From ca74818125a577dc2fd382f255bc2bd9519cec3d Mon Sep 17 00:00:00 2001
From: Rosie <rosiejfletch@gmail>
Date: Mon, 10 Nov 2025 19:10:36 +0000
Subject: [PATCH] Scenario update: Banner_grab_and_run lab updated to Debian 12

- Updated desktop base from Debian 9 to Debian 12

- Updated server base from Debian 9 to Debian 12

- Added cyberchef utility for decoding encoded flags

- Added iceweasel configured to autostart with CyberChef
---
 scenarios/ctf/banner_grab_and_run.xml | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/scenarios/ctf/banner_grab_and_run.xml b/scenarios/ctf/banner_grab_and_run.xml
index 7e6c91dad..9e4f5cd85 100644
--- a/scenarios/ctf/banner_grab_and_run.xml
+++ b/scenarios/ctf/banner_grab_and_run.xml
@@ -26,7 +26,7 @@
 
   <system>
     <system_name>desktop</system_name>
-    <base distro="Debian 9" type="desktop" name="KDE"/>
+    <base distro="Debian 12" type="desktop" name="KDE"/>
 
     <input into_datastore="IP_addresses">
       <value>172.16.0.2</value>
@@ -137,6 +137,20 @@
     </utility>
     <utility module_path=".*/handy_cli_tools"/>
     <utility module_path=".*/nmap"/>
+    <utility module_path=".*/cyberchef"/>
+
+<!-- This is a decryption lab so CyberChef is needed -->
+    <utility module_path=".*/iceweasel">
+      <input into="accounts">
+        <datastore>accounts</datastore>
+      </input>
+      <input into="autostart">
+        <value>true</value>
+      </input>
+      <input into="start_page">
+        <value>file:///opt/cyberchef/CyberChef.html</value>
+      </input>
+    </utility>
 
     <vulnerability module_path=".*/ssh_root_login">
       <input into="root_password">
@@ -161,7 +175,7 @@
 
   <system>
     <system_name>secret_journal_server</system_name>
-    <base distro="Debian 9" type="desktop" name="KDE"/>
+    <base distro="Debian 12" type="desktop" name="KDE"/>
 
     <utility module_path=".*/handy_cli_tools"/>
     <utility module_path=".*/nmap"/>