57 Commits

Author SHA1 Message Date
ts
8b8120819f First goals -> rules code.
Currently prints out an array of the goals objects into the correct elastalert rules location.
TODO: add code to translate this into actual rules and alerts.
TODO: add scenario level goals elements and include those.
TODO: Identify which VM has elastalert and add a full list of elastalert.yaml rules there
TODO: Allow the use of dynamic goals based on other attributes of a module (i.e. filename, path, username, etc.)
2019-12-11 17:01:03 +00:00
Z. Cliffe Schreuders
3a00c344b1 lab updates 2019-10-11 11:39:15 +01:00
Z. Cliffe Schreuders
b6be308a02 windows client-side pdf vulnerability 2019-10-10 11:00:27 +01:00
Z. Cliffe Schreuders
f6c671e787 rename base module path 2019-07-09 16:18:18 +01:00
Z. Cliffe Schreuders
1240edda1b spacing #138 2019-03-18 23:34:17 +00:00
redwiz666@gmail.com
7591dc74fd Added ESXi Support 2019-03-15 20:50:58 -05:00
ts
5b30355b88 encoder/generator long args via stdin WIP 2018-11-16 11:33:31 +00:00
thomashaw
9ba86b7f0b Task 10 - implement difficulties 2018-11-16 10:19:08 +00:00
thomashaw
9a4c167a62 Task 8: Metadata additions for challenge_type and challenge_subtype 2018-11-16 10:19:08 +00:00
ts
fdeb28e246 Stretch update merge: mysql & php for stretch, module conflicts and general cleanup 2018-10-19 13:46:50 +01:00
Z. Cliffe Schreuders
b53408bce8 additional metadata for scenarios 2018-07-10 23:39:57 +01:00
thomashaw
84065c2c75 added ovirt_template attribute to base type in scenario schema 2018-06-20 17:44:22 +01:00
ts
5eda7c5d34 Merge branch 'team_project' into team_project_merge
# Conflicts:
#	.gitignore
#	modules/services/unix/http/parameterised_website/secgen_metadata.xml
2018-02-07 15:47:48 +00:00
Cliffe
c17a26406b Physical access in schema 2018-01-25 15:30:28 +00:00
thomashaw
6e56a25be9 network changes cleanup - no need for <network/> changes 2017-10-18 15:03:26 +01:00
thomashaw
0033a7c642 network-ranges => scenario passthrough / rework 2017-10-18 14:57:53 +01:00
thomashaw
7abaabe9b6 move <ovirt_template> next to basebox url in metadata and schema 2017-10-05 11:49:59 +01:00
Z. Cliffe Schreuders
ce502abcdb Hackerbot, labs, and associated changes 2017-09-28 16:35:28 +01:00
thomashaw
f58fb0d2b4 WIP: ovirt templates -> bases 2017-09-21 15:44:23 +01:00
thomashaw
f86025f343 access_element removed (redundant, use access='0' instead) 2017-08-30 16:11:01 +01:00
thomashaw
f7a34f6e83 bugfix: added cpu_word_size to scenario schema - can re-run scenarios again 2017-08-14 14:16:39 +01:00
thomashaw
ee83e5016e structured_content: initial work, created an organisation generator. Organisation based scenarios need updating to use this.
datastore access_json:  can now access individual structured_content elements
2017-08-14 14:09:29 +01:00
thomashaw
7a6334fb00 PR_90 changes: added cpu_word_size to differentiate between 32/64bit systems in bases, refactored vagrantfile.erb to include this, changed windows 'config.vm.network' settings to use the system name rather than config. 2017-06-30 22:46:54 +01:00
thomashaw
534a780726 Merge remote-tracking branch 'origin/pr/90'
# Conflicts:
#	README.md
#	lib/templates/Vagrantfile.erb
2017-06-30 15:21:22 +01:00
thomashaw
c3a092f680 unbounded maximum number of <hint>'s in metadata schemas 2017-06-21 18:54:03 +01:00
thomashaw
a0949b57e5 Parameterised port - service/vsftp (WIP) 2017-05-20 11:37:06 +01:00
thomashaw
66aa51dd9d Updating hints 2017-05-09 12:37:12 +01:00
thomashaw
bacd0b5f78 Add <hint> links to generator and encoder challenge modules including schema change to include <hint> tags.
Added exif_metadata scenario.
2017-05-02 14:42:03 +01:00
Jjk422
7960914a79 Adds the Windows 2008 r2 server 64 bit basebox, allows for no license.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.
2017-03-19 17:52:17 +00:00
Z. Cliffe Schreuders
25771b6344 unique_module_names for selectively ensuring a scenario doesn't repeat modules (currently only in the scenario for nested under an input) 2017-03-18 17:03:47 +00:00
thomashaw
e8f8dcece4 Team project work squashed + removed dead code 2017-02-17 14:59:07 +00:00
Z. Cliffe Schreuders
1f3f0c211d Merge branch 'access_datastore_elements' 2017-01-18 21:49:52 +00:00
Z. Cliffe Schreuders
655684e3d4 datastore iteration and element access 2017-01-18 21:44:16 +00:00
thomashaw
43c02f220f Updated for post-parameterisation 2017-01-17 16:27:18 +00:00
thomashaw
f8a97b2842 Parameterised Cleanup Module 2017-01-17 16:11:50 +00:00
thomashaw
373b0bc5dc Parameterised Website using datastores. Loads of generators and encoders. Check out the example scenarios. 2017-01-15 19:56:13 +00:00
Z. Cliffe Schreuders
f8ba19ad75 datastores for storing and reusing calculated values 2017-01-07 21:21:17 +00:00
thomashaw
b09769c515 Adding read_fact to generators. 2016-12-13 19:26:48 +00:00
thomashaw
7d7d2e2677 Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak. 2016-12-05 17:15:55 +00:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
thomashaw
f724415cdf Privilege changes: More specific privilege levels. r, rw, rwx for root & user. 2016-11-14 14:34:04 +00:00
Z. Cliffe Schreuders
9ff06fce7e default values for parameters (modules and literal values) 2016-11-08 00:28:33 +00:00
Z. Cliffe Schreuders
4421c7d99c Merge branch 'parameterisation' 2016-10-18 21:25:17 +01:00
Z. Cliffe Schreuders
e282dde855 Merge branch 'master' of https://github.com/cliffe/SecGen 2016-10-18 21:23:02 +01:00
Z. Cliffe Schreuders
e63aa00e0a parameterisation 2016-10-18 21:19:47 +01:00
Jjk422
18268af6c9 Merge pull request #69 from thomashaw/shellshock_rebase
Tested and seems to be fully working.
2016-09-06 15:17:28 +01:00
thomashaw
d9d785f335 Metadata: Updated shellshock privilege = none, access = local 2016-09-06 13:46:31 +01:00
thomashaw
3f00728fd2 Vulnerability: samba anonymously writable share + symlink traversal 2016-09-02 19:55:42 +01:00
Z. Cliffe Schreuders
edc1e28d68 Parameterisation 2016-08-17 23:11:53 +01:00
Z. Cliffe Schreuders
0185837c7b Module dependencies 2016-08-16 23:44:44 +01:00