ts
8b8120819f
First goals -> rules code.
...
Currently prints out an array of the goals objects into the correct elastalert rules location.
TODO: add code to translate this into actual rules and alerts.
TODO: add scenario level goals elements and include those.
TODO: Identify which VM has elastalert and add a full list of elastalert.yaml rules there
TODO: Allow the use of dynamic goals based on other attributes of a module (i.e. filename, path, username, etc.)
2019-12-11 17:01:03 +00:00
Z. Cliffe Schreuders
b6be308a02
windows client-side pdf vulnerability
2019-10-10 11:00:27 +01:00
Z. Cliffe Schreuders
f85eda7ec1
webapps conflict with eachother since they accept any virtualhost name
2019-07-15 11:47:50 +01:00
Z. Cliffe Schreuders
ebf635aab1
proftp leak files
2019-07-15 11:47:00 +01:00
Z. Cliffe Schreuders
240059801e
gitlist work with less flags than the module was expecting
2019-07-15 10:04:13 +01:00
Z. Cliffe Schreuders
16f7c12297
motd
2019-07-15 10:03:31 +01:00
Z. Cliffe Schreuders
7e88fd51ec
Merge branch 'ff2' of https://github.com/cliffe/SecGen into ff2
2019-07-11 17:16:15 +01:00
Z. Cliffe Schreuders
3b279a6f08
online store accept an arbitrary number of flags
2019-07-11 17:16:12 +01:00
Z. Cliffe Schreuders
0bc68c6afc
file permissions for moinmoin
2019-07-11 17:09:52 +01:00
ts
c80a7a1558
vulnerabilities/unix/webapp/onlinestore: token table flag fix
2019-07-10 14:49:37 +01:00
ts
154ab95801
vulnerabilities/unix/webapp/onlinestore: token table flag fix
2019-07-10 12:35:38 +01:00
Z. Cliffe Schreuders
45c9bc2de3
nfs root access fix
2019-07-09 16:19:38 +01:00
Z. Cliffe Schreuders
4703cbda04
ctf hacking scenario
2019-07-03 15:34:54 +01:00
Z. Cliffe Schreuders
e0499edbed
path env CTF module, move randomness out of puppet
2019-06-26 00:13:39 +01:00
Z. Cliffe Schreuders
8d60442f23
path env CTF module
2019-06-24 23:23:14 +01:00
Z. Cliffe Schreuders
c10a35691e
Merge major changes from Semester 2 into master
2019-06-18 14:37:47 +01:00
ts
15dc0ac734
Onlinestore update: Added more flags and a new scenario.xml
2019-04-11 16:17:50 +01:00
Z. Cliffe Schreuders
10581664ad
containers lab
2019-03-23 16:41:01 +00:00
Jason Zeller
adb0c6fa86
Create example scenarios for pcap and zip.
2019-03-13 18:07:48 -05:00
Jason Zeller
8e6055c80f
Merge branches 'crackable_user_accounts' and 'pcap_file' into CTF_addons
2019-03-13 17:36:53 -05:00
Jason Zeller
954ab73923
Added zip_file vulnerability as it also uses leak_to_file utility.
2019-03-13 17:30:43 -05:00
Jason Zeller
a96d83b045
Initial import of pcap generator/vulnerability. Also includes leak_to_file utility allowing any base64 file to be leaked wherever desired.
2019-03-13 17:19:50 -05:00
Jason Zeller
df2be07ffe
Renamed ncrack vulnerability to match jtr. Generated an example scenario for using crackable_user_accounts.
2019-03-13 16:39:06 -05:00
Jason Zeller
455cb08fbe
Replaced individual list generators with generic that allows future use. Added ncrack vulnerability.
2019-03-13 15:25:15 -05:00
Jason Zeller
14e865b74f
Initial import of custom password generators and matching vulnerabilities.
2019-03-13 13:49:38 -05:00
ts
3ebdedf8b8
Onlinestore bugfixes: removed all.tar, enforced correct alignment of user and killed_on date, replaced killed_on timestamp with datetime so that mysql does not adjust for timezones
2019-03-12 10:38:45 +00:00
ts
d9b9e3a83d
explicitly set file permissions for flags leaked by ::secgen_functions::leak_file
2019-03-12 10:38:04 +00:00
ts
fb74d29838
Onlinestore bugfixes: removed all.tar, enforced correct alignment of user and killed_on date, replaced killed_on timestamp with datetime so that mysql does not adjust for timezones
2019-03-12 10:27:14 +00:00
Z. Cliffe Schreuders
a556ba7d8a
lab updates
2019-02-22 14:00:01 +00:00
ts
0c3d070eb1
dvwa + gitlist: added notifies to tidy default sites enabled
2019-02-19 12:13:47 +00:00
ts
1c04a81afe
dvwa, hackerbot, gitlist040: tidy 000-default.conf
2019-02-19 11:26:17 +00:00
ts
e312445907
added tidy statements to ensure the 000-default.conf is removed from apache
2019-02-18 17:07:54 +00:00
ts
4cbc0613f9
wp_3x: fixing cron
2019-02-18 16:32:42 +00:00
ts
8156c8bfb2
added webapp_with_db type to select on for WNS assignment (excludes gitlist)
2019-02-18 13:52:54 +00:00
ts
e5a9069630
dvwa: added webapp type
2019-02-18 11:22:49 +00:00
ts
cf203624d2
Merge branch 's2progress' of https://github.com/cliffe/secgen into s2progress
2019-02-18 11:17:11 +00:00
Z. Cliffe Schreuders
68428ec828
lab updates
2019-02-16 10:20:05 +00:00
ts
9d664ad677
Merge branch 'post_tests' into s2progress
...
# Conflicts:
# modules/generators/structured_content/hackerbot_config/hbauthentication/secgen_metadata.xml
# modules/generators/structured_content/hackerbot_config/hbauthentication/templates/intro.md.erb
# modules/generators/structured_content/hackerbot_config/hbauthentication/templates/lab.xml.erb
# modules/vulnerabilities/unix/access_control_misconfigurations/suid_root_bash/suid_root_bash.pp
# modules/vulnerabilities/unix/access_control_misconfigurations/suid_root_vi/suid_root_vi.pp
# modules/vulnerabilities/unix/web_training/dvwa/files/DVWA-master/vulnerabilities/csp/help/help.php
# modules/vulnerabilities/unix/web_training/dvwa/manifests/apache.pp
# scenarios/ctf/basic_narrative.xml
# scenarios/labs/websec_lab_env.xml
# scenarios/security_audit/team_project.xml
2019-02-15 18:18:30 +00:00
ts
df77d931f3
reintroduce dirtycow as the apt-upgrade module works on oVirt with the puppet-agent package held
2019-02-15 18:00:26 +00:00
ts
930c056234
apache_stretch_compatible: now works with 2 vhosts like wheezy, enables stretch base for on basic_narrative.xml
2019-02-15 17:58:09 +00:00
ts
47217d26e4
onlinestore/secgen_tests: added check for populated db
2019-02-15 17:19:30 +00:00
Z. Cliffe Schreuders
94c0573111
lab updates
2019-02-14 16:13:58 +00:00
Z. Cliffe Schreuders
9a3ff20136
lab updates
2019-02-14 15:18:41 +00:00
thomashaw
d75c2134eb
Merge branch 'post_tests' of https://github.com/cliffe/SecGen into post_tests
2019-02-14 15:04:08 +00:00
Z. Cliffe Schreuders
53bba11133
lab updates (and related modules)
...
(cherry picked from commit 665b0589c8 )
2019-02-14 14:59:50 +00:00
Z. Cliffe Schreuders
4e5f8c0d1b
lab updates
2019-02-12 15:53:43 +00:00
Z. Cliffe Schreuders
c573d13699
lab updates
2019-02-08 22:31:13 +00:00
Z. Cliffe Schreuders
59af7ba1d9
groups
2019-02-07 21:51:53 +00:00
ts
fda7a01dff
Semester 2 team project scenario required changes
2019-02-07 14:32:14 +00:00
ts
345e902cca
removed example ctf challenge stuff..
2019-02-07 14:25:54 +00:00