2525 Commits

Author SHA1 Message Date
thomashaw
f50d96c281 iceweasel: Added parameter to optionally disable automatic https-upgrades - default behaviour is unchanged 2026-02-08 16:50:02 +00:00
thomashaw
af5136d4cc converted the static parameterised_website into a very vulnerable php app. 2026-02-07 16:27:43 +00:00
Z. Cliffe Schreuders
c8010035a9 Refactor phpLDAPadmin configuration in ldap_server install manifest - ordering 2026-02-05 10:21:36 +00:00
Z. Cliffe Schreuders
a94812f520 Enhance vsftpd_234_backdoor installation process
- Added a step to clean pre-compiled 32-bit object files from the tarball to ensure compatibility.
- Updated dependencies to require the cleaning step before using the Makefile.
- Included a check to create the vsftpd binary only if the Makefile is present.
2026-02-05 09:32:15 +00:00
Z. Cliffe Schreuders
5b50c19742 Refactor vsftpd_234_backdoor installation process
- Removed 32-bit library installation to improve compatibility with modern Debian systems.
- Updated Makefile to use native architecture for compilation by removing the -m32 flag.
- Simplified dependency installation by eliminating unnecessary multilib packages.
2026-02-04 22:30:15 +00:00
Z. Cliffe Schreuders
b54804c431 Enhance phpLDAPadmin configuration to auto-increment UIDs at 10000 and GIDs at 5000, preventing conflicts with local system users. Inserts the configuration line before the closing ?> tag. 2026-02-04 17:56:38 +00:00
Z. Cliffe Schreuders
93254d83b3 Configure phpLDAPadmin to auto-increment UIDs starting at 10000 to prevent conflicts with local system users. 2026-02-04 00:08:57 +00:00
Z. Cliffe Schreuders
7bca4eda52 Update Active Directory package installation from 'realm' to 'realmd' 2026-02-03 10:19:59 +00:00
Z. Cliffe Schreuders
28ea284d83 Enhance LDAP server configuration
- Added functionality to convert the domain to LDAP DN format for better integration.
- Configured phpLDAPadmin to use the generated base DN, ensuring it matches the LDAP domain.
2026-02-03 09:59:45 +00:00
Z. Cliffe Schreuders
f1d57078fe Add Active Directory integration packages
- Introduced `ad_packages` module for installing necessary packages for Active Directory domain integration, including `realm`, `sssd`, `adcli`, and Samba utilities.
- Created metadata file for the `ad_packages` module to describe its functionality and licensing.
- Updated scenario configuration to include the new `ad_packages` utility.
2026-02-03 00:10:36 +00:00
Z. Cliffe Schreuders
db3712f305 Refactor LDAP server initialization 2026-02-02 16:55:11 +00:00
Z. Cliffe Schreuders
37c9eb51d7 Refactor LDAP server metadata to update requirements and conflicts 2026-02-02 14:24:33 +00:00
Z. Cliffe Schreuders
1290dbf2e6 Remove Apache service requirement from LDAP server configuration in systems_security scenario 2026-02-02 14:14:46 +00:00
Z. Cliffe Schreuders
ecc764b14d Add LDAP packages and server configuration
- Introduced `ldap_packages` module for installing LDAP client utilities and integration packages.
- Added `ldap_server` module for installing and configuring OpenLDAP server with phpLDAPadmin.
- Updated scenario configuration to include LDAP packages and server utilities.
- Created metadata files for both modules to describe their functionality and requirements.
2026-02-02 14:13:11 +00:00
Cliffe
20e6824d22 Merge pull request #353 from alixthegreat/such-a-git
changed gitlist cvss vector to version 2
2025-12-10 13:52:21 +00:00
alixxhiscock
28cd6d144e changed cvss to version 2 2025-12-09 15:08:35 +00:00
Cliffe
a3e70fe62d Merge pull request #344 from girlier/relative_path_suid_hardlinks_fix
Relative path suid hardlinks fix
2025-12-08 22:41:16 +00:00
Cliffe
551b761ca8 Merge pull request #336 from mission-deny-the-mission/patch-1
Update blacklist.txt
2025-12-08 22:37:55 +00:00
Cliffe
befa92b081 Update Vagrant box URL for Debian Bookworm 2025-12-08 22:36:12 +00:00
Cliffe
657167b54f Merge pull request #341 from JD2344/kali-base
Add new Kali base URL
2025-12-08 22:33:45 +00:00
Cliffe
3bef3354ca Merge pull request #345 from girlier/ff_decode_me_lab
Ff decode me lab
2025-12-08 22:32:59 +00:00
Cliffe
184b2ba876 Merge pull request #346 from girlier/nosferatu_lab_ctf
Nosferatu lab ctf
2025-12-08 22:32:18 +00:00
Cliffe
70dbe3f9b7 Merge pull request #347 from alixthegreat/rooting-for-a-win
Rooting For A Win lab
2025-12-08 22:30:31 +00:00
Cliffe
1c4f931272 Merge pull request #348 from alixthegreat/such-a-git
Such a git lab
2025-12-08 22:29:51 +00:00
Cliffe
1ee09637fa Merge pull request #349 from alixthegreat/smash-crack-grab-run
Smash Crack Grab Run lab
2025-12-08 22:28:54 +00:00
Cliffe
58857cd732 Merge pull request #350 from alixthegreat/putting-it-together
Putting It Together lab
2025-12-08 22:26:46 +00:00
Cliffe
b97968f15b Merge pull request #351 from girlier/banner_grab_and_run_lab
Scenario update: Banner_grab_and_run lab updated to Debian 12
2025-12-08 22:26:11 +00:00
alixxhiscock
25361340a8 updated from debian 10 to 12 2025-11-14 16:50:50 +00:00
alixxhiscock
20a18f8c73 changed gitlist vulnerability details to different gitlist vulnerability 2025-11-14 11:50:35 +00:00
alixxhiscock
3f52918304 updated debian 10 to 12 2025-11-13 13:22:05 +00:00
alixxhiscock
e45d07e419 Added john to attack vm 2025-11-13 12:58:41 +00:00
alixxhiscock
d4b88ad086 Updated such_a_git to debian 12 2025-11-13 12:47:55 +00:00
Rosie
497111525f Scenario update: Added CyberChef and enabled it to auto start due to encrypted flag 2025-11-12 17:56:50 +00:00
Rosie
e8a850290e Update nosferatu.xml to Debian 12 2025-11-12 17:49:15 +00:00
Rosie
639bd7cf8d Added CyberChef Module 2025-11-12 14:52:31 +00:00
Rosie
fba35cb8bf Update scenario: Server Base from Debian 10 => 12 2025-11-12 14:42:54 +00:00
Rosie
ca74818125 Scenario update: Banner_grab_and_run lab updated to Debian 12
- Updated desktop base from Debian 9 to Debian 12

- Updated server base from Debian 9 to Debian 12

- Added cyberchef utility for decoding encoded flags

- Added iceweasel configured to autostart with CyberChef
2025-11-10 19:10:36 +00:00
Rosie
5a02886c9c Update scenarios: updated access_can_roll lab to Debian 12 base
removed hackerbot tag (no hackerbot config/ server section)

removed Iceweasel module (opened deadlink)

removed Pidgin module (no hackerbot)

removed SSH vulnerability (secgen erorr/ not needed for this lab)

added gcc module to server (needed for setting up lab)
2025-11-10 18:27:12 +00:00
Rosie
58206a3ea2 Updated relative_path_suid_hardlinks module: fixed hardlink protections for Debian 12
- changed fs.protected_regular = 0

changed fs.protected_fifos = 0
2025-11-10 18:23:42 +00:00
Z. Cliffe Schreuders
15800cf5c1 Update lab sheet URLs in software security exploitation scenarios
Replaced Google Docs links with new URLs pointing to HacktivityLabSheets for the following scenarios:
1. 1_c_asm_iof.xml
2. 2_race_conditions_format_str.xml
3. 3_bug_hunting_and_fuzzing.xml
4. 4_exploit_development.xml
5. 5_linux_stack_bof.xml
6. 6_linux_nx_bypass.xml
7. 7_linux_aslr_bypass.xml
8. 8_linux_bof_format.xml
2025-10-03 17:42:35 +01:00
Z. Cliffe Schreuders
41615b1a4a Update more lab sheets to new GitHub pages 2025-10-02 23:08:49 +01:00
Z. Cliffe Schreuders
d941c2e825 Update lab sheet URL in 8_dynamic_continued.xml
Replaced the lab sheet URL to point to the correct HacktivityLabSheets link for the dynamic continued scenario.
2025-10-01 12:35:26 +01:00
Z. Cliffe Schreuders
b2e5f0dc1d Update lab sheet URLs in software and malware analysis scenarios
Replaced Google Docs links with new URLs pointing to HacktivityLabSheets for the following scenarios:
1. 3_c_and_asm.xml
2. 4_asm.xml
3. 5_ghidra.xml
4. 7_dynamic.xml
5. 8_dynamic_continued.xml
6. 9_malware_behaviour.xml
7. 10_anti_sre.xml
8. 11_coconut.xml
2025-10-01 12:25:14 +01:00
Z. Cliffe Schreuders
8ab72ebebb Update lab sheet URLs in software and malware analysis scenarios
Replaced Google Docs links with new URLs pointing to HacktivityLabSheets for the following scenarios:
1. 1_dynamic_and_static_analysis.xml
2. 2_intro_to_c.xml
2025-09-30 10:55:30 +01:00
Z. Cliffe Schreuders
f8543a5881 Lab sheet update 2025-09-29 12:11:01 +01:00
Z. Cliffe Schreuders
ec2dc98666 Update lab sheet URLs in introducing_attacks scenarios
Replaced Google Docs links with new URLs pointing to HacktivityLabSheets for the following scenarios:
1. 1_intro_linux.xml
2. 2_malware_msf_payloads.xml
3. 3_vulnerabilities.xml
4. 5_scanning.xml
5. 6_exploitation.xml
6. 7_post-exploitation.xml
7. 8_vulnerability_analysis.xml
2025-09-27 01:19:12 +01:00
Z. Cliffe Schreuders
d54cc0e3ab Update .gitignore to exclude vendor directory
Added 'vendor/**' to the .gitignore file to prevent tracking of vendor files in the repository.
2025-09-11 13:39:10 +01:00
Z. Cliffe Schreuders
203bed204e Add function to determine best display resolution in auto-resolution.sh
Avoids choosing resolutions greater than HD, as this causes font to be too small.

Implemented a new function, get_best_resolution, to select the optimal resolution for connected outputs based on available modes. The update_resolutions function now utilizes this new logic to set the display resolution accordingly, falling back to auto mode if no suitable resolution is found.
2025-09-11 13:38:55 +01:00
Z. Cliffe Schreuders
1e1bcdce57 Merge branch 'master' of https://github.com/cliffe/SecGen 2025-07-03 22:12:15 +01:00
Z. Cliffe Schreuders
9e3751bbee Remove unnecessary directory creation for autostart konsole in kde_minimal config.pp 2025-07-03 22:12:12 +01:00