Penetration Test

Ruby Script

Demo

Portscan.rb

#!/usr/bin/ruby

require 'socket'

TARGET = ARGV[0] || '192.168.2.22'
MINPORT = ARGV[1] || 22
MAXPORT = ARGV[2] || 80

$i = MINPORT.to_i
while $i <= MAXPORT.to_i do
  begin
    socket = TCPSocket.new(TARGET, $i)
    status = "open"
    puts "Port #{$i} is #{status}."
  rescue Errno::ECONNREFUSED, Errno::ETIMEDOUT
    status = "closed"
  end
  $i = $i + 1
end

Run the following commands

sudo ruby portscan.rb 192.168.2.22 22 80

sudo ruby portscan.rb 192.168.2.22 20 80

QUICK REVIEW

• Ruby is a powerful object-oriented language that can do far more than just scripting
• Ruby's popularity is related to the Ruby on Rails server-side web application framework written in Ruby
• Ruby treats everything as an object and relies heavily on methods and attributes