Top 8 Ruby Pentesting Projects

WhatWeb

1 5,088 0.0 Ruby

Next generation web scanner
evil-winrm

4 4,150 3.0 Ruby

The ultimate WinRM shell for hacking/pentesting

Project mention: HackTheBox - Writeup Authority [Retired] | dev.to | 2023-12-26

┌──(root㉿kali)-[/home/kali/hackthebox/machines-windows/authority] └─# evil-winrm -i authority.htb -u svc_ldap -p 'lDaP_1n_th3_cle4r!' Evil-WinRM shell v3.4 Warning: Remote path completions is disabled due to ruby limitation: quoting_detection_proc() function is unimplemented on this machine Data: For more information, check Evil-WinRM Github: https://github.com/Hackplayers/evil-winrm#Remote-path-completion Info: Establishing connection to remote endpoint *Evil-WinRM* PS C:\Users\svc_ldap\Documents>

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
capsulecorp-pentest

1 765 4.3 Ruby

Vagrant VirtualBox environment for conducting an internal network penetration test
haiti

21 698 8.4 Ruby

:key: Hash type identifier (CLI & lib)

Project mention: haiti v2.1.0 | /r/Rawsec | 2023-11-15

dradis-ce

2 628 9.4 Ruby

Dradis Framework: Collaboration and reporting for IT Security teams

Project mention: dradis-ce VS pwndoc - a user suggested alternative | libhunt.com/r/dradis-ce | 2023-05-02

LAZYPARIAH

2 140 0.0 Ruby

A tool for generating reverse shell payloads on the fly.
ronin-vulns

0 52 7.1 Ruby

Tests URLs for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), and Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.
WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
vulnerable-code-snippets

1 22 5.6 Ruby

Vulnerable code snippets repository showcasing different vulnerabilities to practice code analysis skills. (by Acceis)

Project mention: AVCS n°1 | /r/brokencode | 2023-05-22

Code and solution: https://github.com/Acceis/vulnerable-code-snippets/tree/master/open-redirect

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2023-12-26.