thomashaw
|
e8f8dcece4
|
Team project work squashed + removed dead code
|
2017-02-17 14:59:07 +00:00 |
|
thomashaw
|
373b0bc5dc
|
Parameterised Website using datastores. Loads of generators and encoders. Check out the example scenarios.
|
2017-01-15 19:56:13 +00:00 |
|
thomashaw
|
4d6fb601b7
|
Revert: Updated puppetforge/apache to latest version
|
2016-12-30 01:10:33 +00:00 |
|
thomashaw
|
f78e2fc404
|
Updated puppetforge/apache to latest version
|
2016-12-21 17:57:52 +00:00 |
|
thomashaw
|
17f425b37f
|
Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type.
|
2016-12-08 10:43:48 +00:00 |
|
thomashaw
|
733c871072
|
Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules.
|
2016-11-30 18:09:22 +00:00 |
|
thomashaw
|
2cf329eeef
|
Vulnerability: Gitlist 0.4.0 webapp with RCE
|
2016-11-13 22:43:47 +00:00 |
|
thomashaw
|
d3194f4d56
|
Fix: Added a file resource for the /usr/lib/cgi-bin/ directory.
|
2016-09-06 13:21:00 +01:00 |
|
thomashaw
|
60cd05536d
|
Vulnerability: Shellshock in bash & Service: apache server with cgi hosting a bash script
New scenario combines the two & is exploitable with msf module: exploit/multi/http/apache_mod_cgi_bash_env_exec
|
2016-09-04 22:15:28 +01:00 |
|
thomashaw
|
e14a0f75df
|
post-dependencies tidy up
|
2016-08-01 18:13:30 +01:00 |
|
Tom
|
29b58b325f
|
Merge pull request #55 from cliffe/module_dependencies
Module dependencies
|
2016-07-30 11:45:29 +01:00 |
|
thomashaw
|
e9f1b87774
|
Removed testing comments
|
2016-07-30 11:45:06 +01:00 |
|
Z. Cliffe Schreuders
|
6e6df008b9
|
Module dependencies
|
2016-07-27 09:51:13 +01:00 |
|
Tom
|
d0c464019f
|
Merge pull request #50 from Jjk422/new_nginx_service_module
Nginx service module, should be fully working and secure.
|
2016-07-25 06:46:54 +01:00 |
|
Jjk422
|
8c7c2bac60
|
Changes:
config/scenario.xml - old scenario file deleted
secgen_metadata.xml:18: removed comment from tag on this line
|
2016-07-23 09:52:22 +01:00 |
|
Jjk422
|
4cc2e6b31c
|
Nginx service module, should be fully working and secure.
Default index.html file and directory used.
Can connect via browser on host machine via nginx_service.xml file.
|
2016-07-22 11:26:07 +01:00 |
|
Jjk422
|
b36fe6070a
|
Spelling mistake in file secgen_metadata.xml
Spelling mistake in file secgen_metadata.xml, to small to warrant a pull request.
|
2016-06-28 10:52:21 +01:00 |
|
Z. Cliffe Schreuders
|
b5b19fe1c5
|
Major overhaul of code base!
|
2016-06-09 00:03:04 +01:00 |
|
Connor Wilson
|
67d58a1e1f
|
Relates to SG-11 : Now able to generate a full wordpress site (Apache / SQL / Wordpress)
|
2016-03-28 21:07:27 +01:00 |
|
Connor Wilson
|
386810cab4
|
Relates to SG-11 : Now able to generate a full wordpress site (Apache / SQL / Wordpress)
|
2016-03-26 19:45:13 +00:00 |
|
Connor Wilson
|
6b1a798122
|
Relates to SG-11 : Pushes all new modules and dependencies
|
2016-03-26 03:54:18 +00:00 |
|
Connor Wilson
|
de9c278c1b
|
Relates to SG-11 : Pushes code to repo for Tom to branch from
|
2016-03-26 03:33:50 +00:00 |
|
Connor Wilson
|
866de4d855
|
Relates to SG-11 : Pushes code to repo for Tom to branch from
|
2016-03-26 02:49:56 +00:00 |
|
Connor Wilson
|
da9eda4602
|
Relates to SG-18 : Test commit
|
2016-03-23 19:20:54 +00:00 |
|
Connor Wilson
|
9e40d48687
|
mid-commit for apache server install
|
2016-03-22 12:53:26 +00:00 |
|