100 Commits

Author SHA1 Message Date
thomashaw
e8f8dcece4 Team project work squashed + removed dead code 2017-02-17 14:59:07 +00:00
Z. Cliffe Schreuders
1f3f0c211d Merge branch 'access_datastore_elements' 2017-01-18 21:49:52 +00:00
Z. Cliffe Schreuders
655684e3d4 datastore iteration and element access 2017-01-18 21:44:16 +00:00
thomashaw
43c02f220f Updated for post-parameterisation 2017-01-17 16:27:18 +00:00
thomashaw
f8a97b2842 Parameterised Cleanup Module 2017-01-17 16:11:50 +00:00
thomashaw
16e3107838 Quick fix for the system_number method from last commit. 2017-01-17 15:59:29 +00:00
thomashaw
1522fd3ac9 Enable static IP address network IP address resolution & a fix for the duplicate modules being output when using multiple systems in Vagrantfile bug 2017-01-17 14:49:24 +00:00
thomashaw
373b0bc5dc Parameterised Website using datastores. Loads of generators and encoders. Check out the example scenarios. 2017-01-15 19:56:13 +00:00
Z. Cliffe Schreuders
f8ba19ad75 datastores for storing and reusing calculated values 2017-01-07 21:21:17 +00:00
Z. Cliffe Schreuders
ab8ff07201 fix parameterised module input into modules 2017-01-05 21:07:48 +00:00
thomashaw
87e029fdd3 change [0] for .first 2016-12-22 20:23:44 +00:00
thomashaw
b09769c515 Adding read_fact to generators. 2016-12-13 19:26:48 +00:00
thomashaw
17f425b37f Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type. 2016-12-08 10:43:48 +00:00
thomashaw
d197421c11 Vagrantfile removed encoders + generators as they don't need to be on the box 2016-12-06 16:52:53 +00:00
thomashaw
7d7d2e2677 Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak. 2016-12-05 17:15:55 +00:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
thomashaw
f724415cdf Privilege changes: More specific privilege levels. r, rw, rwx for root & user. 2016-11-14 14:34:04 +00:00
Z. Cliffe Schreuders
9ff06fce7e default values for parameters (modules and literal values) 2016-11-08 00:28:33 +00:00
Z. Cliffe Schreuders
601362a12d random selection between inputs 2016-10-19 19:49:30 +01:00
Z. Cliffe Schreuders
518485f61d cleanup Vagrantfile output 2016-10-18 22:31:58 +01:00
Z. Cliffe Schreuders
4421c7d99c Merge branch 'parameterisation' 2016-10-18 21:25:17 +01:00
Z. Cliffe Schreuders
e282dde855 Merge branch 'master' of https://github.com/cliffe/SecGen 2016-10-18 21:23:02 +01:00
Z. Cliffe Schreuders
e63aa00e0a parameterisation 2016-10-18 21:19:47 +01:00
Jjk422
18268af6c9 Merge pull request #69 from thomashaw/shellshock_rebase
Tested and seems to be fully working.
2016-09-06 15:17:28 +01:00
thomashaw
d9d785f335 Metadata: Updated shellshock privilege = none, access = local 2016-09-06 13:46:31 +01:00
Z. Cliffe Schreuders
8bbdc885a3 Merge branches 'master' and 'parameterisation' of https://github.com/cliffe/SecGen 2016-09-05 08:56:59 +01:00
thomashaw
3f00728fd2 Vulnerability: samba anonymously writable share + symlink traversal 2016-09-02 19:55:42 +01:00
Jjk422
f9b2cd548f Correcting pull request errors, only one out of --total-memory or --memory-per-vm is selected (first to be inputted) and shows error message if both inputted.
Also removed defaults so that vms automatically decide on values if not specified.
2016-08-31 09:37:01 +01:00
Z. Cliffe Schreuders
9f0bd61726 Parameterisation 2016-08-30 23:18:31 +01:00
Z. Cliffe Schreuders
6b96ef6476 Parameterisation 2016-08-29 23:06:57 +01:00
Jjk422
42adbcb853 Added extra command line options to modify generated vms, need to be separated into a ruby class to ensure max values are not set (max ram larger then system ram) and to make sure that large ruby blocks are not in Vagrantfile.erb.
Options added are:
--memory-per-vm
--total-memory
--max-cpu-cores
--max-cpu-usage
2016-08-19 19:35:47 +01:00
Z. Cliffe Schreuders
d8d624cd03 Merge remote-tracking branch 'origin/parameterisation' into parameterisation
Conflicts:
	lib/objects/module.rb
	lib/objects/system.rb
	lib/readers/module_reader.rb
	lib/schemas/scenario_schema.xsd
	modules/vulnerabilities/unix/local/writeable_shadow/secgen_metadata.xml
	scenarios/simple_examples/writeable_shadow_vulnerability.xml
2016-08-17 23:13:28 +01:00
Z. Cliffe Schreuders
edc1e28d68 Parameterisation 2016-08-17 23:11:53 +01:00
egg82
28eb21a083 Update Vagrantfile.erb 2016-08-17 13:33:15 -06:00
egg82
49c19a0c21 Update project_files_creator.rb 2016-08-17 13:29:07 -06:00
Z. Cliffe Schreuders
0185837c7b Module dependencies 2016-08-16 23:44:44 +01:00
egg82
2b900f94d1 Allowing SecGen to be run on servers/droplets 2016-08-14 15:04:57 -06:00
Z. Cliffe Schreuders
f314b141ec parameterisation - work in progress 2016-08-08 11:40:43 +01:00
Z. Cliffe Schreuders
f68ed2f4a7 parameterisation - work in progress 2016-08-08 11:40:36 +01:00
thomashaw
8b32a8dc62 Feature: Utilities - extracted services which do not run on a network socket e.g. package manager update, firewall rules, java etc. into utilities 2016-08-01 18:55:50 +01:00
thomashaw
e14a0f75df post-dependencies tidy up 2016-08-01 18:13:30 +01:00
Z. Cliffe Schreuders
6e6df008b9 Module dependencies 2016-07-27 09:51:13 +01:00
Tom
3c3cc94f00 Merge pull request #39 from Jjk422/change_vuln_xml_schema_to_include_apache_v2_licence
Apache v2 licence for vulnerabilities
2016-06-14 18:17:39 +01:00
Jjk422
a8803d3193 Add the Apache v2 licence to the vulnerabilities licences. 2016-06-14 16:29:43 +01:00
thomashaw
52f7230e16 PR 33: Minor changes 2016-06-13 18:45:19 +01:00
Z. Cliffe Schreuders
af64680bb7 parameterisation - work in progress 2016-06-12 13:45:53 +01:00
Z. Cliffe Schreuders
8293403135 parameterisation - work in progress 2016-06-12 00:21:12 +01:00
Cliffe
9d30339b28 Merge pull request #32 from Jjk422/post-update-fixes
Post update fixes
2016-06-09 20:56:33 +01:00
Jjk422
a54147962f Changed encoding of symbol as us-ascii encoding that doesn't work with all machines. 2016-06-09 14:36:06 +01:00
thomashaw
3162d17679 Added a chomp to gem_exec's path evaluation, was leaving a trailing newline + evaluating /usr/bin/vagrant\n as false when the /usr/bin/vagrant file was present 2016-06-09 11:25:40 +01:00