thomashaw
|
2dc7d93d33
|
utilities/parameterised_accounts: adds an account with a strong password by default
vulnerabilities/crackable_user_account: adds an account with a weak password by default
|
2017-05-30 11:23:58 +01:00 |
|
thomashaw
|
5e7689316b
|
vulnerabilities/parameterised_accounts => utilities/parameterised_accounts
|
2017-05-24 13:01:42 +01:00 |
|
thomashaw
|
333f259736
|
param_website: fixed re-assignment error
|
2017-05-24 13:01:16 +01:00 |
|
thomashaw
|
0b875871e0
|
uid_less_root/uid_vi_root: updating metadata
|
2017-05-24 09:58:43 +01:00 |
|
thomashaw
|
15d594144d
|
access control misconfigurations: uid_bash_root
|
2017-05-24 09:57:50 +01:00 |
|
thomashaw
|
48385db779
|
access control misconfiguration: writable_passwd -- enforced the order in accounts::users w/ multiple ac misconfigs at same time
|
2017-05-23 17:51:27 +01:00 |
|
thomashaw
|
c39ec63434
|
Enforce run order of parameterised_accounts and writable_groups
|
2017-05-22 16:47:24 +01:00 |
|
thomashaw
|
09abd74235
|
access control misconfiguration: readable shadow
|
2017-05-22 13:31:24 +01:00 |
|
thomashaw
|
152f59e3f1
|
access control misconfiguration: writable groups
|
2017-05-22 13:30:23 +01:00 |
|
thomashaw
|
e283775ed3
|
access control misconfiguration: writable shadow
|
2017-05-22 13:29:46 +01:00 |
|
thomashaw
|
0155018879
|
access control misconfiguration: readable /etc/shadow file
|
2017-05-22 12:45:45 +01:00 |
|
thomashaw
|
2b93c8c20d
|
access control misconfiguration: suid_root_nano
|
2017-05-22 11:53:25 +01:00 |
|
thomashaw
|
6e98c95504
|
Merge remote-tracking branch 'origin/randomise_service_ports'
|
2017-05-20 15:06:18 +01:00 |
|
thomashaw
|
05cd757f55
|
Fixed samba concat{} error with newer versions of puppet / stdlib
|
2017-05-20 14:02:22 +01:00 |
|
thomashaw
|
6b5c66f586
|
Parameterised port - vulnerabilities/unrealirc_3281_backdoor
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
bdc6c065de
|
Parameterised port - services/unrealirc
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
3c6e0a5a24
|
Parameterised port - vulnerabilities/proftpd_133c_backdoor
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
42966f4a43
|
Parameterised port - service/proftpd -- set default port to 21
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
3d4c0fa98a
|
Parameterised port - service/proftpd
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
e0a0e1f8d4
|
Parameterised port - service/vsftp -- fixed
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
a0949b57e5
|
Parameterised port - service/vsftp (WIP)
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
ae41400392
|
Parameterised port - vulnerability/vsftpd_backdoor
|
2017-05-20 11:37:06 +01:00 |
|
thomashaw
|
8d426c6580
|
services/parameterised_webiste: Business facts can be blank. no manager / employee data will hide the contacts page.
|
2017-05-14 23:04:47 +01:00 |
|
thomashaw
|
428d39a279
|
vulnerabilities/onlinestore: parameterised dealer_id / murderer_id / murdered_ids / murdered_on. Updated scenarios/../leeds_beckett_online_store.xml
|
2017-05-13 20:00:32 +01:00 |
|
thomashaw
|
5c24e13577
|
Date generator module_name fix
|
2017-05-13 17:46:22 +01:00 |
|
thomashaw
|
2686331510
|
encoders/string_selector_with_exclusions
|
2017-05-13 16:29:36 +01:00 |
|
thomashaw
|
034c2ec409
|
generators/date_generator: added mysql_datetime format
|
2017-05-13 16:29:19 +01:00 |
|
thomashaw
|
58907d171d
|
parameterised online_store
|
2017-05-11 15:02:56 +01:00 |
|
thomashaw
|
577272aa61
|
generators/compression/zip: Added optional password to zip file generator
|
2017-05-09 16:29:27 +01:00 |
|
thomashaw
|
2f05fd4797
|
undo accidental removal of rot13 puppet files
|
2017-05-09 16:21:31 +01:00 |
|
thomashaw
|
a15211822f
|
changed vignere to vigenere
|
2017-05-09 15:48:06 +01:00 |
|
thomashaw
|
22cfa3027e
|
removing special chars from b64 flag generator + changed qr code link
|
2017-05-09 15:24:46 +01:00 |
|
thomashaw
|
66aa51dd9d
|
Updating hints
|
2017-05-09 12:37:12 +01:00 |
|
thomashaw
|
e8d12deb0e
|
parameterised_website: changed error message
|
2017-05-08 13:11:00 +01:00 |
|
thomashaw
|
366fe6cbdd
|
Cleaning up some TODOs
|
2017-05-04 11:46:39 +01:00 |
|
thomashaw
|
342b64e481
|
hidden_zip_in_image_file: added example & now removes the archive from disk after storing it in memory
|
2017-05-04 11:38:45 +01:00 |
|
thomashaw
|
66893ee6cd
|
generators/compression/zip (takes strings_to_leak) & generators/challenges/hidden_zip_in_image_file (takes a zip file + concats)
|
2017-05-03 13:53:33 +01:00 |
|
thomashaw
|
455907842b
|
marker.xml now picks up <hint> tags. edited a couple of the <hints>
|
2017-05-03 11:58:31 +01:00 |
|
thomashaw
|
313773bd57
|
moved to parameterised_website from /webapp/ to /http/
|
2017-05-03 11:57:53 +01:00 |
|
thomashaw
|
8db4c6ab81
|
Image Generators no longer select from readme_gifs. Moved png's into /misc directory.
|
2017-05-02 16:54:59 +01:00 |
|
thomashaw
|
943a614db7
|
Added hints to string encoders. Prepend leading 0's to decimal and octal encoders.
|
2017-05-02 16:46:54 +01:00 |
|
thomashaw
|
1dd5f400b3
|
spelling corrections: vignere to vigenere, _reversable to _reversible
|
2017-05-02 14:45:27 +01:00 |
|
thomashaw
|
bacd0b5f78
|
Add <hint> links to generator and encoder challenge modules including schema change to include <hint> tags.
Added exif_metadata scenario.
|
2017-05-02 14:42:03 +01:00 |
|
thomashaw
|
815a5915e6
|
moved parameterised_website from vulnerabilities to services
|
2017-05-01 14:44:32 +01:00 |
|
thomashaw
|
4d6d2a1ed1
|
null check on tab parameters
|
2017-05-01 14:28:32 +01:00 |
|
thomashaw
|
f65d7a5d15
|
Moved js loading back to the to footer
|
2017-05-01 14:27:17 +01:00 |
|
thomashaw
|
288f70fbd2
|
Moved the images below the tabs
|
2017-05-01 14:00:17 +01:00 |
|
thomashaw
|
c7047e4e12
|
Parameterised 'Start here!' tab
|
2017-05-01 13:21:25 +01:00 |
|
thomashaw
|
4d34a7a89d
|
Changed the tab position and updated the scenario.xml
|
2017-05-01 11:57:40 +01:00 |
|
thomashaw
|
f2df7485ba
|
Added hidden_tabs to parameterised website
|
2017-04-29 12:06:50 +01:00 |
|