sonalkr132’s gists

sonalkr132 / JimCarrey-gems.txt

Last active April 22, 2020 08:19

copied from https://blog.reversinglabs.com/hubfs/Blog/ruby_malicious_gems.txt

sonalkr132 / gist:0af1746c14b42a41e01d20fffbed585b

Created July 20, 2019 14:22

	Locking user homografo...
	** [Honeybadger] Initializing Honeybadger Error Tracker for Ruby. Ship it! version=3.1.2 framework=rails level=1 pid=15043
	Yanking jOjOjO
	1000.0.5
	1000.0.1
	1000.0.2
	1000.0.4
	1000.0.3
	1000.0.0
	Yanking jsom

sonalkr132 / typo.txt

Created July 20, 2019 14:12

	bashim hashie 2739 2017-03-27 03:57:34 UTC http://idone.su
	yo-api dogapi 2079 2017-03-27 04:08:32 UTC http://bitbucket.org/Aeoxic/yo
	spect rspec 4264 2017-03-27 03:38:27 UTC ########################not found############################
	crock rack 3008 2017-03-27 03:46:19 UTC
	action_mailer actionmailer 0 2009-11-04 04:05:12 UTC ########################not found############################
	RubyRc4 ruby-rc4 2190 2017-03-27 03:57:36 UTC
	rtals rails 1283 2017-03-27 03:42:36 UTC ########################not found############################
	syaso sass 3808 2017-03-27 03:56:58 UTC
	ctapi httpi 6192 2017-03-27 03:39:35 UTC http://ctapi.rubyforge.org
	hime hike 2315 2017-03-27 03:56:20 UTC

sonalkr132 / protected.rb

Last active June 23, 2019 12:53

affected gems from typo-squatting rules

	count = 0
	count = 0

	Rubygem.all.each do \|r\|
	gem_typo = GemTypo.new(r.name)
	protected_bool = gem_typo.protected_typo?
	if protected_bool
	text = "#{r.name} #{gem_typo.protected_gem} #{r.downloads} #{r.updated_at}\n"
	puts text
	File.open('/tmp/sosme.log', 'a') { \|file\| file.write(text) }

sonalkr132 / no-home.sql

Created March 25, 2019 20:15

	select r.name from rubygems as r where id in (select distinct(r.id) from versions as v join rubygems as r on v.rubygem_id = r.id join linksets as l on r.id = l.rubygem_id join gem_downloads as d on d.rubygem_id = r.id where v.metadata::jsonb ?\| array['changelog_uri', 'source_code_uri', 'documentation_uri', 'wiki_uri', 'mailing_list_uri', 'bug_tracker_uri', 'mailing_list_uri'] and not v.metadata::jsonb ? 'homepage_uri' and l.home is not null) order by name;

	name
	-----------------------------------------
	absee
	actioncable
	actionmailer
	actionpack
	actionview
	activejob

sonalkr132 / download (2).png

Last active March 21, 2019 16:12

sonalkr132 / curl.sh

Last active March 19, 2019 07:07

All benchmarks were done locally.

	# old
	$ time curl http://localhost:3000/api/v1/activity/latest.json
	real 0m1.220s
	user 0m0.020s
	sys 0m0.008s

	# new
	$ time curl http://localhost:3000/api/v1/activity/latest.json
	real 0m0.233s
	user 0m0.021s

sonalkr132 / report.txt

Created February 20, 2019 09:40

sonalkr132 / dependencies-validation.rb

Last active February 18, 2019 18:36

compare `quick/Marshal.4.8/#{full_name}.gemspec.rz` and dependencies stored in db

	#!/usr/bin/env ruby

	require 'rubygems'
	require 'json'
	require 'net/http'
	require 'pry'

	ENV['RAILS_ENV'] \|\|= 'development'
	require_relative '../config/environment'

sonalkr132 / rubygems-dump-25-jan.sql

Created February 11, 2019 17:41

	# select count(distinct r.name) from versions as v join rubygems as r on v.rubygem_id = r.id where v.metadata::jsonb ?\| array['homepage_uri', 'changelog_uri', 'source_code_uri', 'documentation_uri', 'wiki_uri', 'mailing_list_uri', 'bug_tracker_uri', 'mailing_list_uri'];
	count
	-------
	1116
	(1 row)

	gemcutter_development=# select count(*) from rubygems;
	count
	--------
	158380

Aditya Prakash sonalkr132