thomashaw
8b2a92915e
vulnerabilities/vsftpd_234_backdoor: now uses organisations
2017-08-19 13:44:16 +01:00
thomashaw
458eb3be81
vulnerabilities/proftpd_133c_backdoor: now uses organisations
2017-08-19 13:19:36 +01:00
thomashaw
71794e13a1
vulnerabilities/unrealirc_3281: now uses organisations
2017-08-19 12:50:02 +01:00
thomashaw
aa23500fdd
vulnerabilities/moinmoin_195: now uses organisations
2017-08-19 12:23:25 +01:00
thomashaw
7a115e2340
vulnerabilities/samba_symlink: updated comment
2017-08-16 19:18:43 +01:00
thomashaw
d445c3bdc1
vulnerabilities/samba_symlink: now uses organisations
2017-08-16 19:17:33 +01:00
thomashaw
c6ee0316a1
vulnerabilities/samba_pws: now uses organisations
2017-08-16 19:09:05 +01:00
thomashaw
f9ac37360c
generators/domain: added default read_fact for name
2017-08-16 19:08:03 +01:00
thomashaw
957212daff
scenarios/ctf/nw_cyber_games.xml updated to use organisation
2017-08-16 17:37:01 +01:00
thomashaw
ef2ce0f986
team_project_scenario: updated to use structured_content/organisation
2017-08-16 16:37:30 +01:00
thomashaw
50c5854873
generators/mail_id: removed type=text_paragraph
2017-08-16 15:43:23 +01:00
thomashaw
3b9c2f05b2
services/http/parameterised_website: update to use generators/structured_content/organisation
2017-08-16 14:00:55 +01:00
thomashaw
1d2786a076
generators/organisation: added domain fact
2017-08-16 13:14:05 +01:00
thomashaw
9d9c39bb6b
parameterised_website: removed contact us from navbar on blank organisation
2017-08-14 17:21:23 +01:00
thomashaw
d791b15ad4
parameterised_website: now accepts blank organisation
2017-08-14 17:10:48 +01:00
thomashaw
341429d94a
Merge branch 'merge_structured_data'
2017-08-14 14:11:13 +01:00
thomashaw
ee83e5016e
structured_content: initial work, created an organisation generator. Organisation based scenarios need updating to use this.
...
datastore access_json: can now access individual structured_content elements
2017-08-14 14:09:29 +01:00
Z. Cliffe Schreuders
35c4c309f4
basic support for public domains, with example -- will prompt for network interface to bridge to (ref #97 )
2017-08-12 10:02:35 +01:00
Z. Cliffe Schreuders
246443bb5e
ssh root login vulnerability, and some other code cleanup
2017-08-03 22:39:43 +01:00
thomashaw
7a6334fb00
PR_90 changes: added cpu_word_size to differentiate between 32/64bit systems in bases, refactored vagrantfile.erb to include this, changed windows 'config.vm.network' settings to use the system name rather than config.
2017-06-30 22:46:54 +01:00
thomashaw
534a780726
Merge remote-tracking branch 'origin/pr/90'
...
# Conflicts:
# README.md
# lib/templates/Vagrantfile.erb
2017-06-30 15:21:22 +01:00
thomashaw
22aaf7fbb4
updating scenario.xml's which refer to old username generators via module_path
2017-06-29 15:51:13 +01:00
thomashaw
6d8bc007f0
utilities/parameterised_website: additional pages and hidden flag in white_text
2017-06-23 23:30:10 +01:00
thomashaw
a853bf8db5
ssh_leaked_keys + onlinestore: added hints
2017-06-23 23:28:11 +01:00
thomashaw
6a98deae3e
hidden_file, now uses different filename than the account + strings_to_leak instead of flag
2017-06-23 15:30:35 +01:00
thomashaw
11703a626a
encoders/string_selector: now accepts a position (essentially index+1) so that elements can be selected from a list based on id's
2017-06-23 15:07:06 +01:00
thomashaw
2e35c1e915
generators/flag/flag_concat: joins strings and wraps in flag{}
2017-06-22 09:06:57 +01:00
thomashaw
58c53269ad
Hints: hidden_file, onlinestore, passwordless_account
2017-06-21 22:35:01 +01:00
thomashaw
9c9bc0d6fd
utilities/unix/version_control/git
...
utilities/unix/sql/sqlmap
2017-06-21 22:12:41 +01:00
thomashaw
22f72a0b38
onlinestore: added functionality to have killed_on support multiple different dates
2017-06-21 20:37:58 +01:00
thomashaw
bae2a644af
mail message: module_name update
2017-06-21 20:36:28 +01:00
thomashaw
48f09bec49
Person generator now accepts accounts and fills in the missing data (email, name)
2017-06-21 18:45:27 +01:00
thomashaw
c29294671f
Random username and Name based username generator merged. Name-based behaviour runs when 'name' parameter is passed. Otherwise outputs a random username.
2017-06-21 14:27:52 +01:00
thomashaw
de0a689cdb
parameterised_website update
2017-06-20 11:52:48 +01:00
thomashaw
7ad35cbafd
new module: vulnerabilities/unix/system/passwordless_user_account
2017-06-20 11:08:32 +01:00
thomashaw
f98d73f02a
2 apaches: onlinestore updates
2017-06-20 11:07:33 +01:00
thomashaw
eec0423443
access_control_misconfigurations/readable_shadow: fixed typo
2017-06-20 10:33:53 +01:00
thomashaw
45f202a11e
markdown -> html encoder: removed 'string_encoder' selector
2017-06-20 09:44:40 +01:00
thomashaw
9aaba7b135
parameterised_website, removed floating ' - ' character when no business_name is included
2017-06-19 14:17:51 +01:00
thomashaw
1a7540a83a
removed 'testing_' from mail module
2017-06-19 13:58:37 +01:00
thomashaw
467baf15fa
apache 2: changed the internals of puppet-labs/apache to prevent ports.conf being overwritten when apache is called from 2 modules
2017-06-16 11:50:53 +01:00
thomashaw
e973d89f90
2 apaches instances: parameterised_website + gitlist port changes
2017-06-15 17:18:06 +01:00
thomashaw
e7b777eb9a
2 apache instances: metadata updates
2017-06-15 17:17:12 +01:00
thomashaw
3a0f426842
utilities/mail module: creates system mail messages for a user on a linux system.
...
generators/mail_message: hash containing the data for a mail message.
generators/mail_id: outputs a randomly generated mail id string.
generators/date: added mail format and option to pass a date in + have it formatted.
2017-06-13 19:34:53 +01:00
thomashaw
210f5cdfbe
new module: ctf/hidden_file - drops a hidden linux file prepended with a dot, containing a flag, into either the provided account's home directory OR the provided storage_directory
2017-06-08 11:24:23 +01:00
thomashaw
f59c18adf0
new module: ctf/java_decompile - based on picoctf-2013
2017-06-06 20:49:21 +01:00
thomashaw
2b4553020f
services/nfs: added storage_directory parameter
2017-06-06 16:22:31 +01:00
thomashaw
875524afc6
dc16_feedme: Reversing / pwnable module from defcon 2016 qualifiers
2017-06-06 16:20:24 +01:00
thomashaw
a4226665aa
dc16_b3s23: Reversing / programming module from defcon 2016 qualifiers
2017-06-06 15:02:18 +01:00
thomashaw
4e25e6a85c
dc16_amadhj: using new install_setuid_root_binary
2017-06-06 15:01:06 +01:00
