thomashaw
cdd1358664
Future proofing Faker modules with symbol parameters (deprecated calls break with faker gem newer than 3.0.0).
...
(cherry picked from commit 7a30703348
2023-02-17 10:26:19 +00:00
thomashaw
fca33945d1
Disable uk specific addresses for now, bug in faker library for config.locale = en-GB)
2022-11-07 13:23:40 +00:00
Thalita
b5393515a5
Minor refactoring: mainly spaces.
2021-08-30 19:20:56 +01:00
Thalita
20d48fd252
Implemented insecure cookie vulnerability - Fixes #206 .
2021-08-27 14:15:55 +01:00
Thalita
d080104ddc
Implemented IDOR vulnerability and flag.
2021-08-25 19:37:20 +01:00
Thalita
5f10fada6f
Fixed Issue #202 and removed redundant table and redundant code for user management.
2021-08-24 16:04:38 +01:00
Thalita
d320f5cbbb
Edited list of table names used in Commando randomisation to remove mySQL reserved words.
2021-08-22 18:12:05 +01:00
Z. Cliffe Schreuders
886cbfe3df
ctf updates
2020-03-12 17:36:55 +00:00
Z. Cliffe Schreuders
b5f39b3a43
Commando a bunch of modules for generating a randomised vulnerable web app with randomised table names, XSS, SQLi, etc.
...
Co-Authored-By: Josh1438 <Josh1438@Josh1438>
2020-02-24 23:28:49 +00:00
Z. Cliffe Schreuders
4cc1b211cd
strip whitespace
2020-01-22 14:38:44 +00:00
ts
5eda7c5d34
Merge branch 'team_project' into team_project_merge
...
# Conflicts:
# .gitignore
# modules/services/unix/http/parameterised_website/secgen_metadata.xml
2018-02-07 15:47:48 +00:00
ts
6d0f7097dd
WiP: Random themes
2018-02-07 14:25:14 +00:00
thomashaw
30193eb7c4
wip
2018-02-06 23:37:54 +00:00
Z. Cliffe Schreuders
7329bd0a92
lab update
2017-12-03 02:19:50 +00:00
Z. Cliffe Schreuders
04fcbed7a5
lab update
2017-12-01 15:54:44 +00:00
thomashaw
bfa430ba52
generator/concat_paragraph: concatenate data multiple input generators, with optional separators
2017-09-05 17:43:59 +01:00
thomashaw
02f191104d
generator/credit_card_data: outputs credit card type and number
2017-09-05 17:41:50 +01:00
thomashaw
fa5015918b
corrected method call
2017-09-05 12:31:17 +01:00
thomashaw
70e9d5cc27
generators/business_email: corrected method call
2017-09-05 12:28:17 +01:00
thomashaw
705383e108
encoder/random_string_selector: cleaned up print_string output. other encoders: added encoding print string padding
2017-09-05 11:26:29 +01:00
thomashaw
50c5854873
generators/mail_id: removed type=text_paragraph
2017-08-16 15:43:23 +01:00
thomashaw
ee83e5016e
structured_content: initial work, created an organisation generator. Organisation based scenarios need updating to use this.
...
datastore access_json: can now access individual structured_content elements
2017-08-14 14:09:29 +01:00
thomashaw
bae2a644af
mail message: module_name update
2017-06-21 20:36:28 +01:00
thomashaw
48f09bec49
Person generator now accepts accounts and fills in the missing data (email, name)
2017-06-21 18:45:27 +01:00
thomashaw
c29294671f
Random username and Name based username generator merged. Name-based behaviour runs when 'name' parameter is passed. Otherwise outputs a random username.
2017-06-21 14:27:52 +01:00
thomashaw
3a0f426842
utilities/mail module: creates system mail messages for a user on a linux system.
...
generators/mail_message: hash containing the data for a mail message.
generators/mail_id: outputs a randomly generated mail id string.
generators/date: added mail format and option to pass a date in + have it formatted.
2017-06-13 19:34:53 +01:00
thomashaw
2dc7d93d33
utilities/parameterised_accounts: adds an account with a strong password by default
...
vulnerabilities/crackable_user_account: adds an account with a weak password by default
2017-05-30 11:23:58 +01:00
thomashaw
5c24e13577
Date generator module_name fix
2017-05-13 17:46:22 +01:00
thomashaw
034c2ec409
generators/date_generator: added mysql_datetime format
2017-05-13 16:29:19 +01:00
thomashaw
58907d171d
parameterised online_store
2017-05-11 15:02:56 +01:00
thomashaw
b9395ac69a
Selecting default_inputs on specific generators rather than string_generator
2017-03-21 11:28:26 +00:00
Mihai Ordean
cb0f6ac289
Merge https://github.com/cliffe/SecGen
2017-03-16 14:04:00 +00:00
thomashaw
53149f3fd5
Misc. changes / cleanup
2017-03-16 12:39:50 +00:00
Mihai Ordean
d9391d384f
added check to verify if leaked files is empty
2017-03-13 15:10:17 +00:00
thomashaw
32091ed0fe
Special Character work + generator/encoder superclass refactor.
...
The full Vagrantfile facter string has been encoded in b64 for now, would be nice to b64 the individual arguments rather than the whole string.
2017-03-01 19:19:54 +00:00
thomashaw
e8f8dcece4
Team project work squashed + removed dead code
2017-02-17 14:59:07 +00:00
thomashaw
373b0bc5dc
Parameterised Website using datastores. Loads of generators and encoders. Check out the example scenarios.
2017-01-15 19:56:13 +00:00
