42 Commits

Author SHA1 Message Date
ts
81440f7b4c Remove snort conflict + ignore errors + don't delete after failure + stdlib in secgen 2018-10-19 13:46:50 +01:00
ts
9761cecdc8 ovirt authz now passed as a parameter, added to example.conf 2018-10-19 13:46:49 +01:00
ts
f0bb2a26e1 Testing script, stretch fixes + code review 2018-10-19 13:46:49 +01:00
ts
c4f2d54bcc Strip trailing spaces from GemExe.exe args 2018-09-28 08:41:18 +01:00
ts
5208ae5cc7 Squashed WNS + IRI DL work 2018-09-21 12:34:26 +01:00
secgen server
e4114364f2 comment 2018-02-09 15:37:26 +00:00
secgen server
c7201f63cf timeout changes 2018-02-09 15:34:01 +00:00
thomashaw
6045c1f187 hackerbot merge - includes lots of other changes 2018-02-08 13:14:22 +00:00
Z. Cliffe Schreuders
d6ced69c31 Fix calling rubygem executable on some platforms 2017-08-18 23:31:57 -07:00
thomashaw
ed31b4bf0f print.rb: added .warn and bright_yellow text colouring 2017-08-16 13:11:33 +01:00
thomashaw
534a780726 Merge remote-tracking branch 'origin/pr/90'
# Conflicts:
#	README.md
#	lib/templates/Vagrantfile.erb
2017-06-30 15:21:22 +01:00
Z. Cliffe Schreuders
4b6c3c2d37 update to work with newer versions of vagrant (where the gem exists but doesn't execute) and update readme with more information and with gifs 2017-04-19 00:12:46 +01:00
thomashaw
07eaad8199 Project Vagrantfile's now use relative paths. This enables distribution of project's without having to mess with paths. 2017-04-11 11:46:44 +01:00
Jjk422
7960914a79 Adds the Windows 2008 r2 server 64 bit basebox, allows for no license.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.
2017-03-19 17:52:17 +00:00
thomashaw
bb884e9ffc generators/image/random_image: Returns random image as a base64 string. leaks the image to the parameterised_website. Icons in the public domain - thanks to http://publicicons.org/ 2017-03-16 12:03:22 +00:00
Z. Cliffe Schreuders
655684e3d4 datastore iteration and element access 2017-01-18 21:44:16 +00:00
Z. Cliffe Schreuders
f8ba19ad75 datastores for storing and reusing calculated values 2017-01-07 21:21:17 +00:00
thomashaw
17f425b37f Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type. 2016-12-08 10:43:48 +00:00
thomashaw
7d7d2e2677 Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak. 2016-12-05 17:15:55 +00:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
Z. Cliffe Schreuders
9ff06fce7e default values for parameters (modules and literal values) 2016-11-08 00:28:33 +00:00
Z. Cliffe Schreuders
e63aa00e0a parameterisation 2016-10-18 21:19:47 +01:00
Z. Cliffe Schreuders
9f0bd61726 Parameterisation 2016-08-30 23:18:31 +01:00
Z. Cliffe Schreuders
edc1e28d68 Parameterisation 2016-08-17 23:11:53 +01:00
Z. Cliffe Schreuders
0185837c7b Module dependencies 2016-08-16 23:44:44 +01:00
thomashaw
8b32a8dc62 Feature: Utilities - extracted services which do not run on a network socket e.g. package manager update, firewall rules, java etc. into utilities 2016-08-01 18:55:50 +01:00
Z. Cliffe Schreuders
6e6df008b9 Module dependencies 2016-07-27 09:51:13 +01:00
thomashaw
3162d17679 Added a chomp to gem_exec's path evaluation, was leaving a trailing newline + evaluating /usr/bin/vagrant\n as false when the /usr/bin/vagrant file was present 2016-06-09 11:25:40 +01:00
Z. Cliffe Schreuders
b5b19fe1c5 Major overhaul of code base! 2016-06-09 00:03:04 +01:00
Jjk422
c0346d2ab8 Changed Object variables to Object attributes hashes 2016-05-21 19:03:48 +01:00
aviio
dbb78104e7 Fixes distcc vulnerability issue and removes environment warnings 2016-05-12 18:13:56 +01:00
Jjk422
66d244150b Hopefully git will work this time instead of overwriting my files 2016-04-05 20:22:21 +01:00
Jjk422
7da182c7ee Added Yard doc generator, rake files to generate docs, commented most methods only managers and helpers need to be documented for ruby files 2016-04-04 12:29:01 +01:00
Connor Wilson
e61374b620 Merge remote-tracking branch 'upstream/master' 2016-03-29 19:19:38 +01:00
Connor Wilson
866de4d855 Relates to SG-11 : Pushes code to repo for Tom to branch from 2016-03-26 02:49:56 +00:00
thomashaw
16a77272ee SG-12: add to secgen_metadata and make filterable from scenario.xml 2016-03-23 23:52:35 +00:00
Connor Wilson
9e40d48687 mid-commit for apache server install 2016-03-22 12:53:26 +00:00
thomashaw
411639577f remove redundant include 2016-03-11 20:16:25 +00:00
Connor Wilson
7ebadf6caf Directory structure changes 2016-03-08 22:54:59 +00:00
Connor Wilson
6a0107ee05 Builds boxes now, puppet name changes 2016-03-08 22:53:49 +00:00
thomashaw
ea573072c8 vulnerability helper + change to vagrant base 2016-03-08 22:51:50 +00:00
Connor Wilson
401db4b0c5 Initial changes to directory structure 2016-03-08 22:42:19 +00:00