Scapy/Scruby/Metasploit - Python / Ruby Interoperability

[Abuse 007]

Hi List,

I was thinking about Scapy and Metasploit. There was a Ruby rewrite of
Scapy, called Scruby, and it was integrated with Metasploit. But they
problem with a rewrite is that as either project gains new features,
these new features would then need to be ported into the other project
so that all users could enjoy them. Is it possible to have Python and
Ruby interoperability? Perhaps similar to SWIG, which allows scripting
languages to use libraries written in C. I have searched around but
not found anything decent, allowing the recent Python and Ruby
versions.

I also recently came across a Python exploit framework called Inguna,
but I have not used it.

I think Metasploit free/open defacto standard, so ideally I'd like to
be able to combine the latest and greatest Scapy with the latest and
greatest Metasploit.

Any thoughts?

Thanks

---------------------------------------------------------------------
To unsubscribe, send a mail to scapy.ml-***@secdev.org

[Dirk Loss]

Post by Abuse 007
I was thinking about Scapy and Metasploit. There was a Ruby rewrite of
Scapy, called Scruby, and it was integrated with Metasploit.

Just for the record, here's the homepage:
http://sylv1.tuxfamily.org/projects/scruby.html

Post by Abuse 007
But they
problem with a rewrite is that as either project gains new features,
these new features would then need to be ported into the other project
so that all users could enjoy them.

Are there any special features in Scruby (besides being easily usable
from Ruby programs like Metasploit) that you would like to have in Scapy?

Post by Abuse 007
Is it possible to have Python and Ruby interoperability?

Ticket #142 on Scapy's bugtracker lead me to Ruby/Python, but I haven't
used it yet:
"Ruby/Python is a Ruby extension library to embed Python interpreter in
Ruby. With this library, you can use the libraries written for Python in
your Ruby scripts."
http://www.goto.info.waseda.ac.jp/~fukusima/ruby/python/doc/index.html

Post by Abuse 007
I also recently came across a Python exploit framework called Inguna,
but I have not used it.

If I remember correctly, Inguma uses Scapy for some low level stuff.

You may also be interested in w3af, a Python framework for attacking web
applications. Uses Scapy as well and Andres (the author) is on this list.

Regards
Dirk

---------------------------------------------------------------------
To unsubscribe, send a mail to scapy.ml-***@secdev.org

[Andres Riancho]

Dirk,

Post by Dirk Loss

Post by Abuse 007
I was thinking about Scapy and Metasploit. There was a Ruby rewrite of
Scapy, called Scruby, and it was integrated with Metasploit.

http://sylv1.tuxfamily.org/projects/scruby.html

Post by Abuse 007
But they
problem with a rewrite is that as either project gains new features,
these new features would then need to be ported into the other project
so that all users could enjoy them.

Are there any special features in Scruby (besides being easily usable from
Ruby programs like Metasploit) that you would like to have in Scapy?

Post by Abuse 007
Is it possible to have Python and Ruby interoperability?

Ticket #142 on Scapy's bugtracker lead me to Ruby/Python, but I haven't used
"Ruby/Python is a Ruby extension library to embed Python interpreter in
Ruby. With this library, you can use the libraries written for Python in
your Ruby scripts."
http://www.goto.info.waseda.ac.jp/~fukusima/ruby/python/doc/index.html

Post by Abuse 007
I also recently came across a Python exploit framework called Inguna,
but I have not used it.

If I remember correctly, Inguma uses Scapy for some low level stuff.
You may also be interested in w3af, a Python framework for attacking web
applications. Uses Scapy as well and Andres (the author) is on this list.

Thanks for the w3af reference =)
w3af uses scapy mainly as a packet sniffer in the advanced features
section like w3afAgent and the virtual daemon. If anyone is interested
the code is here:

http://w3af.svn.sf.net/viewvc/w3af/trunk/core/controllers/extrusionScanning/

Post by Dirk Loss
Regards
Dirk
---------------------------------------------------------------------