Z. Cliffe Schreuders
|
f969cc8a42
|
fixed issue with passing a nested literal value into a default module input
|
2017-03-21 21:59:26 +00:00 |
|
Tom
|
0de7581a96
|
Merge pull request #88 from meehien/master
Some minor changes
|
2017-03-20 14:01:16 +00:00 |
|
Z. Cliffe Schreuders
|
25771b6344
|
unique_module_names for selectively ensuring a scenario doesn't repeat modules (currently only in the scenario for nested under an input)
|
2017-03-18 17:03:47 +00:00 |
|
Mihai Ordean
|
cb0f6ac289
|
Merge https://github.com/cliffe/SecGen
|
2017-03-16 14:04:00 +00:00 |
|
thomashaw
|
bb884e9ffc
|
generators/image/random_image: Returns random image as a base64 string. leaks the image to the parameterised_website. Icons in the public domain - thanks to http://publicicons.org/
|
2017-03-16 12:03:22 +00:00 |
|
Z. Cliffe Schreuders
|
41bbb34649
|
fixed nested default modules
|
2017-03-16 10:21:21 +00:00 |
|
Z. Cliffe Schreuders
|
6a14c417c6
|
marker.xml for marking CTF flags and providing hints (which have IDs so we don't have to give the same hint twice), also updated organisation of scenarios
|
2017-03-14 17:30:33 +00:00 |
|
Mihai Ordean
|
d9391d384f
|
added check to verify if leaked files is empty
|
2017-03-13 15:10:17 +00:00 |
|
Mihai Ordean
|
ad869c82dc
|
added options to customize VirtualBox hw support from command line
|
2017-03-13 10:41:54 +00:00 |
|
thomashaw
|
e73b0f3d58
|
Shift Cipher Encoders: caesar_shift and ascii_value_shift
|
2017-03-03 12:51:26 +00:00 |
|
thomashaw
|
ffb0caf2bf
|
Don't encode output to b64 if we're just running the script as a stand-alone.
|
2017-03-02 12:43:24 +00:00 |
|
thomashaw
|
32091ed0fe
|
Special Character work + generator/encoder superclass refactor.
The full Vagrantfile facter string has been encoded in b64 for now, would be nice to b64 the individual arguments rather than the whole string.
|
2017-03-01 19:19:54 +00:00 |
|
thomashaw
|
e8f8dcece4
|
Team project work squashed + removed dead code
|
2017-02-17 14:59:07 +00:00 |
|
Z. Cliffe Schreuders
|
1f3f0c211d
|
Merge branch 'access_datastore_elements'
|
2017-01-18 21:49:52 +00:00 |
|
Z. Cliffe Schreuders
|
655684e3d4
|
datastore iteration and element access
|
2017-01-18 21:44:16 +00:00 |
|
thomashaw
|
43c02f220f
|
Updated for post-parameterisation
|
2017-01-17 16:27:18 +00:00 |
|
thomashaw
|
f8a97b2842
|
Parameterised Cleanup Module
|
2017-01-17 16:11:50 +00:00 |
|
thomashaw
|
16e3107838
|
Quick fix for the system_number method from last commit.
|
2017-01-17 15:59:29 +00:00 |
|
thomashaw
|
1522fd3ac9
|
Enable static IP address network IP address resolution & a fix for the duplicate modules being output when using multiple systems in Vagrantfile bug
|
2017-01-17 14:49:24 +00:00 |
|
thomashaw
|
373b0bc5dc
|
Parameterised Website using datastores. Loads of generators and encoders. Check out the example scenarios.
|
2017-01-15 19:56:13 +00:00 |
|
Z. Cliffe Schreuders
|
f8ba19ad75
|
datastores for storing and reusing calculated values
|
2017-01-07 21:21:17 +00:00 |
|
Z. Cliffe Schreuders
|
ab8ff07201
|
fix parameterised module input into modules
|
2017-01-05 21:07:48 +00:00 |
|
thomashaw
|
87e029fdd3
|
change [0] for .first
|
2016-12-22 20:23:44 +00:00 |
|
thomashaw
|
b09769c515
|
Adding read_fact to generators.
|
2016-12-13 19:26:48 +00:00 |
|
thomashaw
|
17f425b37f
|
Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type.
|
2016-12-08 10:43:48 +00:00 |
|
thomashaw
|
d197421c11
|
Vagrantfile removed encoders + generators as they don't need to be on the box
|
2016-12-06 16:52:53 +00:00 |
|
thomashaw
|
7d7d2e2677
|
Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak.
|
2016-12-05 17:15:55 +00:00 |
|
thomashaw
|
733c871072
|
Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules.
|
2016-11-30 18:09:22 +00:00 |
|
thomashaw
|
f724415cdf
|
Privilege changes: More specific privilege levels. r, rw, rwx for root & user.
|
2016-11-14 14:34:04 +00:00 |
|
Z. Cliffe Schreuders
|
9ff06fce7e
|
default values for parameters (modules and literal values)
|
2016-11-08 00:28:33 +00:00 |
|
Z. Cliffe Schreuders
|
601362a12d
|
random selection between inputs
|
2016-10-19 19:49:30 +01:00 |
|
Z. Cliffe Schreuders
|
518485f61d
|
cleanup Vagrantfile output
|
2016-10-18 22:31:58 +01:00 |
|
Z. Cliffe Schreuders
|
4421c7d99c
|
Merge branch 'parameterisation'
|
2016-10-18 21:25:17 +01:00 |
|
Z. Cliffe Schreuders
|
e282dde855
|
Merge branch 'master' of https://github.com/cliffe/SecGen
|
2016-10-18 21:23:02 +01:00 |
|
Z. Cliffe Schreuders
|
e63aa00e0a
|
parameterisation
|
2016-10-18 21:19:47 +01:00 |
|
Jjk422
|
18268af6c9
|
Merge pull request #69 from thomashaw/shellshock_rebase
Tested and seems to be fully working.
|
2016-09-06 15:17:28 +01:00 |
|
thomashaw
|
d9d785f335
|
Metadata: Updated shellshock privilege = none, access = local
|
2016-09-06 13:46:31 +01:00 |
|
Z. Cliffe Schreuders
|
8bbdc885a3
|
Merge branches 'master' and 'parameterisation' of https://github.com/cliffe/SecGen
|
2016-09-05 08:56:59 +01:00 |
|
thomashaw
|
3f00728fd2
|
Vulnerability: samba anonymously writable share + symlink traversal
|
2016-09-02 19:55:42 +01:00 |
|
Jjk422
|
f9b2cd548f
|
Correcting pull request errors, only one out of --total-memory or --memory-per-vm is selected (first to be inputted) and shows error message if both inputted.
Also removed defaults so that vms automatically decide on values if not specified.
|
2016-08-31 09:37:01 +01:00 |
|
Z. Cliffe Schreuders
|
9f0bd61726
|
Parameterisation
|
2016-08-30 23:18:31 +01:00 |
|
Z. Cliffe Schreuders
|
6b96ef6476
|
Parameterisation
|
2016-08-29 23:06:57 +01:00 |
|
Jjk422
|
42adbcb853
|
Added extra command line options to modify generated vms, need to be separated into a ruby class to ensure max values are not set (max ram larger then system ram) and to make sure that large ruby blocks are not in Vagrantfile.erb.
Options added are:
--memory-per-vm
--total-memory
--max-cpu-cores
--max-cpu-usage
|
2016-08-19 19:35:47 +01:00 |
|
Z. Cliffe Schreuders
|
d8d624cd03
|
Merge remote-tracking branch 'origin/parameterisation' into parameterisation
Conflicts:
lib/objects/module.rb
lib/objects/system.rb
lib/readers/module_reader.rb
lib/schemas/scenario_schema.xsd
modules/vulnerabilities/unix/local/writeable_shadow/secgen_metadata.xml
scenarios/simple_examples/writeable_shadow_vulnerability.xml
|
2016-08-17 23:13:28 +01:00 |
|
Z. Cliffe Schreuders
|
edc1e28d68
|
Parameterisation
|
2016-08-17 23:11:53 +01:00 |
|
egg82
|
28eb21a083
|
Update Vagrantfile.erb
|
2016-08-17 13:33:15 -06:00 |
|
egg82
|
49c19a0c21
|
Update project_files_creator.rb
|
2016-08-17 13:29:07 -06:00 |
|
Z. Cliffe Schreuders
|
0185837c7b
|
Module dependencies
|
2016-08-16 23:44:44 +01:00 |
|
egg82
|
2b900f94d1
|
Allowing SecGen to be run on servers/droplets
|
2016-08-14 15:04:57 -06:00 |
|
Z. Cliffe Schreuders
|
f314b141ec
|
parameterisation - work in progress
|
2016-08-08 11:40:43 +01:00 |
|