thomashaw
|
03aaae2bc3
|
xfce desktop environment: extracted out auto login as root into vulnerability module
|
2017-03-24 15:30:30 +00:00 |
|
thomashaw
|
9ce9941843
|
adding ctf challenges to flawed_fortress_1.xml
|
2017-03-23 20:58:50 +00:00 |
|
thomashaw
|
75056b8bc8
|
Adding images_to_leak to appropriate modules. Use ::secgen_functions::leak_files to leak one or more images. Updated parameterised_website to leak multiple images. Updated gitlist to create a git repo with leaked strings and images.
|
2017-03-23 20:58:35 +00:00 |
|
Tom
|
200ce2206d
|
Merge pull request #92 from cliffe/fixed_default_inputs
fixed issue with passing a nested literal value into a default module input
|
2017-03-22 10:48:25 +00:00 |
|
Z. Cliffe Schreuders
|
f969cc8a42
|
fixed issue with passing a nested literal value into a default module input
|
2017-03-21 21:59:26 +00:00 |
|
thomashaw
|
e18ae5c5c9
|
flawed_fortress_1.xml - removed 'need more ascii_reversible' comment
|
2017-03-21 11:45:32 +00:00 |
|
thomashaw
|
6918eb1d3e
|
Minor fixes - parameterised_website leaks multiple strings_to_leak & metadata corrections
|
2017-03-21 11:44:17 +00:00 |
|
thomashaw
|
78b97bdeeb
|
Vignere Cipher - Takes strings_to_encode and encryption_key, outputs: KEY_CIPHERTEXT
|
2017-03-21 11:44:07 +00:00 |
|
thomashaw
|
b9395ac69a
|
Selecting default_inputs on specific generators rather than string_generator
|
2017-03-21 11:28:26 +00:00 |
|
thomashaw
|
94aa36cb2b
|
strong_password_generator
|
2017-03-20 14:31:56 +00:00 |
|
thomashaw
|
378bfcda69
|
ssh_leaked_keys example scenario
|
2017-03-20 14:02:43 +00:00 |
|
Tom
|
0de7581a96
|
Merge pull request #88 from meehien/master
Some minor changes
|
2017-03-20 14:01:16 +00:00 |
|
Z. Cliffe Schreuders
|
25771b6344
|
unique_module_names for selectively ensuring a scenario doesn't repeat modules (currently only in the scenario for nested under an input)
|
2017-03-18 17:03:47 +00:00 |
|
Mihai Ordean
|
86192340d7
|
removed debian 8.2
|
2017-03-18 08:54:49 +00:00 |
|
Mihai Ordean
|
bcc764ea11
|
seccourse will use base debian 7.8
|
2017-03-17 16:51:27 +00:00 |
|
Mihai Ordean
|
46827cd22c
|
added ssh_leaked_keys module
|
2017-03-17 16:32:59 +00:00 |
|
Mihai Ordean
|
cb0f6ac289
|
Merge https://github.com/cliffe/SecGen
|
2017-03-16 14:04:00 +00:00 |
|
thomashaw
|
3028e076d9
|
parameterise local root level vulnerabilities -- added strings_to_leak
|
2017-03-16 13:20:32 +00:00 |
|
thomashaw
|
53149f3fd5
|
Misc. changes / cleanup
|
2017-03-16 12:39:50 +00:00 |
|
thomashaw
|
7c4d21e942
|
generators/images/qr_code: creates a QR code out of a string(usually a flag) and outputs it as a .png represented as a base64 string.
|
2017-03-16 12:32:33 +00:00 |
|
thomashaw
|
638e87e571
|
generators/challenges/hidden_data_in_image_file: Appends strings_to_leak to a random image's raw data.
|
2017-03-16 12:22:03 +00:00 |
|
thomashaw
|
8d61097be5
|
encoders/string/hex: string to oct encoder - Encodes a string into each character's octal representation
|
2017-03-16 12:21:03 +00:00 |
|
thomashaw
|
8b83eb1ac3
|
encoders/string/hex: string to hex encoder - Encodes a string into hexadecimal
|
2017-03-16 12:18:11 +00:00 |
|
thomashaw
|
bb884e9ffc
|
generators/image/random_image: Returns random image as a base64 string. leaks the image to the parameterised_website. Icons in the public domain - thanks to http://publicicons.org/
|
2017-03-16 12:03:22 +00:00 |
|
thomashaw
|
895af9ae89
|
generators/challenges/bitwise_xor: input is a string_to_mask, output is 2 random bit streams that can, when bitwise xor'd together, reveal the string_to_mask.
|
2017-03-16 11:09:46 +00:00 |
|
thomashaw
|
5b76e04f9b
|
Encoder: Morse Code. 'parentheses' mapped to [], { }, <> and () to cover as many varieties as we can. Any other character not represented in Morse Code is dropped.
|
2017-03-16 10:36:02 +00:00 |
|
thomashaw
|
253d983e01
|
encoders/string/dec: ASCII to DEC encoder - Encodes each character into DEC representation and concats the results
|
2017-03-16 10:31:01 +00:00 |
|
thomashaw
|
23fcdb626c
|
encoders/string/binary: ASCII to Binary encoder
|
2017-03-16 10:29:07 +00:00 |
|
Z. Cliffe Schreuders
|
41bbb34649
|
fixed nested default modules
|
2017-03-16 10:21:21 +00:00 |
|
Z. Cliffe Schreuders
|
e48cd1b250
|
mark ascii_value_shift as being ascii_reversable
|
2017-03-14 17:34:44 +00:00 |
|
Z. Cliffe Schreuders
|
6a14c417c6
|
marker.xml for marking CTF flags and providing hints (which have IDs so we don't have to give the same hint twice), also updated organisation of scenarios
|
2017-03-14 17:30:33 +00:00 |
|
Mihai Ordean
|
4f122a5ff6
|
added seccourse.xml scenario
|
2017-03-13 15:12:46 +00:00 |
|
Mihai Ordean
|
d9391d384f
|
added check to verify if leaked files is empty
|
2017-03-13 15:10:17 +00:00 |
|
Mihai Ordean
|
6c97d81250
|
added gnome desktop env. for debian
|
2017-03-13 10:44:26 +00:00 |
|
Mihai Ordean
|
45543b2662
|
added debian 8.2 base
|
2017-03-13 10:43:16 +00:00 |
|
Mihai Ordean
|
ad869c82dc
|
added options to customize VirtualBox hw support from command line
|
2017-03-13 10:41:54 +00:00 |
|
Cliffe
|
5842a0d44e
|
Update README with repo install of ruby-bundler
|
2017-03-12 13:05:30 +00:00 |
|
thomashaw
|
e73b0f3d58
|
Shift Cipher Encoders: caesar_shift and ascii_value_shift
|
2017-03-03 12:51:26 +00:00 |
|
thomashaw
|
ffb0caf2bf
|
Don't encode output to b64 if we're just running the script as a stand-alone.
|
2017-03-02 12:43:24 +00:00 |
|
thomashaw
|
32091ed0fe
|
Special Character work + generator/encoder superclass refactor.
The full Vagrantfile facter string has been encoded in b64 for now, would be nice to b64 the individual arguments rather than the whole string.
|
2017-03-01 19:19:54 +00:00 |
|
thomashaw
|
e8f8dcece4
|
Team project work squashed + removed dead code
|
2017-02-17 14:59:07 +00:00 |
|
Z. Cliffe Schreuders
|
9466f26f8e
|
security audit remit generator
|
2017-02-08 00:41:14 +00:00 |
|
Z. Cliffe Schreuders
|
1f3f0c211d
|
Merge branch 'access_datastore_elements'
|
2017-01-18 21:49:52 +00:00 |
|
Z. Cliffe Schreuders
|
655684e3d4
|
datastore iteration and element access
|
2017-01-18 21:44:16 +00:00 |
|
Z. Cliffe Schreuders
|
f30f62bbd5
|
readme update
|
2017-01-17 20:45:32 +00:00 |
|
Tom
|
24c38cbe46
|
Merge pull request #87 from thomashaw/cleanup_rebse
Cleanup Module
|
2017-01-17 16:28:12 +00:00 |
|
thomashaw
|
43c02f220f
|
Updated for post-parameterisation
|
2017-01-17 16:27:18 +00:00 |
|
thomashaw
|
f8a97b2842
|
Parameterised Cleanup Module
|
2017-01-17 16:11:50 +00:00 |
|
thomashaw
|
16e3107838
|
Quick fix for the system_number method from last commit.
|
2017-01-17 15:59:29 +00:00 |
|
thomashaw
|
1522fd3ac9
|
Enable static IP address network IP address resolution & a fix for the duplicate modules being output when using multiple systems in Vagrantfile bug
|
2017-01-17 14:49:24 +00:00 |
|