69 Commits

Author SHA1 Message Date
ts
a9a4259221 Created a rules class to contain the rule generation logic.
May need to create a second class for the elastalert rules which contains the elastalert/templates/config.yaml.erb boilerplate
2020-01-15 16:17:53 +00:00
ts
8b8120819f First goals -> rules code.
Currently prints out an array of the goals objects into the correct elastalert rules location.
TODO: add code to translate this into actual rules and alerts.
TODO: add scenario level goals elements and include those.
TODO: Identify which VM has elastalert and add a full list of elastalert.yaml rules there
TODO: Allow the use of dynamic goals based on other attributes of a module (i.e. filename, path, username, etc.)
2019-12-11 17:01:03 +00:00
Z. Cliffe Schreuders
49e21adf93 ascii art image generator 2019-07-01 23:50:48 +01:00
Jason Zeller
455cb08fbe Replaced individual list generators with generic that allows future use. Added ncrack vulnerability. 2019-03-13 15:25:15 -05:00
ts
5bce99b86c Merge branch 'ctf_challenges_merge' into january_19_merge
# Conflicts:
#	lib/helpers/constants.rb
#	modules/utilities/unix/languages/java_wheezy_compatible/java/spec/spec_helper.rb~upstream_stretch_kde_update
2019-01-11 13:02:39 +00:00
ts
1302237027 Merge remote-tracking branch 'upstream/stretch_kde_update' into january_19_merge 2019-01-11 12:01:38 +00:00
Z. Cliffe Schreuders
1cbdd32145 lab updates 2018-12-06 15:16:24 +00:00
thomashaw
f39491f676 blacklisted words filter 2018-11-16 11:36:53 +00:00
Z. Cliffe Schreuders
88145928bd networking 2018-11-09 21:45:53 +00:00
Z. Cliffe Schreuders
0f7592ce0e networking 2018-11-09 15:43:34 +00:00
Z. Cliffe Schreuders
4edb750441 networking 2018-11-09 15:16:37 +00:00
Z. Cliffe Schreuders
2add65e2ed networking 2018-10-27 13:51:14 +01:00
Z. Cliffe Schreuders
5cafa0e3d0 affinity groups 2018-10-26 11:37:57 +01:00
Z. Cliffe Schreuders
f543db5529 networking 2018-10-26 09:01:08 +01:00
Z. Cliffe Schreuders
8adb00365f networking 2018-10-26 00:26:59 +01:00
Z. Cliffe Schreuders
ed0810de9d networking 2018-10-26 00:11:21 +01:00
Z. Cliffe Schreuders
38dc16ee27 affinity groups 2018-10-25 23:27:09 +01:00
Z. Cliffe Schreuders
e779347aa1 affinity groups 2018-10-25 21:42:26 +01:00
Z. Cliffe Schreuders
d5e317bc02 affinity groups 2018-10-25 20:50:57 +01:00
Z. Cliffe Schreuders
ccd1de8280 affinity groups 2018-10-25 16:24:47 +01:00
Z. Cliffe Schreuders
667939ca17 limit scope of working directory change 2018-10-24 20:55:15 +01:00
Z. Cliffe Schreuders
0ec53b2cc5 networking 2018-10-24 00:51:51 +01:00
Z. Cliffe Schreuders
b564ffd9a4 networking 2018-10-23 16:18:28 +01:00
ts
81440f7b4c Remove snort conflict + ignore errors + don't delete after failure + stdlib in secgen 2018-10-19 13:46:50 +01:00
ts
9761cecdc8 ovirt authz now passed as a parameter, added to example.conf 2018-10-19 13:46:49 +01:00
ts
f0bb2a26e1 Testing script, stretch fixes + code review 2018-10-19 13:46:49 +01:00
ts
7bbeb8a2fa ovirt authz now passed as a parameter, added to example.conf 2018-10-05 17:27:12 +01:00
ts
ff75b56c6b Testing script, stretch fixes + code review 2018-10-05 17:27:12 +01:00
ts
d33ed14ba5 Strip trailing spaces from GemExe.exe args 2018-10-05 17:27:11 +01:00
ts
9d66ea9215 Squashed WNS + IRI DL work 2018-10-05 17:27:05 +01:00
ts
c4f2d54bcc Strip trailing spaces from GemExe.exe args 2018-09-28 08:41:18 +01:00
ts
5208ae5cc7 Squashed WNS + IRI DL work 2018-09-21 12:34:26 +01:00
secgen server
e4114364f2 comment 2018-02-09 15:37:26 +00:00
secgen server
c7201f63cf timeout changes 2018-02-09 15:34:01 +00:00
thomashaw
6045c1f187 hackerbot merge - includes lots of other changes 2018-02-08 13:14:22 +00:00
Z. Cliffe Schreuders
d6ced69c31 Fix calling rubygem executable on some platforms 2017-08-18 23:31:57 -07:00
thomashaw
ed31b4bf0f print.rb: added .warn and bright_yellow text colouring 2017-08-16 13:11:33 +01:00
thomashaw
534a780726 Merge remote-tracking branch 'origin/pr/90'
# Conflicts:
#	README.md
#	lib/templates/Vagrantfile.erb
2017-06-30 15:21:22 +01:00
Z. Cliffe Schreuders
4b6c3c2d37 update to work with newer versions of vagrant (where the gem exists but doesn't execute) and update readme with more information and with gifs 2017-04-19 00:12:46 +01:00
thomashaw
07eaad8199 Project Vagrantfile's now use relative paths. This enables distribution of project's without having to mess with paths. 2017-04-11 11:46:44 +01:00
Jjk422
7960914a79 Adds the Windows 2008 r2 server 64 bit basebox, allows for no license.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.
2017-03-19 17:52:17 +00:00
thomashaw
bb884e9ffc generators/image/random_image: Returns random image as a base64 string. leaks the image to the parameterised_website. Icons in the public domain - thanks to http://publicicons.org/ 2017-03-16 12:03:22 +00:00
Z. Cliffe Schreuders
655684e3d4 datastore iteration and element access 2017-01-18 21:44:16 +00:00
Z. Cliffe Schreuders
f8ba19ad75 datastores for storing and reusing calculated values 2017-01-07 21:21:17 +00:00
thomashaw
17f425b37f Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type. 2016-12-08 10:43:48 +00:00
thomashaw
7d7d2e2677 Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak. 2016-12-05 17:15:55 +00:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
Z. Cliffe Schreuders
9ff06fce7e default values for parameters (modules and literal values) 2016-11-08 00:28:33 +00:00
Z. Cliffe Schreuders
e63aa00e0a parameterisation 2016-10-18 21:19:47 +01:00
Z. Cliffe Schreuders
9f0bd61726 Parameterisation 2016-08-30 23:18:31 +01:00