digital-forensics-labs/SecGen
1
0
Fork 0
mirror of https://github.com/cliffe/SecGen.git synced 2026-02-20 13:50:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

SecGen function: add directory (creates directory + any parent directories using mkdir -p)

Browse Source
This commit is contained in:
ts
2018-08-02 12:48:50 +01:00
parent f346267a6b
commit 2c6e06bea5
5 changed files with 14 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
modules/build/puppet/secgen_functions/manifests/create_directory.pp Normal file
View File

@@ -0,0 +1,6 @@
define secgen_functions::create_directory($path){
exec { "secgen_create_directory_$path":
path => '/bin:/sbin:/usr/bin:/usr/sbin',
command => "mkdir -p $path"
}
}

6
modules/build/puppet/secgen_functions/manifests/install_setgid_binary.pp
View File

@@ -41,9 +41,9 @@ define secgen_functions::install_setgid_binary (
}
# Create challenge directory
file { "create_$challenge_directory":
::secgen_functions::create_directory { "create_$challenge_directory":
path => $challenge_directory,
ensure => directory,
notify => File["create_$compile_directory"],
}
# Move contents of the module's files directory into compile directory
@@ -58,7 +58,7 @@ define secgen_functions::install_setgid_binary (
exec { "gcc_$challenge_name-$compile_directory":
cwd => $compile_directory,
command => "/usr/bin/make",
require => File["create_$challenge_directory", "create_$compile_directory"]
require => File["create_$compile_directory"]
}
# Move the compiled binary into the challenge directory

6
modules/build/puppet/secgen_functions/manifests/install_setuid_root_binary.pp
View File

@@ -39,9 +39,9 @@ define secgen_functions::install_setuid_root_binary (
$modules_source = "puppet:///modules/$source_module_name"
# Create challenge directory
file { "create_$challenge_directory":
::secgen_functions::create_directory { "create_$challenge_directory":
path => $challenge_directory,
ensure => directory,
notify => File["create_$compile_directory"],
}
# Move contents of the module's files directory into compile directory
@@ -56,7 +56,7 @@ define secgen_functions::install_setuid_root_binary (
exec { "gcc_$challenge_name-$compile_directory":
cwd => $compile_directory,
command => "/usr/bin/make",
require => [File["create_$challenge_directory", "create_$compile_directory"], Package['build-essential', 'gcc-multilib']]
require => [File["create_$compile_directory"], Package['build-essential', 'gcc-multilib']]
}
# Move the compiled binary into the challenge directory

4
scenarios/examples/ctf_challenge_examples/setgid_pwnable_binary_example.xml
View File

@@ -9,8 +9,6 @@
<system_name>group_challenges</system_name>
<base platform="linux" type="server"/>
<!--TODO: use same pattern for all type=".*pwnable_binary" -->
<!-- 1) Default uses an account and drops the binary in the users home directory -->
<vulnerability type="pwnable_binary">
<input into="group">
@@ -27,7 +25,7 @@
<!--<value/>-->
<!--</input>-->
<!--<input into="storage_directory">-->
<!--<value>/home</value>-->
<!--<value>/test/hidden/challenges</value>-->
<!--</input>-->
<!--</vulnerability>-->

4
scenarios/examples/ctf_challenge_examples/setuid_pwnable_binary_example.xml
View File

@@ -9,8 +9,6 @@
<system_name>reverse_me</system_name>
<base platform="linux" type="server"/>
<!--TODO: use same pattern for all type=".*pwnable_binary" -->
<!-- 1) Default uses an account and drops the binary in the users home directory
(username/pw: challenges/password) -->
<vulnerability type="pwnable_binary"/>
@@ -21,7 +19,7 @@
<!--<value/>-->
<!--</input>-->
<!--<input into="storage_directory">-->
<!--<value>/home</value>-->
<!--<value>/test/hidden/challenges</value>-->
<!--</input>-->
<!--</vulnerability>-->