ronin-rb / ronin-brute Goto Github PK

Add a bruteforcer for the redis protocol.

Release version 0.1.0

Add a --password option to ronin-brute run to match ncrack and hydra. This will allow bruteforcing many users but with the same password.

Add a ronin-brute completion command using Ronin::Core::CLI::CompletionCommand.

Add a command for loading and displaying the metadata/params of a bruteforcer class.

• lib/ronin/brute/bruteforcer.rb
• lib/ronin/brute/http_bruteforcer.rb
• lib/ronin/brute/mailserver_bruteforcer.rb
• lib/ronin/brute/network_bruteforcer.rb
• lib/ronin/brute/ssl_bruteforcer.rb
• lib/ronin/brute/tcp_bruteforcer.rb
• lib/ronin/brute/tls_bruteforcer.rb
• lib/ronin/brute/udp_bruteforcer.rb
• lib/ronin/brute/builtin/ftp.rb
• lib/ronin/brute/builtin/http/basic_auth.rb
• lib/ronin/brute/builtin/http/login.rb
• lib/ronin/brute/builtin/imap.rb
• lib/ronin/brute/builtin/mysql.rb
• lib/ronin/brute/builtin/pop3.rb
• lib/ronin/brute/builtin/ssh.rb
• lib/ronin/brute/builtin/telnet.rb
• lib/ronin/brute/cli/bruteforcer_command.rb
• lib/ronin/brute/cli/commands/list.rb
• lib/ronin/brute/cli/commands/run.rb
• lib/ronin/brute/cli/commands/show.rb

Add a bruteforcer class for PostgreSQL.

require_relative is more efficient than require when requiring local files within the gem. Switching to require_relative might help shave off some milliseconds from load-time.

Redis, and some other services, supports only setting a password. Thus some bruteforcers may not require a list of usernames to bruteforce, only a list of passwords.

Since the Postgres bruteforcer uses the db-postgres gem, the MySQL bruteforcer should also use the db-mysql gem.

The MySQL client library requires an IP address, not a host name. This prevents specifying a hostname for the host param, which is kind of confusing. We should add a method called ip_address that automatically checks whether the host param is already an IP address or a host name. If it's a host name, it should resolve the host name using Support::Network::DNS.get_address().

Add a --username option to ronin-brute run to match ncrack and hydra. This will allow bruteforcing a single user with multiple different passwords.

Add a command for listing all available bruteforcers.

Add a command for loading and running bruteforcer classes.