275 Commits

Author SHA1 Message Date
ts
8b8120819f First goals -> rules code.
Currently prints out an array of the goals objects into the correct elastalert rules location.
TODO: add code to translate this into actual rules and alerts.
TODO: add scenario level goals elements and include those.
TODO: Identify which VM has elastalert and add a full list of elastalert.yaml rules there
TODO: Allow the use of dynamic goals based on other attributes of a module (i.e. filename, path, username, etc.)
2019-12-11 17:01:03 +00:00
Z. Cliffe Schreuders
b6be308a02 windows client-side pdf vulnerability 2019-10-10 11:00:27 +01:00
Z. Cliffe Schreuders
f85eda7ec1 webapps conflict with eachother since they accept any virtualhost name 2019-07-15 11:47:50 +01:00
Z. Cliffe Schreuders
ebf635aab1 proftp leak files 2019-07-15 11:47:00 +01:00
Z. Cliffe Schreuders
240059801e gitlist work with less flags than the module was expecting 2019-07-15 10:04:13 +01:00
Z. Cliffe Schreuders
16f7c12297 motd 2019-07-15 10:03:31 +01:00
Z. Cliffe Schreuders
7e88fd51ec Merge branch 'ff2' of https://github.com/cliffe/SecGen into ff2 2019-07-11 17:16:15 +01:00
Z. Cliffe Schreuders
3b279a6f08 online store accept an arbitrary number of flags 2019-07-11 17:16:12 +01:00
Z. Cliffe Schreuders
0bc68c6afc file permissions for moinmoin 2019-07-11 17:09:52 +01:00
ts
c80a7a1558 vulnerabilities/unix/webapp/onlinestore: token table flag fix 2019-07-10 14:49:37 +01:00
ts
154ab95801 vulnerabilities/unix/webapp/onlinestore: token table flag fix 2019-07-10 12:35:38 +01:00
Z. Cliffe Schreuders
45c9bc2de3 nfs root access fix 2019-07-09 16:19:38 +01:00
Z. Cliffe Schreuders
4703cbda04 ctf hacking scenario 2019-07-03 15:34:54 +01:00
Z. Cliffe Schreuders
e0499edbed path env CTF module, move randomness out of puppet 2019-06-26 00:13:39 +01:00
Z. Cliffe Schreuders
8d60442f23 path env CTF module 2019-06-24 23:23:14 +01:00
Z. Cliffe Schreuders
c10a35691e Merge major changes from Semester 2 into master 2019-06-18 14:37:47 +01:00
ts
15dc0ac734 Onlinestore update: Added more flags and a new scenario.xml 2019-04-11 16:17:50 +01:00
Z. Cliffe Schreuders
10581664ad containers lab 2019-03-23 16:41:01 +00:00
Jason Zeller
adb0c6fa86 Create example scenarios for pcap and zip. 2019-03-13 18:07:48 -05:00
Jason Zeller
8e6055c80f Merge branches 'crackable_user_accounts' and 'pcap_file' into CTF_addons 2019-03-13 17:36:53 -05:00
Jason Zeller
954ab73923 Added zip_file vulnerability as it also uses leak_to_file utility. 2019-03-13 17:30:43 -05:00
Jason Zeller
a96d83b045 Initial import of pcap generator/vulnerability. Also includes leak_to_file utility allowing any base64 file to be leaked wherever desired. 2019-03-13 17:19:50 -05:00
Jason Zeller
df2be07ffe Renamed ncrack vulnerability to match jtr. Generated an example scenario for using crackable_user_accounts. 2019-03-13 16:39:06 -05:00
Jason Zeller
455cb08fbe Replaced individual list generators with generic that allows future use. Added ncrack vulnerability. 2019-03-13 15:25:15 -05:00
Jason Zeller
14e865b74f Initial import of custom password generators and matching vulnerabilities. 2019-03-13 13:49:38 -05:00
ts
3ebdedf8b8 Onlinestore bugfixes: removed all.tar, enforced correct alignment of user and killed_on date, replaced killed_on timestamp with datetime so that mysql does not adjust for timezones 2019-03-12 10:38:45 +00:00
ts
d9b9e3a83d explicitly set file permissions for flags leaked by ::secgen_functions::leak_file 2019-03-12 10:38:04 +00:00
ts
fb74d29838 Onlinestore bugfixes: removed all.tar, enforced correct alignment of user and killed_on date, replaced killed_on timestamp with datetime so that mysql does not adjust for timezones 2019-03-12 10:27:14 +00:00
Z. Cliffe Schreuders
a556ba7d8a lab updates 2019-02-22 14:00:01 +00:00
ts
0c3d070eb1 dvwa + gitlist: added notifies to tidy default sites enabled 2019-02-19 12:13:47 +00:00
ts
1c04a81afe dvwa, hackerbot, gitlist040: tidy 000-default.conf 2019-02-19 11:26:17 +00:00
ts
e312445907 added tidy statements to ensure the 000-default.conf is removed from apache 2019-02-18 17:07:54 +00:00
ts
4cbc0613f9 wp_3x: fixing cron 2019-02-18 16:32:42 +00:00
ts
8156c8bfb2 added webapp_with_db type to select on for WNS assignment (excludes gitlist) 2019-02-18 13:52:54 +00:00
ts
e5a9069630 dvwa: added webapp type 2019-02-18 11:22:49 +00:00
ts
cf203624d2 Merge branch 's2progress' of https://github.com/cliffe/secgen into s2progress 2019-02-18 11:17:11 +00:00
Z. Cliffe Schreuders
68428ec828 lab updates 2019-02-16 10:20:05 +00:00
ts
9d664ad677 Merge branch 'post_tests' into s2progress
# Conflicts:
#	modules/generators/structured_content/hackerbot_config/hbauthentication/secgen_metadata.xml
#	modules/generators/structured_content/hackerbot_config/hbauthentication/templates/intro.md.erb
#	modules/generators/structured_content/hackerbot_config/hbauthentication/templates/lab.xml.erb
#	modules/vulnerabilities/unix/access_control_misconfigurations/suid_root_bash/suid_root_bash.pp
#	modules/vulnerabilities/unix/access_control_misconfigurations/suid_root_vi/suid_root_vi.pp
#	modules/vulnerabilities/unix/web_training/dvwa/files/DVWA-master/vulnerabilities/csp/help/help.php
#	modules/vulnerabilities/unix/web_training/dvwa/manifests/apache.pp
#	scenarios/ctf/basic_narrative.xml
#	scenarios/labs/websec_lab_env.xml
#	scenarios/security_audit/team_project.xml
2019-02-15 18:18:30 +00:00
ts
df77d931f3 reintroduce dirtycow as the apt-upgrade module works on oVirt with the puppet-agent package held 2019-02-15 18:00:26 +00:00
ts
930c056234 apache_stretch_compatible: now works with 2 vhosts like wheezy, enables stretch base for on basic_narrative.xml 2019-02-15 17:58:09 +00:00
ts
47217d26e4 onlinestore/secgen_tests: added check for populated db 2019-02-15 17:19:30 +00:00
Z. Cliffe Schreuders
94c0573111 lab updates 2019-02-14 16:13:58 +00:00
Z. Cliffe Schreuders
9a3ff20136 lab updates 2019-02-14 15:18:41 +00:00
thomashaw
d75c2134eb Merge branch 'post_tests' of https://github.com/cliffe/SecGen into post_tests 2019-02-14 15:04:08 +00:00
Z. Cliffe Schreuders
53bba11133 lab updates (and related modules)
(cherry picked from commit 665b0589c8)
2019-02-14 14:59:50 +00:00
Z. Cliffe Schreuders
4e5f8c0d1b lab updates 2019-02-12 15:53:43 +00:00
Z. Cliffe Schreuders
c573d13699 lab updates 2019-02-08 22:31:13 +00:00
Z. Cliffe Schreuders
59af7ba1d9 groups 2019-02-07 21:51:53 +00:00
ts
fda7a01dff Semester 2 team project scenario required changes 2019-02-07 14:32:14 +00:00
ts
345e902cca removed example ctf challenge stuff.. 2019-02-07 14:25:54 +00:00