (read: execute) on it, Ronin can inject a custom Remote Procedure Call (RPC) server to execute future method calls or even load additional code. One shouldn’t need to always generate complex payloads to do everything all at once, when you can simple inject an RPC server and start sending it method calls.

Tour

The main Ronin git repository hosts the core code-base of Ronin, which provides convenience methods, the ability to checkout/update overlays, a command-line utility and a customized IRB console.

All of the other specific functionality for defining Exploits and Payloads, exploiting SQL Injections or PHP LFI/RFI vulnerabilities lives in other Ronin git repositories:

• ronin-exploits – Ronin Exploits is a Ruby library for Ronin that provides exploitation and payload crafting functionality.
• ronin-asm – Ronin ASM is a Ruby library for Ronin that provides dynamic Assembly (ASM) generation of programs or shellcode.
• ronin-sql – Ronin SQL is a Ruby library for Ronin that provids support for SQL related security tasks, such as scanning for and exploiting SQL injections.
• ronin-php – Ronin PHP is a Ruby library for Ronin that provides support for PHP related security tasks, such as finding and exploiting Local File Inclusion (LFI) and Remote File Inclusion (RFI).
• ronin-dorks – Ronin Dorks is a Ruby library for Ronin that provides support for various Google™ Dorks functionality.

Coding Style Guide-Lines

If you wish to write code or submit patches to Ronin, it is recommended that you checkout the official Ronin coding style guide-lines.