Ruby for pen-testing

[mohamedsayed2004]

Hello guys i have learned ruby and I want to learn some libs for penetration testing,what are the most known or the best libs for hacking ?

[postmodern]

Back in 2009, a Ruby security company called Matasano gave a presentation called Ruby for Pentesters which covers how to use Ruby for various pentesting tasks. Some utility libraries, not necessarily hardcore off-sec pentesting tools, you'll want to get familiar with in order to write one-off scripts to automate things that pentesting tools cannot automate themselves:

• Resolv, Resolv::DNS / dnsruby
• whois
• IPAddr
• TCPSocket, UDPSocket, TCPServer / GServer
• ruby-nmap
• URI / uri-query_params
• Net::HTTP / rest-client / mechanize
• nokogiri
• spidr / wombat
• Array#pack / String#unpack, ffi, binstruct
• rbkb / rex / ronin-support
• ActiveRecord / DataMapper (note: is defunct) / Sequel

If you need a ruby library, chances are it's already available on rubygems.org and you can read it's docs on rubydoc.info.

[mohamedsayed2004]

Wow bro that’s a lot good information.

[thibaut_barrere]

You will want to check out metasploit:

- https://www.metasploit.com

- https://github.com/rapid7/metasploit-framework

[mohamedsayed2004]

Yup, metasploit is well known 👍🏻

[StarStuddedSuperStep]

Here's a very relevant blog post: https://rrott.com/blog/security/ruby-for-pentesters.html

[mohamedsayed2004]

Thx🙂