54 Commits

Author SHA1 Message Date
Cliffe
f177e0cf1c Merge pull request #283 from JBiggs610/passwordlist
Passwordlist
2023-07-31 10:40:42 +01:00
Jack Biggs
821269dc98 Update secgen_metadata.xml 2023-05-24 20:16:14 +01:00
Jack Biggs
502a412081 Update password_file.md.erb 2023-05-24 20:14:41 +01:00
Z. Cliffe Schreuders
f2f8019035 fix #281 -- manifest dir missing 2023-05-19 08:56:30 +01:00
Jack Biggs
ed53b1f3ed modified: modules/generators/content/password_file/secgen_local/local.rb
modified:   modules/generators/content/password_file/secgen_metadata.xml
	modified:   modules/generators/content/password_file/templates/password_file.md.erb
The program now takes in usernames as an input, as well as allowing for the benign and malicious subjects to be selected
2023-05-12 15:25:23 +01:00
Jack Biggs
ac3e3b0bc3 i
modified:   local.rb
	modified:   ../secgen_metadata.xml
Program now requires a password, and incorportates the interest directories and shuffles the array to mix up malicious and benign interests.
2023-05-08 12:53:17 +01:00
Jack Biggs
3cc5a8096a Merge pull request #1 from JBiggs610/master
Updating to include new interest files.
2023-05-08 12:32:25 +01:00
Z. Cliffe Schreuders
7cf89236b7 forensic modules and content 2023-04-27 17:46:05 +01:00
Z. Cliffe Schreuders
5eadaf83e9 fix required dir for bash_history module 2023-04-21 16:01:25 +01:00
Jack Biggs
145d97704c modified: modules/generators/content/password_file/secgen_metadata.xml
Updated SecGen metadata
2023-04-20 17:49:54 +01:00
Jack Biggs
a55ee552e0 modified: modules/generators/content/password_file/secgen_local/local.rb
modified:   modules/generators/content/password_file/templates/password_file.md.erb
Password List now takes in an input of passwords separated by ',' and then appends to an array and then outputs a random one from the array of 10 passwords into the password list allowing for repeats.
2023-04-20 17:46:05 +01:00
Cliffe
af4a41021b Merge pull request #239 from JBiggs610/bashhistory
Bash History File Generator
2023-04-18 10:51:56 +01:00
Jack Biggs
b1bc40a5da modified: modules/generators/content/bash_history/secgen_local/local.rb
Fixed password issue
2023-04-17 20:39:39 +01:00
Jack Biggs
4a725f3072 new file: lib/resources/linelists/top_100_websites
modified:   modules/generators/content/password_file/secgen_local/local.rb
	modified:   modules/generators/content/password_file/secgen_metadata.xml
	modified:   modules/generators/content/password_file/templates/password_file.md.erb
Added top_100_websites and set the program to take in 5 passwords from inputs
2023-04-16 15:41:31 +01:00
Jack Biggs
4f05e8b223 modified: modules/generators/content/bash_history/secgen_local/local.rb
Will only put sudo commands in if password is present
2023-04-16 14:26:57 +01:00
Jack Biggs
94e341585f new file: lib/resources/linelists/top_50_sudo_commands
new file:   lib/resources/linelists/top_90_linux_commands
	modified:   modules/generators/content/bash_history/secgen_local/local.rb
	modified:   modules/generators/content/bash_history/secgen_metadata.xml
Sudo commands are now randomly inputted and password is taken in from a parameter

	new file:   lib/resources/linelists/top_50_sudo_commands
	new file:   lib/resources/linelists/top_90_linux_commands
	modified:   modules/generators/content/bash_history/secgen_local/local.rb
	modified:   modules/generators/content/bash_history/secgen_metadata.xml
Sudo commands are now randomly entered into the commands array and the password is taken in as an input
2023-04-16 14:15:31 +01:00
thomashaw
7a30703348 Future proofing Faker modules with symbol parameters (deprecated calls break with faker gem newer than 3.0.0). 2023-02-17 10:24:26 +00:00
Jack Biggs
9d4d3a39bc Bash History File Generator 2023-02-10 14:23:23 +00:00
Jack Biggs
3373971e4d Password List Generator 2023-02-10 14:22:23 +00:00
Thalita
b5393515a5 Minor refactoring: mainly spaces. 2021-08-30 19:20:56 +01:00
Thalita
20d48fd252 Implemented insecure cookie vulnerability - Fixes #206. 2021-08-27 14:15:55 +01:00
Thalita
d080104ddc Implemented IDOR vulnerability and flag. 2021-08-25 19:37:20 +01:00
Thalita
5f10fada6f Fixed Issue #202 and removed redundant table and redundant code for user management. 2021-08-24 16:04:38 +01:00
Thalita
d320f5cbbb Edited list of table names used in Commando randomisation to remove mySQL reserved words. 2021-08-22 18:12:05 +01:00
Z. Cliffe Schreuders
886cbfe3df ctf updates 2020-03-12 17:36:55 +00:00
Z. Cliffe Schreuders
b5f39b3a43 Commando a bunch of modules for generating a randomised vulnerable web app with randomised table names, XSS, SQLi, etc.
Co-Authored-By: Josh1438 <Josh1438@Josh1438>
2020-02-24 23:28:49 +00:00
Z. Cliffe Schreuders
4cc1b211cd strip whitespace 2020-01-22 14:38:44 +00:00
ts
5eda7c5d34 Merge branch 'team_project' into team_project_merge
# Conflicts:
#	.gitignore
#	modules/services/unix/http/parameterised_website/secgen_metadata.xml
2018-02-07 15:47:48 +00:00
ts
6d0f7097dd WiP: Random themes 2018-02-07 14:25:14 +00:00
thomashaw
30193eb7c4 wip 2018-02-06 23:37:54 +00:00
Z. Cliffe Schreuders
7329bd0a92 lab update 2017-12-03 02:19:50 +00:00
Z. Cliffe Schreuders
04fcbed7a5 lab update 2017-12-01 15:54:44 +00:00
thomashaw
bfa430ba52 generator/concat_paragraph: concatenate data multiple input generators, with optional separators 2017-09-05 17:43:59 +01:00
thomashaw
02f191104d generator/credit_card_data: outputs credit card type and number 2017-09-05 17:41:50 +01:00
thomashaw
fa5015918b corrected method call 2017-09-05 12:31:17 +01:00
thomashaw
70e9d5cc27 generators/business_email: corrected method call 2017-09-05 12:28:17 +01:00
thomashaw
705383e108 encoder/random_string_selector: cleaned up print_string output. other encoders: added encoding print string padding 2017-09-05 11:26:29 +01:00
thomashaw
50c5854873 generators/mail_id: removed type=text_paragraph 2017-08-16 15:43:23 +01:00
thomashaw
ee83e5016e structured_content: initial work, created an organisation generator. Organisation based scenarios need updating to use this.
datastore access_json:  can now access individual structured_content elements
2017-08-14 14:09:29 +01:00
thomashaw
bae2a644af mail message: module_name update 2017-06-21 20:36:28 +01:00
thomashaw
48f09bec49 Person generator now accepts accounts and fills in the missing data (email, name) 2017-06-21 18:45:27 +01:00
thomashaw
c29294671f Random username and Name based username generator merged. Name-based behaviour runs when 'name' parameter is passed. Otherwise outputs a random username. 2017-06-21 14:27:52 +01:00
thomashaw
3a0f426842 utilities/mail module: creates system mail messages for a user on a linux system.
generators/mail_message: hash containing the data for a mail message.
generators/mail_id: outputs a randomly generated mail id string.
generators/date: added mail format and option to pass a date in + have it formatted.
2017-06-13 19:34:53 +01:00
thomashaw
2dc7d93d33 utilities/parameterised_accounts: adds an account with a strong password by default
vulnerabilities/crackable_user_account: adds an account with a weak password by default
2017-05-30 11:23:58 +01:00
thomashaw
5c24e13577 Date generator module_name fix 2017-05-13 17:46:22 +01:00
thomashaw
034c2ec409 generators/date_generator: added mysql_datetime format 2017-05-13 16:29:19 +01:00
thomashaw
58907d171d parameterised online_store 2017-05-11 15:02:56 +01:00
thomashaw
b9395ac69a Selecting default_inputs on specific generators rather than string_generator 2017-03-21 11:28:26 +00:00
Mihai Ordean
cb0f6ac289 Merge https://github.com/cliffe/SecGen 2017-03-16 14:04:00 +00:00
thomashaw
53149f3fd5 Misc. changes / cleanup 2017-03-16 12:39:50 +00:00