digital-forensics-labs/SecGen
1
0
Fork 0
mirror of https://github.com/cliffe/SecGen.git synced 2026-02-21 11:18:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

phishing

Browse Source
This commit is contained in:
Z. Cliffe Schreuders
2022-04-27 11:22:22 +01:00
parent 4f18d6e236
commit 6c5f6fdb04
5 changed files with 141 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
modules/vulnerabilities/unix/email_phishing/phish_victim_bot/files/MailReader.class
View File

Binary file not shown.

2
modules/vulnerabilities/unix/email_phishing/phish_victim_bot/files/MailReader.java
View File

@@ -114,7 +114,7 @@ public class MailReader implements AutoCloseable {
System.out.println("Running Spreadsheet");
new Thread(() -> {
try {
Process p = Runtime.getRuntime().exec("xvfb-run libroffice \"" + attachment.getAbsolutePath() + "\"");
Process p = Runtime.getRuntime().exec("xvfb-run libreoffice \"" + attachment.getAbsolutePath() + "\"");
// Run process for 30 seconds
p.wait(TimeUnit.SECONDS.toMillis(30));
if (p.isAlive()) p.destroy();

126
modules/vulnerabilities/unix/email_phishing/phish_victim_bot/files/libreoffice-macros-registrymodifications.xcu Normal file
View File

File diff suppressed because one or more lines are too long

14
modules/vulnerabilities/unix/email_phishing/phish_victim_bot/manifests/install.pp
View File

@@ -8,7 +8,8 @@ class phish_victim_bot::install {
$passwords = $secgen_parameters['passwords']
$phish_victim_bot_configs = $secgen_parameters['phish_victim_bot_configs']
ensure_packages(['openjdk-11-jre', 'openjdk-11-jdk', 'zip' ])
ensure_packages(['openjdk-11-jre', 'openjdk-11-jdk', 'zip','libreoffice-writer','libreoffice-calc','xvfb'])
user { 'guest':
ensure => present,
@@ -30,7 +31,18 @@ class phish_victim_bot::install {
group => $username,
mode => '0600',
content => $phish_victim_bot_configs[$index],
} ->
file { [ "/home/$username/.config/", "/home/$username/.config/libreoffice/", "/home/$username/.config/libreoffice/4/", "/home/$username/.config/libreoffice/4/user/"]:
ensure => 'directory',
} ->
file { "/home/$username/.config/libreoffice/4/user/registrymodifications.xcu":
ensure => present,
owner => $username,
group => $username,
mode => '0600',
source => 'puppet:///modules/phish_victim_bot/libreoffice-macros-registrymodifications.xcu',
}
# run on each boot via cron
cron { "$username-mail":
command => "sleep 60 && cd /home/$username && java -cp /opt/mailreader/mail.jar:/opt/mailreader/activation-1.1-rev-1.jar:/opt/mailreader/ MailReader &",

1
scenarios/labs/cyber_security_landscape/7_phishing.xml
View File

@@ -172,6 +172,7 @@ reject_all=false</value>
<utility module_path=".*/handy_cli_tools"/>
<utility module_path=".*/nmap"/>
<utility module_path=".*/thunderbird"/>
<utility module_path=".*/libreoffice"/>
<!-- TODO user a normal user, and pass accounts to thunderbird -->
<network type="private_network" >