Commit Graph

44 Commits

Author SHA1 Message Date
thomashaw
d456ee8074 WIP - Testing challenger homedir bug... 2022-02-02 18:38:37 +00:00
thomashaw
ee031d3209 param_accs: testing default groups 2022-01-31 13:33:11 +00:00
thomashaw
0a06435dc9 big_merge 2021-11-22 16:26:34 +00:00
Z. Cliffe Schreuders
e3d2e01a11 sudo module and cleanup 2021-11-18 16:16:51 +00:00
Z. Cliffe Schreuders
028824e540 disable aslr 2021-03-11 20:14:23 +00:00
thomashaw
341f8ecc53 handy_cli_tools: Added 'info' 2020-09-21 15:17:18 +01:00
Z. Cliffe Schreuders
319a0c1ee3 ascii 2019-07-02 00:03:54 +01:00
Z. Cliffe Schreuders
ae3f523587 shell before and after login banners 2019-07-01 22:58:10 +01:00
Z. Cliffe Schreuders
cf6098bf3b ctf modules 2019-07-01 14:50:50 +01:00
Z. Cliffe Schreuders
c10a35691e Merge major changes from Semester 2 into master 2019-06-18 14:37:47 +01:00
Jason Zeller
a96d83b045 Initial import of pcap generator/vulnerability. Also includes leak_to_file utility allowing any base64 file to be leaked wherever desired. 2019-03-13 17:19:50 -05:00
Z. Cliffe Schreuders
574b0dab4d Merge branch 's2progress' of https://github.com/cliffe/SecGen into s2progress 2019-02-25 17:13:19 +00:00
Z. Cliffe Schreuders
4ba06f9424 lab updates 2019-02-25 17:13:14 +00:00
ts
f4cdf6e2ec utilities/mail: install mailutils package 2019-02-25 11:24:42 +00:00
ts
9d664ad677 Merge branch 'post_tests' into s2progress
# Conflicts:
#	modules/generators/structured_content/hackerbot_config/hbauthentication/secgen_metadata.xml
#	modules/generators/structured_content/hackerbot_config/hbauthentication/templates/intro.md.erb
#	modules/generators/structured_content/hackerbot_config/hbauthentication/templates/lab.xml.erb
#	modules/vulnerabilities/unix/access_control_misconfigurations/suid_root_bash/suid_root_bash.pp
#	modules/vulnerabilities/unix/access_control_misconfigurations/suid_root_vi/suid_root_vi.pp
#	modules/vulnerabilities/unix/web_training/dvwa/files/DVWA-master/vulnerabilities/csp/help/help.php
#	modules/vulnerabilities/unix/web_training/dvwa/manifests/apache.pp
#	scenarios/ctf/basic_narrative.xml
#	scenarios/labs/websec_lab_env.xml
#	scenarios/security_audit/team_project.xml
2019-02-15 18:18:30 +00:00
Z. Cliffe Schreuders
9a3ff20136 lab updates 2019-02-14 15:18:41 +00:00
Z. Cliffe Schreuders
c573d13699 lab updates 2019-02-08 22:31:13 +00:00
Z. Cliffe Schreuders
acec842309 groups 2019-02-07 15:39:09 +00:00
ts
d655b3d226 updated tests + team project 2019-02-07 11:11:50 +00:00
Z. Cliffe Schreuders
16b5d91951 lab updates 2019-02-07 10:49:23 +00:00
Z. Cliffe Schreuders
9b662bcd43 lab updates 2019-02-06 16:35:13 +00:00
ts
ca7ba8bea2 data_to_leak conditional wrapper 2019-01-14 16:54:53 +00:00
thomashaw
3adb90970e hashcat + johntheripper + fixes 2018-11-16 11:36:53 +00:00
ts
f8708215f0 WiP: Rework to avoid regressions. 2018-11-16 11:33:32 +00:00
ts
61f7320add WiP: outputs from huffman in {secgen_data} format + create files.
Need to update so that the old stuff still works.
2018-11-16 11:33:31 +00:00
ts
c27733cecb WIP: data_to_leak 2018-11-16 11:33:31 +00:00
ts
3d3222bba2 parameterised accounts removed default input (it was previously unused in any scenario + needed to include the module without generating an empty unused account) 2018-11-16 10:19:09 +00:00
ts
6f0498916c WiP: SetGID working with dc16 modules, need to test with $binary_path and metactf 2018-11-16 10:19:09 +00:00
ts
69b0ea9100 xinetd module, updated setgid script wrapper, ruby script example + ruby challenge generator 2018-11-16 10:19:08 +00:00
ts
9ca017d3b2 bugfix 2018-11-16 10:19:08 +00:00
ts
e1df8957fc removing test code from binary_script_container 2018-11-16 10:19:08 +00:00
ts
b645916da9 WiP: Script container and script generator tracer code - need to build the shebang into the module and finish implementing setuid script function 2018-11-16 10:19:08 +00:00
Z. Cliffe Schreuders
4219937aa3 improved error handling and cleanup 2018-02-19 23:39:23 +00:00
thomashaw
6045c1f187 hackerbot merge - includes lots of other changes 2018-02-08 13:14:22 +00:00
thomashaw
1c44c7baec utilities/handy_cli_tools 2017-09-26 19:42:28 +01:00
thomashaw
22aaf7fbb4 updating scenario.xml's which refer to old username generators via module_path 2017-06-29 15:51:13 +01:00
thomashaw
7ad35cbafd new module: vulnerabilities/unix/system/passwordless_user_account 2017-06-20 11:08:32 +01:00
thomashaw
1a7540a83a removed 'testing_' from mail module 2017-06-19 13:58:37 +01:00
thomashaw
3a0f426842 utilities/mail module: creates system mail messages for a user on a linux system.
generators/mail_message: hash containing the data for a mail message.
generators/mail_id: outputs a randomly generated mail id string.
generators/date: added mail format and option to pass a date in + have it formatted.
2017-06-13 19:34:53 +01:00
thomashaw
2dc7d93d33 utilities/parameterised_accounts: adds an account with a strong password by default
vulnerabilities/crackable_user_account: adds an account with a weak password by default
2017-05-30 11:23:58 +01:00
thomashaw
5e7689316b vulnerabilities/parameterised_accounts => utilities/parameterised_accounts 2017-05-24 13:01:42 +01:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
Jjk422
bacf8f8278 Fix for errors in the pull request.
Reverted the following:
documentation/yard/rakefile.rb
lib/schemas/service_metadata_schema.xsd
modules/services/unix/database/mysql/*

Removed comments in the following:
scenarios/simple_examples/user_test_scenario.xml:11
modules/utilities/unix/system/accounts/secgen_metadata.xml:20
2016-09-01 16:14:04 +01:00
Jjk422
be636f7b42 Adds a user account module, currently not modifiable by facter or scenarios files but will be added when parametrization is merged.
Currently creates a user account named user with the password as password.
Home directory in /home/user.
Shell as /bin/bash.
2016-08-31 13:18:48 +01:00