Skip to content

Latest commit

 

History

History
156 lines (125 loc) · 5.15 KB

ChangeLog.md

File metadata and controls

156 lines (125 loc) · 5.15 KB

0.2.0 / 2024-07-22

  • Added the {Ronin::Payloads::GroovyPayload} payload class.
  • Added the {Ronin::Payloads::NashornPayload} payload class.
  • Added the {Ronin::Payloads::Mixins::CCompiler} mixin module.
  • Added support for using cross-compilers to {Ronin::Payloads::Mixins::CCompiler}.
  • Added the libs: keyword argument to {Ronin::Payloads::Mixins::CCompiler#compile_c}.
  • Alias compile to {Ronin::Payloads::Mixins::TypeScript#compile_ts compile_ts} in {Ronin::Payloads::Mixins::TypeScript}.
  • Alias compile to {Ronin::Payloads::JavaPayload#compile_java compile_java} in {Ronin::Payloads::JavaPayload}
  • Alias compile to {Ronin::Payloads::Mixins::CCompiler#compile_c}.
  • Alias compile to {Ronin::Payloads::GoPayload#compile_go compile_go} in {Ronin::Payloads::GoPayload#compile_go}.
  • Alias compile to {Ronin::Payloads::RustPayload#compile_rust compile_rust} in {Ronin::Payloads::RustPayload#compile_rust}.
  • Default the host param to 0.0.0.0 and the port param to 4444 in {Ronin::Payloads::Mixins::ReverseShell}.

Payloads

  • Added the php/download_exec payload.
  • Added the cmd/netcat/bindshell payload.
  • Added the cmd/ping payload.
  • Added the cmd/touch payload.
  • Added the test/cmd payload.
  • Added the test/url payload.
  • Added the groovy/reverse_shell payload.
  • Added the cmd/windows/download payload.
  • Added the cmd/zsh/reverse_shell payload.
  • Added the bin/windows/reverse_shell payload.
  • Added the bin/unix/reverse_shell payload.
  • Added the js/nashorn/reverse_shell payload.
  • Added the js/node/reverse_shell payload.

CLI

  • Added the ronin-payloads completion command to install shell completion files for all ronin-payloads commands for Bash and Zsh shells.
  • The ronin-payloads show command can now display an example ronin-payloads build command for the given payload.
  • Renamed the -e option flag to -E in ronin-payloads build.

0.1.6 / 2024-07-01

Payloads

  • Fixed incompatible character encodings: UTF-8 and ASCII-8BIT exceptions when building shellcode payloads with certain IP addresses or port numbers.

0.1.5 / 2024-06-19

  • Fixed order of arguments passed to TCPServer.new in {Ronin::Payloads::Mixins::ReverseShell#perform_prelaunch} which was preventing reverse shells from opening a local TCP server socket.

Payloads

  • Fixed the module namespace for the {Ronin::Payloads::CMD::Node::ReverseShell} payload (aka cmd/node/reverse_shell).

CLI

  • Automatically create the parent directory of the new payload file, if it doesn't exist, when running ronin-payloads new path/to/new_payload.rb.
  • Fixed typo in ronin-payloads encode man-page for the -E,--encoder option.

0.1.4 / 2023-09-19

CLI

  • All newly generated payload files using ronin-payloads new should have a summary and a description.
  • Fixed a bug where the ronin-payloads new options --author, --author-email, or --summary were not properly escaping given values.

0.1.3 / 2023-06-12

CLI

  • Fixed a bug where ronin-payloads new --type command wasn't being accepted as a valid payload type.

0.1.2 / 2023-06-09

  • Add missing require for {Ronin::Payloads::Encoders::Encoder}.
  • Added missing descriptions to built-in payloads (@ervinismu).
  • Documentation fixes and improvements.

CLI

  • Fixed the placeholder references URLs in the ronin-payloads new template.
  • Fixed --format html and --format xml to encode every character.

0.1.1 / 2023-03-01

  • Default the host param defined by {Ronin::Payloads::Mixins::BindShell} to 0.0.0.0.

CLI

  • Fixed multiple bugs in the --param option of the ronin-payloads encode comand.
  • Fixed multiple bugs in the --encoder-param option of the ronin-payloads build command.

0.1.0 / 2023-02-01

  • Initial release:
    • Require ruby >= 3.0.0.
    • Provides a succinct syntax and API for writing payloads in as few lines as possible.
    • Supports defining Payloads as plain old Ruby classes.
    • Provides base classes for a variety of languages and payload types (ASM, Shellcode, C, Go, Rust, Java, JSP, PHP, Python, Ruby, NodeJS, Shell, PowerShell, SQL, XML, HTML, URL).
    • Provides built-in common payloads:
      • Command-line reverse shells:
        • Awk
        • Bash
        • Lua
        • NodeJS
        • OpenSSL
        • Perl
        • PHP
        • PowerShell
        • Python
        • Ruby
      • Java
        • Reverse shell
      • PHP
        • Command exec.
      • Shellcode:
        • execve(/bin/sh):
          • Linux (ARM, MIPS, PPC, x86, x86-64)
          • FreeBSD (x86, x86-64)
          • macOS (x86-64)
          • NetBSD (x86)
          • OpenBSD (x86)
        • bind shell:
          • Linux (ARM, MIPS, x86, x86-64)
          • FreeBSD (x86)
          • OpenBSD (x86)
        • reverse shell:
          • Linux (ARM, MIPS, PPC, x86, x86-64)
          • macOS (x86-64)
          • FreeBSD (x86)
          • NetBSD (x86)
    • Supports adding additional encoders to payloads for further obfuscation.
    • Integrates with the Ronin Post-Exploitation library.
    • Provides a simple CLI for building, encoding, launching, and generating new payloads.