我的书签
添加书签
移除书签description: ruby for pentesters
RubyFu
Rubyfu, where Ruby goes evil!
This book is a great collection of ideas, tricks, and skills that could be useful for Hackers. It’s a unique extraction reference, summarizes a lot of research and experience in order to achieve your w00t in the shortest and smartest way. Rubyfu is where you’ll find plug-n-hack code. Rubyfu is a book to use not only to read, it’s where ruby goes evil.
Who should read this book?
Ideally, Hackers! Those who have enough experience to hack our world and have at least basics in the Ruby programming language. To get the best benefits of the book, open Rubyfu.net and pin its browser tab. Use the irb/pry interactive interpreter to run the code, or run it as a script. Enhance the code to fit your needs and yeah, tweet the code and its output to @Rubyfu to share it with our awesome community.
Organization of the book
Module 0x0 | Introduction
Module 0x0 is just a smooth start for you, whether you’re a reader, writer, hacker or someone who came to say hi. In this module you’ll find a great start for you as a contributor, where all kinds of contributions are welcome starting from proofreading all the way up to topic writing.
Module 0x1 | Basic Ruby Kung Fu
Module 0x1 is an awesome collection of the most commonly needed string manipulation, extraction and conversion tasks; dealing with real cases that you might face during your hack. Your encoding and data conversion may be a trivial or complex challenge and here we don’t care, we’ll solve it.
Module 0x2 | System Kung Fu
Module 0x2 digs more into system hacking, where system commands, file manipulation, cryptography and generating common hashes are often needed. Getting simple bind and reverse shells with Ruby is a useful skill, no doubt. Almost all mainstream Linux systems are shipped with ruby and if not, no problem, we always have other ways to make use of our knowledge.
Module 0x3 | Network Kung Fu
Module 0x3 dives deeper into network sockets, protocols, packet manipulation, service enumeration and gives us more hacky and awesome code to get the job done. Working with network protocols needs a deeper knowledge of how these protocols work in order to exchange understandable data and yeah, we’ll figure it out right here.
Module 0x4 | Web Kung Fu
Module 0x4 covers web topics. The web is the most common place to share information, making it one of the most delicious places to hack. Web hacking challenges, known for their uniqueness and with many potential technologies within a single page, require a versatile tool with easily adaptable capabilities. Here we’ll learn how to deal with GET & POST requests, web services, databases, APIs and manipulating the browser to make it our soldier.
Module 0x5 | Exploitation Kung Fu
Module 0x5 builds your exploitation abilities with Ruby. Whatever the vulnerability may be, remote (FTP, IMAP, SMTP, etc.) or local (file format, local system) you’ll need to know how to build fuzzers and skeleton exploits for it. If you get there you’ll need a simple, clean and stable way to build your exploit. Here you’ll learn how to build your fuzzer, exploit, and port your exploit to Metasploit — and even how to write your own Metasploit modules too.
Module 0x6 | Forensic Kung Fu
Module 0x6 explores forensic capabilities with Rubyfu. Whoever you are: redteam, blueteam, or in-between you’ll need some forensic skills in your hack and/or investigation. Here you’ll learn more about how to deal with registry tasks, extracting browser information, and much more.
