28 Commits

Author SHA1 Message Date
Z. Cliffe Schreuders
7cf89236b7 forensic modules and content 2023-04-27 17:46:05 +01:00
Z. Cliffe Schreuders
bb4047fd27 modules for ChatGPT-enhanced thematic content 2023-04-21 15:00:41 +01:00
Z. Cliffe Schreuders
79e78aa3c5 Output files -- admin passwords for vms, IP addresses, CyBOK per flag challenge and project, and simplified hints 2023-04-04 11:27:52 +01:00
thomashaw
0fc0ee14f1 Local Puppet Module update 2021-11-22 17:42:51 +00:00
Z. Cliffe Schreuders
886cbfe3df ctf updates 2020-03-12 17:36:55 +00:00
Z. Cliffe Schreuders
b5f39b3a43 Commando a bunch of modules for generating a randomised vulnerable web app with randomised table names, XSS, SQLi, etc.
Co-Authored-By: Josh1438 <Josh1438@Josh1438>
2020-02-24 23:28:49 +00:00
Z. Cliffe Schreuders
21b0f5793d dvwa depends 2019-11-27 17:21:24 +00:00
Z. Cliffe Schreuders
49e21adf93 ascii art image generator 2019-07-01 23:50:48 +01:00
Jason Zeller
455cb08fbe Replaced individual list generators with generic that allows future use. Added ncrack vulnerability. 2019-03-13 15:25:15 -05:00
ts
5bce99b86c Merge branch 'ctf_challenges_merge' into january_19_merge
# Conflicts:
#	lib/helpers/constants.rb
#	modules/utilities/unix/languages/java_wheezy_compatible/java/spec/spec_helper.rb~upstream_stretch_kde_update
2019-01-11 13:02:39 +00:00
Z. Cliffe Schreuders
1cbdd32145 lab updates 2018-12-06 15:16:24 +00:00
thomashaw
f39491f676 blacklisted words filter 2018-11-16 11:36:53 +00:00
ts
81440f7b4c Remove snort conflict + ignore errors + don't delete after failure + stdlib in secgen 2018-10-19 13:46:50 +01:00
thomashaw
534a780726 Merge remote-tracking branch 'origin/pr/90'
# Conflicts:
#	README.md
#	lib/templates/Vagrantfile.erb
2017-06-30 15:21:22 +01:00
thomashaw
07eaad8199 Project Vagrantfile's now use relative paths. This enables distribution of project's without having to mess with paths. 2017-04-11 11:46:44 +01:00
Jjk422
7960914a79 Adds the Windows 2008 r2 server 64 bit basebox, allows for no license.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.
2017-03-19 17:52:17 +00:00
thomashaw
bb884e9ffc generators/image/random_image: Returns random image as a base64 string. leaks the image to the parameterised_website. Icons in the public domain - thanks to http://publicicons.org/ 2017-03-16 12:03:22 +00:00
Z. Cliffe Schreuders
655684e3d4 datastore iteration and element access 2017-01-18 21:44:16 +00:00
Z. Cliffe Schreuders
f8ba19ad75 datastores for storing and reusing calculated values 2017-01-07 21:21:17 +00:00
thomashaw
17f425b37f Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type. 2016-12-08 10:43:48 +00:00
thomashaw
7d7d2e2677 Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak. 2016-12-05 17:15:55 +00:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
Z. Cliffe Schreuders
e63aa00e0a parameterisation 2016-10-18 21:19:47 +01:00
Z. Cliffe Schreuders
edc1e28d68 Parameterisation 2016-08-17 23:11:53 +01:00
Z. Cliffe Schreuders
0185837c7b Module dependencies 2016-08-16 23:44:44 +01:00
thomashaw
8b32a8dc62 Feature: Utilities - extracted services which do not run on a network socket e.g. package manager update, firewall rules, java etc. into utilities 2016-08-01 18:55:50 +01:00
Z. Cliffe Schreuders
6e6df008b9 Module dependencies 2016-07-27 09:51:13 +01:00
Z. Cliffe Schreuders
b5b19fe1c5 Major overhaul of code base! 2016-06-09 00:03:04 +01:00