@Rubyfu

#Rubyfu, where Ruby goes evil! Send us your Ruby tool to tweet about it! Black Hat Ruby https://xitter.cf/t.co/bqH1BdSFMS

 In your exploit, hacker ;)
Rubyfu.net
Joined November 2010
  • Tweets598
  • Following0
  • Followers1.2K
90Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Sounds cool!
Mr. Rc
@rcx8613 Feb 2024
this is the CODE for a ruby program which generates a Rust program that generates a Scala program that generates ...(through 128 languages in total)... a REXX program that generates the original Ruby code again
321
Great tool for red teaming
Óscar Alfonso Díaz@OscarAkaElvis21 Apr 2023
Evil-WinRM v3.5 released! a complete refactor on upload/download functions to make them work like a charm, allowing relative/absolute paths and wildcards. Docker supports remote path completion and more improvements! github.com/Hackplayers/evil-… #evilwinrm #winrm #hacking #pentesting

GitHub - Hackplayers/evil-winrm: The ultimate WinRM shell for hacking/pentesting

The ultimate WinRM shell for hacking/pentesting. Contribute to Hackplayers/evil-winrm development by creating an account on GitHub.

github.com
3
396
Black Hat Ruby — Offensive Ruby programming book for hackers & pentesters Available on Amazon, Order your copy Now! amazon.com/dp/B08JHSF6GT #BlackHatRuby #Rubyfu #BlackHat #Ruby #Redteam
Book Cover, foreword (@muts) & coverword (@hdmoore)

ALT Book Cover, foreword (@muts) & coverword (@hdmoore)

Table of Content

ALT Table of Content

53
166
28
584
Replying to @dev_null321
Please share your experience and code while learning
1
163
I haven't used Ruby in years , so I'm excited for this book! @Rubyfu
1
2
6
942
Added more web servers (Webrick, Iodine and agoo) rubyfu.net/module-0x4-or-web… #Rubyfu #Ruby
4
175
Have you needed to generate a jitter value? Jitter: the percentage or randomization for a specific value. Meaning if for example 10% is set and the sleep time was 60s the delay would be anything from 54-66s of sleep #Rubyfu #Ruby
1
3
ronin-vulns now has CLI commands which you can use to scan URLs for various web vulnerabilities (LFI, RFI, SQLi, SSTI, open redirect, reflected XSS). Still needs some ANSI coloring for the output, though. github.com/ronin-rb/ronin-vu… #Rubyfu #Pentesting #Ruby

GitHub - ronin-rb/ronin-vulns: Tests URLs for Local File Inclusion (LFI), Remote File Inclusion...

Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects. - ronin-rb...

github.com
2
4
bqm: Deduplicate custom BloudHound queries from different datasets and merges them in one customqueries.json file. github.com/noraj/bqm #Rubyfu #BloodHound #RedTeam

GitHub - noraj/bqm: Deduplicate custom BloudHound queries from different datasets and merge them in...

Deduplicate custom BloudHound queries from different datasets and merge them in one customqueries.json file. - noraj/bqm

github.com
1
2
Checkmarx Software Composition Analysis (SCA) added support for #Ruby 💎 checkmarx.com/blog/checkmarx… @postmodern_mod3 @Rubyfu

Checkmarx SCA Now Supports the Ruby Language

We are proud to announce that Checkmarx SCA now allows for vulnerability analysis in Ruby code dependencies. For us, supporting another programming language allows the coverage of a wider range of...

checkmarx.com
2
1
Ruby InfoSec Server: A Discord server focuses on Security and Ruby (both using Ruby for InfoSec and security issues involving Ruby). Join Now: discord.gg/F3e2nB2Mfw #Rubyfu #Ruby #Discord

Join the Ruby InfoSec Discord Server!

Community and resources for those using or wanting to use Ruby for InfoSec or Cyber Security | 97 members

discord.com
1
2
Zold - An Experimental Non-Blockchain Cryptocurrency for Fast Micro Payments #Ruby #Rubyfu github.com/zold-io/zold

GitHub - zold-io/zold: An Experimental Non-Blockchain Cryptocurrency for Fast Micro Payments

An Experimental Non-Blockchain Cryptocurrency for Fast Micro Payments - zold-io/zold

github.com
1
Injecting commands into other terminals using Ruby and IOCTL syscall rubyfu.net/module-0x2-or-sys… #Rubyfu #Ruby
1
1
The vast majority of issues and lamenting that InfoSec people have with Ruby are the due to evil-winrm or some poorly written MSF module they downloaded off exploit-db. Ruby can be quite good, if the code is written well.
3
2
6
one_gadget - The best tool for finding one gadget RCE in libc.so.6 github.com/david942j/one_gad… #Rubyfu #Ruby #Exploit #CTF
3
4
Add Black Hat Ruby book to your arsenal amazon.com/dp/B08JHSF6GT #Rubyfu #Ruby #RedTeam #Hacking
2
5
A proof of concept to show how your saved passwords on Google Chrome and other Chromium-based browsers can easily be stolen by any malicious program on macOS. by @RonMasas github.com/masasron/chrome-b… #Rubyfu #Ruby #RedTeam #Chrome
2
Ruby one-liners cookbook by @learn_byexample learnbyexample.github.io/lea… #Ruby #Rubyfu #book

Ruby One-Liners Guide

Example based guide for text processing with Ruby from the command line

learnbyexample.github.io
1
1
2
Super organized and flexible script for sending phishing campaigns github.com/KINGSABRI/goCabri… #RedTeam #Phishing #Rubyfu

GitHub - KINGSABRI/goCabrito: Super organized and flexible script for sending phishing campaigns

Super organized and flexible script for sending phishing campaigns - KINGSABRI/goCabrito

github.com
2
47
2
199
Fully Featured and Fast hexdumping for Ruby. by @postmodern_mod3 github.com/postmodern/hexdum… #Rubyfu #Ruby #InfoSec

GitHub - postmodern/hexdump.rb: Fully Featured and Fast hexdumping for Ruby.

Fully Featured and Fast hexdumping for Ruby. Contribute to postmodern/hexdump.rb development by creating an account on GitHub.

github.com
2
Load more