Skip to content

Releases: ronin-rb/ronin-payloads

0.2.0

22 Jul 20:05
v0.2.0
Compare
Choose a tag to compare
  • Added the Ronin::Payloads::GroovyPayload payload class.
  • Added the Ronin::Payloads::NashornPayload payload class.
  • Added the Ronin::Payloads::Mixins::CCompiler mixin module.
  • Added support for using cross-compilers to Ronin::Payloads::Mixins::CCompiler.
  • Added the libs: keyword argument to Ronin::Payloads::Mixins::CCompiler#compile_c.
  • Alias compile to Ronin::Payloads::Mixins::TypeScript#compile_ts compile_ts in Ronin::Payloads::Mixins::TypeScript.
  • Alias compile to Ronin::Payloads::JavaPayload#compile_java compile_java in Ronin::Payloads::JavaPayload
  • Alias compile to Ronin::Payloads::Mixins::CCompiler#compile_c.
  • Alias compile to Ronin::Payloads::GoPayload#compile_go compile_go in Ronin::Payloads::GoPayload#compile_go.
  • Alias compile to Ronin::Payloads::RustPayload#compile_rust compile_rust in Ronin::Payloads::RustPayload#compile_rust.
  • Default the host param to 0.0.0.0 and the port param to 4444 in Ronin::Payloads::Mixins::ReverseShell.

Payloads

  • Added the php/download_exec payload.
  • Added the cmd/netcat/bindshell payload.
  • Added the cmd/ping payload.
  • Added the cmd/touch payload.
  • Added the test/cmd payload.
  • Added the test/url payload.
  • Added the groovy/reverse_shell payload.
  • Added the cmd/windows/download payload.
  • Added the cmd/zsh/reverse_shell payload.
  • Added the bin/windows/reverse_shell payload.
  • Added the bin/unix/reverse_shell payload.
  • Added the js/nashorn/reverse_shell payload.
  • Added the js/node/reverse_shell payload.

CLI

  • Added the ronin-payloads completion command to install shell completion files for all ronin-payloads commands for Bash and Zsh shells.
  • The ronin-payloads show command can now display an example ronin-payloads build command for the given payload.
  • Renamed the -e option flag to -E in ronin-payloads build.

0.1.6

03 Jul 03:59
v0.1.6
Compare
Choose a tag to compare

Payloads

  • Fixed incompatible character encodings: UTF-8 and ASCII-8BIT exceptions when building shellcode payloads with certain IP addresses or port numbers.

0.1.5

20 Jun 05:39
v0.1.5
Compare
Choose a tag to compare
  • Fixed order of arguments passed to TCPServer.new in Ronin::Payloads::Mixins::ReverseShell#perform_prelaunch which was preventing reverse shells from opening a local TCP server socket.

Payloads

  • Fixed the module namespace for the Ronin::Payloads::CMD::Node::ReverseShell payload (aka cmd/node/reverse_shell).

CLI

  • Automatically create the parent directory of the new payload file, if it doesn't exist, when running ronin-payloads new path/to/new_payload.rb.
  • Fixed typo in ronin-payloads encode man-page for the -E,--encoder option.

0.1.4

19 Sep 22:33
v0.1.4
Compare
Choose a tag to compare

CLI

  • All newly generated payload files using ronin-payloads new should have a
    summary and a description.
  • Fixed a bug where the ronin-payloads new options --author,
    --author-email, or --summary were not properly escaping given values.

0.1.3

12 Jun 13:21
v0.1.3
Compare
Choose a tag to compare

CLI

  • Fixed a bug where ronin-payloads new --type command wasn't being accepted
    as a valid payload type.

0.1.2

10 Jun 00:25
v0.1.2
Compare
Choose a tag to compare
  • Add missing require for Ronin::Payloads::Encoders::Encoder.
  • Added missing descriptions to built-in payloads (@ervinismu).
  • Documentation fixes and improvements.

CLI

  • Fixed the placeholder references URLs in the ronin-payloads new template.
  • Fixed --format html and --format xml to encode every character.

0.1.1

10 Jun 00:24
v0.1.1
Compare
Choose a tag to compare
  • Default the host param defined by Ronin::Payloads::Mixins::BindShell to
    0.0.0.0.

0.1.0

10 Jun 00:23
v0.1.0
Compare
Choose a tag to compare
  • Initial release:
    • Require ruby >= 3.0.0.
    • Provides a succinct syntax and API for writing payloads in as few lines as
      possible.
    • Supports defining Payloads as plain old Ruby classes.
    • Provides base classes for a variety of languages and payload types
      (ASM, Shellcode, C, Go, Rust, Java, JSP, PHP, Python, Ruby, NodeJS, Shell,
      PowerShell, SQL, XML, HTML, URL).
    • Provides built-in common payloads:
      • Command-line reverse shells:
        • Awk
        • Bash
        • Lua
        • NodeJS
        • OpenSSL
        • Perl
        • PHP
        • PowerShell
        • Python
        • Ruby
      • Java
        • Reverse shell
      • PHP
        • Command exec.
      • Shellcode:
        • execve(/bin/sh):
          • Linux (ARM, MIPS, PPC, x86, x86-64)
          • FreeBSD (x86, x86-64)
          • macOS (x86-64)
          • NetBSD (x86)
          • OpenBSD (x86)
        • bind shell:
          • Linux (ARM, MIPS, x86, x86-64)
          • FreeBSD (x86)
          • OpenBSD (x86)
        • reverse shell:
          • Linux (ARM, MIPS, PPC, x86, x86-64)
          • macOS (x86-64)
          • FreeBSD (x86)
          • NetBSD (x86)
    • Supports adding additional encoders to payloads for further obfuscation.
    • Integrates with the Ronin Post-Exploitation library.
    • Provides a simple CLI for building, encoding, launching, and generating new
      payloads.