Ronin 2.0 – open-source Ruby toolkit for security research and development(ronin-rb.dev)
ronin-rb.dev
Ronin 2.0 – open-source Ruby toolkit for security research and development
https://ronin-rb.dev/blog/2023/02/01/ronin-2-0-0-finally-released.html
7 comments
metasploit was at one point the world's largest ruby codebase, back when it was still on SVN :)
It might still be. The original metasploit developers had a habit of vendoring all of their dependencies to create a mono-repo that "just worked" (tm), even after Bundler was created, which beefed up their SLoC count. Plus there's lots of miscellaneous supporting code that was added for various past exploits. However, while some see "largest Ruby codebase" as bragging rights, wise Software Engineers will see that as a liability to be avoided.
"…while some see "largest Ruby codebase" as bragging rights, wise Software Engineers will see that as a liability to be avoided."
Amen
Amen
What are the equivalents in Python ecosystem?
There is not a Python equivalent to Ronin as a whole, to my knowledge. There are however Python libraries that provide some of the features of Ronin. For example, pwntools can be used for packing binary data and generating shellcode for exploits, however it is more of a library instead of an exploit framework (frameworks run 3rd party code and manage the control flow) and has a fairly minimal API when compared to Ronin's many libraries. There are also dozens of bespoke Python exploit "frameworks" on GitHub, but none of them that I've seen support installing 3rd party repositories of exploits. The scope of Ronin is much bigger than just an exploit framework or vulnerability scanner. YMMV
Crazy, Ruby keeps surprising me again and again.
I love this!