Ruby

AWINRM is an advanced WinRM post-exploitation framework designed specifically for red teams and offensive research, implemented in Ruby. Its primary use case revolves around facilitating efficient post-exploitation activities with features like built-in tool staging, automated AMSI/ETW bypasses, stealth file transfers, and automatic loot extraction, addressing common challenges encountered in traditional WinRM tools. The framework provides a streamlined operator-centric workflow that enhances operational security and supports automated reconnaissance and credential gathering.

Windfall is an exploitation framework that targets critical vulnerabilities in Windmill and Nextcloud Flow, specifically focusing on unauthenticated path traversal and authenticated SQL injection vulnerabilities. Its primary use case is to demonstrate how these vulnerabilities can lead to credential leaks and remote code execution, thereby enabling an attacker to exploit the affected systems. Notable features include a comprehensive assessment of the vulnerabilities' impact with high CVSS scores and detailed analysis of attack vectors, enhancing the tool's utility for security researchers and penetration testers.

The OpenVAS add-on for Dradis facilitates the integration of OpenVAS vulnerability assessment results into the Dradis framework by allowing users to upload OpenVAS XML files. Its primary use case is to create a structured representation of security findings, including nodes and notes corresponding to hosts, ports, and services. Notable features include support for OpenVAS v6 and v7 output, enhancing the usability of security reports within Dradis CE and Dradis Pro environments.

RABID is a command-line interface tool and library designed for the rapid decoding of various BigIP cookie formats. It supports all four standard cookie formats, making it a versatile option for cybersecurity professionals dealing with BigIP environments, and is designed to be extendable for advanced use cases. Notable features include its hackable nature and comprehensive support for BigIP cookies.

PWN is an open-source Ruby toolkit designed for offensive security automation, integrating various tools used in OSINT, network scanning, and vulnerability testing within a single workspace. Its primary use case is to streamline red teaming and pentesting efforts by providing a unified framework that supports automation through a tool-calling AI agent and a flexible plugin architecture. Notable features include 66 plugins, support for multiple LLM engines, and a feedback loop system that learns from previous mistakes, enhancing the efficiency of security assessments.

BinData is a Ruby library designed for declaratively reading and writing structured binary data, offering a more elegant and readable alternative to the traditional `#pack` and `#unpack` methods. It simplifies the process of defining data formats, supporting common primitive types and built-in handling for dependent and variable length fields. This tool is particularly useful for developers working with intricate binary data structures who seek to improve code clarity and maintainability.

The msf-auxiliarys repository contains a collection of custom Metasploit auxiliary post-modules designed for post-exploitation tasks. Its primary use case is to enhance the capabilities of Metasploit by providing additional functionalities that facilitate common post-exploitation procedures. Notable features include ease of installation and integration with the Metasploit database, making it a valuable resource for security professionals.

Leprechaun is a penetration testing tool that facilitates the identification of valuable targets within an internal network by aggregating netstat results from multiple hosts. Its primary use case involves analyzing network traffic connections to uncover potential vulnerabilities and traffic patterns, and it features command-line options to specify output files, ports of interest, and IP address types. Notable features include the ability to output detailed connection statistics organized by server and traffic destination ports, enhancing visibility for security assessments.

yaCTFpl is a structured CTF (Capture The Flag) playbook designed to compile common attack and reconnaissance techniques into workflows, organized under a three-part methodology: Enumerate, Exploit, and Post-Exploit. This tool aims to fill the gap in existing resources by emphasizing process and methodology rather than just a list of commands, making it particularly useful for those familiar with command-line operations in Kali Linux or Parrot. Additionally, the project supports PDF generation for offline reading, enhancing its accessibility as a reference manual.

ctf-party is a command-line interface (CLI) tool and library designed for Capture The Flag (CTF) participants and security professionals, streamlining the process of scripting and exploit writing. It enhances Ruby's String class with concise methods for common coding tasks, like encoding and decoding, thus minimizing the need for extensive code and dependencies. Notable features include a range of easy-to-use commands that perform various encoding and transformation operations, making it particularly useful for rapid development in CTF contexts.

ronin-payloads is a Ruby micro-framework designed for constructing and executing exploit payloads as plain Ruby classes, providing a modular and user-friendly alternative to tools like msfvenom. It supports a variety of languages and payload types, facilitates cross-compilation, and includes built-in common payloads for reverse and bind shells across multiple operating systems. Noteworthy features include a simple command-line interface, extensive documentation and test coverage, and the flexibility to host additional payloads in separate repositories, promoting decentralized usage.

ronin-support is a Ruby library that enhances core Ruby functionality with various extensions tailored for security research and development, integrating features akin to pwntools and ActiveSupport. It provides user-friendly APIs for handling binary data manipulation, encoding, cryptography, and networking protocols, along with utilities for text processing and archive management. Notably, it has a small memory footprint, high documentation coverage, and extensive test coverage, making it a robust tool for developing security-related applications.

ronin-recon is a micro-framework designed for efficient reconnaissance operations, utilizing multiple asynchronous workers to process various value types like IPs, hosts, and URLs. It features built-in recon capabilities such as DNS lookup, web spidering, and service scanning, and allows for the integration of additional third-party modules. Its unique queue architecture enhances performance, while support for multiple output formats and automatic result saving to a database makes it a versatile tool for cybersecurity practitioners.

SQLi-Hunter is an HTTP/HTTPS proxy server that serves as a wrapper for the SQLMAP API, designed to simplify the process of detecting SQL injection vulnerabilities. Its primary use case is to facilitate web application testing by providing tools for sending requests through a proxy, while also offering configurability for SQLMAP injection techniques, threading, and user-agent customization. Notable features include Docker support for easy deployment, the ability to persist output files, and various options to target specific hosts and adjust testing parameters.

`still_active` is a dependency auditing tool that evaluates the maintenance status of packages across multiple ecosystems, including Ruby, npm, PyPI, Cargo, and more, by identifying archived repositories, lack of recent releases, and vulnerabilities that remain unpatched. Its notable features include last-commit activity checks, OpenSSF scorecard evaluations, and detection of “poison-pill” dependencies that may hinder security updates. This tool serves as a complementary addition to existing package management solutions by proactively highlighting risks associated with outdated or abandoned dependencies.

URLCrazy is an OSINT tool designed for generating and testing domain typos and variations to identify instances of typo squatting, URL hijacking, phishing, and corporate espionage. Notable features include support for 17 types of domain variants, over 8000 common misspellings, compatibility with 1500+ Top Level Domains, and options for popularity estimation and keyboard layout configurations. The tool automates the detection of potential threats against domains by checking the validity and usage of generated typo variants.

VBSmin is a VBScript minifier designed to optimize script files by removing unnecessary whitespace and comments, thus reducing overall file size. Its primary use case includes enhancing efficiency in scenarios like SQL injection and cross-site scripting, where compact scripts are essential for stealth and execution speed. Notable features include the ability to condense multi-line scripts into a single line and eliminate various types of whitespace and comments, making it a valuable tool for developers working with VBScript in the context of security exploitation.

ronin-exploits is a Ruby micro-framework designed for the creation and execution of exploit code, allowing exploits to be implemented as Ruby classes. Its primary use case is to simplify the process of writing exploits while providing a modular structure similar to Metasploit, featuring support for various exploit types such as stack overflows, command injections, and cross-site scripting. Notable features include a succinct API, the ability to load exploits from Ruby files or external git repositories, and a minimal memory footprint, making it efficient for security research and development.

ronin-vulns is a Ruby library designed for blind vulnerability testing, specifically targeting various web application vulnerabilities such as Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL Injection (SQLi), reflective Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects. Its notable features include support for testing multiple parameter types (query parameters, HTTP headers, cookies, and form parameters), along with high documentation and test coverage metrics, making it a robust tool for security researchers and developers within the ronin-rb project framework.

The Dradis Burp plugin facilitates the integration of Burp Scanner XML export files into the Dradis framework, enhancing reporting and collaboration capabilities for security assessments. It requires either Dradis Community Edition version 3.0 or higher, or Dradis Pro, enabling users to efficiently manage and visualize the results from their Burp Suite scans. Notable features include compatibility with both Dradis versions and streamlined file uploads, allowing for better organization of findings.

HAITI is a command-line interface (CLI) tool and library designed for identifying over 675 types of hash algorithms, including modern algorithms like SHA3, Keccak, and Blake2. Its primary use case is for cybersecurity professionals needing to determine hash types quickly, and it features references for integration with tools such as Hashcat and John the Ripper, along with a hackable architecture for customization.

KillShot is a comprehensive penetration testing framework designed for information gathering and website vulnerability scanning. Its primary use case involves automating data collection through integrated tools such as WhatWeb and Nmap, while offering features like a CMS Exploit Scanner and web application vulnerability assessments, including XSS and SQL injection detection. The framework also facilitates backdoor generation and includes a fuzzer, making it a versatile tool for security professionals.

Krane is a Kubernetes RBAC static analysis tool designed to identify security risks within K8s RBAC configurations and provide mitigation suggestions. Key features include a customizable set of built-in and user-defined risk rules, a user-friendly dashboard for visualizing RBAC posture, continuous analysis capabilities within clusters, and integration with Slack for alerting on significant risks. Additionally, Krane offers reporting in machine-readable formats and can be deployed locally, within CI/CD pipelines, or as a standalone service.

Ronin is an open-source Ruby toolkit designed for security research and development, featuring a comprehensive suite of CLI commands and libraries tailored for various security tasks such as data encoding/decoding, vulnerability scanning, fuzzing, and reconnaissance. Notable features include a fully-loaded Ruby REPL, a lightweight web UI for database interaction, and the ability to install and run third-party exploits or payloads. This tool is primarily used by security researchers, bug bounty hunters, and developers for efficient data processing and rapid script prototyping.

A collection of reverse engineered Apple things, as well as a machine-readable database of Apple hardware

A static analysis security vulnerability scanner for Ruby on Rails applications

Patch-level verification for Bundler

Vagrant VirtualBox environment for conducting an internal network penetration test

Dradis Framework: Collaboration and reporting for IT Security teams

The ultimate WinRM shell for hacking/pentesting

A query aggregator for OSINT based threat hunting

The best tool for finding one gadget RCE in libc.so.6

:orange_book: Markdown Templates for Offensive Security OSCP, OSWE, OSCE, OSEE, OSWP exam report

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.

Username tools for penetration testing

WPScan WordPress security scanner. Written for security professionals and blog maintainers to test the security of their WordPress websites. Contact us via contact@wpscan.com