Popularity

1.8

Growing

Activity

5.9

Stars 53

Watchers 2

Forks 16

Last Commit 7 days ago

Description

ronin-vulns is a Ruby library for blind vulnerability testing. It currently supports testing for Local File Inclusion (LFI), Remote File Inclusion (RFI), SQL injection (SQLi), reflective Cross Site Scripting (XSS), Server Side Template Injection (SSTI), and Open Redirects.

ronin-vulns is part of the ronin-rb project, a Ruby toolkit for security research and development.

Programming language: Ruby

License: GNU Lesser General Public License v3.0 only

Tags: Security Security Tools Web Vulnerability Scanner Web Security

ronin-vulns alternatives and similar gems

Based on the "Security" category.
Alternatively, view ronin-vulns alternatives based on common mentions on social networks and blogs.

Metasploit

10.0 10.0 L1 ronin-vulns VS Metasploit

Metasploit Framework
BeEF

9.8 9.0 ronin-vulns VS BeEF

The Browser Exploitation Framework Project

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

Promo www.influxdata.com

Brakeman

9.5 8.1 L3 ronin-vulns VS Brakeman

A static analysis security vulnerability scanner for Ruby on Rails applications
Gitrob

9.3 0.0 L5 ronin-vulns VS Gitrob

DISCONTINUED. Reconnaissance tool for GitHub organizations
Rack::Attack

9.2 7.1 L5 ronin-vulns VS Rack::Attack

Rack middleware for blocking & throttling
SecureHeaders

8.6 4.2 ronin-vulns VS SecureHeaders

Manages application of security headers with many safe defaults
bundler-audit

8.1 6.1 L5 ronin-vulns VS bundler-audit

Patch-level verification for Bundler
Bearer

7.0 9.6 ronin-vulns VS Bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
RbNaCl

6.0 2.9 L5 ronin-vulns VS RbNaCl

Ruby FFI binding to the Networking and Cryptography (NaCl) library (a.k.a. libsodium)
Hashids

5.7 3.7 L5 ronin-vulns VS Hashids

A small Ruby gem to generate YouTube-like hashes from one or many numbers. Use hashids when you do not want to expose your database ids to the user.
Rack::Protection

5.5 0.0 ronin-vulns VS Rack::Protection

DISCONTINUED. NOTE: This project has been merged upstream to sinatra/sinatra
Ronin

5.0 7.7 ronin-vulns VS Ronin

Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd party git repositories.
Rack::UTF8Sanitizer

3.9 5.7 ronin-vulns VS Rack::UTF8Sanitizer

Rack::UTF8Sanitizer is a Rack middleware which cleans up invalid UTF8 characters in request URI and headers.
ActiveHashcash

2.5 7.4 ronin-vulns VS ActiveHashcash

Protect Rails applications against bots and brute force attacks without annoying humans.
Clamby

2.5 6.3 ronin-vulns VS Clamby

ClamAV interface to your Ruby on Rails project.
ronin-exploits

2.1 6.8 ronin-vulns VS ronin-exploits

A Ruby micro-framework for writing and running exploits
SiRP

1.4 0.0 L5 ronin-vulns VS SiRP

DISCONTINUED. Secure (interoperable) Remote Password Auth (SRP-6a)
TSS - Threshold Secret Sharing

1.1 0.0 L5 ronin-vulns VS TSS - Threshold Secret Sharing

A Ruby implementation of Threshold Secret Sharing (Shamir) as defined in IETF Internet-Draft draft-mcgrew-tss-03.txt
Active Entry

0.7 0.0 ronin-vulns VS Active Entry

A flexible access control system for your Rails app
Rack::JsonWebTokenAuth

0.5 0.0 L5 ronin-vulns VS Rack::JsonWebTokenAuth

DISCONTINUED. Rack middleware for authentication using JSON Web Tokens (JWT)
sessionKeys

0.3 0.0 L5 ronin-vulns VS sessionKeys

A tool for the deterministic generation of unique user IDs, and NaCl cryptographic keys from a single username and high entropy passphrase.
Rack::ContentSecurityPolicy

0.3 0.0 L5 ronin-vulns VS Rack::ContentSecurityPolicy

DISCONTINUED. Rack middleware for declaratively setting the HTTP ContentSecurityPolicy (W3C CSP Level 2/3) security header to help prevent against XSS and other browser based attacks.