[HN Gopher] Ronin 2.0 - open-source Ruby toolkit for security re...
___________________________________________________________________
Ronin 2.0 - open-source Ruby toolkit for security research and
development
Author : shaicoleman
Score : 153 points
Date : 2023-02-02 12:13 UTC (10 hours ago)
(HTM) web link (ronin-rb.dev)
(TXT) w3m dump (ronin-rb.dev)
| Alifatisk wrote:
| "tl;dr: It's like a simpler and more modular version of
| Metasploit"
|
| I love this!
| aliqot wrote:
| metasploit was at one point the world's largest ruby codebase,
| back when it was still on SVN :)
| postmodern_mod3 wrote:
| It might still be. The original metasploit developers had a
| habit of vendoring all of their dependencies to create a
| mono-repo that "just worked" (tm), even after Bundler was
| created, which beefed up their SLoC count. Plus there's lots
| of miscellaneous supporting code that was added for various
| past exploits. However, while some see "largest Ruby
| codebase" as bragging rights, wise Software Engineers will
| see that as a liability to be avoided.
| iamsanteri wrote:
| What are the equivalents in Python ecosystem?
| postmodern_mod3 wrote:
| There is not a Python equivalent to Ronin as a whole, to my
| knowledge. There are however Python libraries that provide some
| of the features of Ronin. For example, pwntools can be used for
| packing binary data and generating shellcode for exploits,
| however it is more of a library instead of an exploit framework
| (frameworks run 3rd party code and manage the control flow) and
| has a fairly minimal API when compared to Ronin's many
| libraries. There are also dozens of bespoke Python exploit
| "frameworks" on GitHub, but none of them that I've seen support
| installing 3rd party repositories of exploits. The scope of
| Ronin is much bigger than just an exploit framework or
| vulnerability scanner. YMMV
___________________________________________________________________
(page generated 2023-02-02 23:02 UTC)