Commit Graph

125 Commits

Author SHA1 Message Date
thomashaw
a0949b57e5 Parameterised port - service/vsftp (WIP) 2017-05-20 11:37:06 +01:00
thomashaw
66aa51dd9d Updating hints 2017-05-09 12:37:12 +01:00
thomashaw
455907842b marker.xml now picks up <hint> tags. edited a couple of the <hints> 2017-05-03 11:58:31 +01:00
thomashaw
8db4c6ab81 Image Generators no longer select from readme_gifs. Moved png's into /misc directory. 2017-05-02 16:54:59 +01:00
thomashaw
bacd0b5f78 Add <hint> links to generator and encoder challenge modules including schema change to include <hint> tags.
Added exif_metadata scenario.
2017-05-02 14:42:03 +01:00
Z. Cliffe Schreuders
4b6c3c2d37 update to work with newer versions of vagrant (where the gem exists but doesn't execute) and update readme with more information and with gifs 2017-04-19 00:12:46 +01:00
thomashaw
a62983a465 Fixing: generated scenario.xml in projects are now re-runnable 2017-04-12 20:28:38 +01:00
thomashaw
07eaad8199 Project Vagrantfile's now use relative paths. This enables distribution of project's without having to mess with paths. 2017-04-11 11:46:44 +01:00
thomashaw
d437d839df Provisioning via rsync rather than VirtualBox Shared Folders due to giving away selected modules 2017-04-11 11:14:39 +01:00
thomashaw
f0802b88e7 Merge branch 'unpick_ctf_mess' 2017-04-04 20:42:35 +01:00
thomashaw
8977559f8a exif metadata challenge + jpg converter/generator (cherry picked from commit e51347f) 2017-04-04 16:29:17 +01:00
thomashaw
839a69f5e1 FIX ME after the event: needed to comment out this exit due to github.com/cliffe/secgen/issues/94 2017-03-31 16:30:58 +01:00
Z. Cliffe Schreuders
18620f1ab3 some public domain messages and stories for flavour 2017-03-28 14:39:50 +01:00
Z. Cliffe Schreuders
f969cc8a42 fixed issue with passing a nested literal value into a default module input 2017-03-21 21:59:26 +00:00
Tom
0de7581a96 Merge pull request #88 from meehien/master
Some minor changes
2017-03-20 14:01:16 +00:00
Z. Cliffe Schreuders
25771b6344 unique_module_names for selectively ensuring a scenario doesn't repeat modules (currently only in the scenario for nested under an input) 2017-03-18 17:03:47 +00:00
Mihai Ordean
cb0f6ac289 Merge https://github.com/cliffe/SecGen 2017-03-16 14:04:00 +00:00
thomashaw
bb884e9ffc generators/image/random_image: Returns random image as a base64 string. leaks the image to the parameterised_website. Icons in the public domain - thanks to http://publicicons.org/ 2017-03-16 12:03:22 +00:00
Z. Cliffe Schreuders
41bbb34649 fixed nested default modules 2017-03-16 10:21:21 +00:00
Z. Cliffe Schreuders
6a14c417c6 marker.xml for marking CTF flags and providing hints (which have IDs so we don't have to give the same hint twice), also updated organisation of scenarios 2017-03-14 17:30:33 +00:00
Mihai Ordean
d9391d384f added check to verify if leaked files is empty 2017-03-13 15:10:17 +00:00
Mihai Ordean
ad869c82dc added options to customize VirtualBox hw support from command line 2017-03-13 10:41:54 +00:00
thomashaw
e73b0f3d58 Shift Cipher Encoders: caesar_shift and ascii_value_shift 2017-03-03 12:51:26 +00:00
thomashaw
ffb0caf2bf Don't encode output to b64 if we're just running the script as a stand-alone. 2017-03-02 12:43:24 +00:00
thomashaw
32091ed0fe Special Character work + generator/encoder superclass refactor.
The full Vagrantfile facter string has been encoded in b64 for now, would be nice to b64 the individual arguments rather than the whole string.
2017-03-01 19:19:54 +00:00
thomashaw
e8f8dcece4 Team project work squashed + removed dead code 2017-02-17 14:59:07 +00:00
Z. Cliffe Schreuders
1f3f0c211d Merge branch 'access_datastore_elements' 2017-01-18 21:49:52 +00:00
Z. Cliffe Schreuders
655684e3d4 datastore iteration and element access 2017-01-18 21:44:16 +00:00
thomashaw
43c02f220f Updated for post-parameterisation 2017-01-17 16:27:18 +00:00
thomashaw
f8a97b2842 Parameterised Cleanup Module 2017-01-17 16:11:50 +00:00
thomashaw
16e3107838 Quick fix for the system_number method from last commit. 2017-01-17 15:59:29 +00:00
thomashaw
1522fd3ac9 Enable static IP address network IP address resolution & a fix for the duplicate modules being output when using multiple systems in Vagrantfile bug 2017-01-17 14:49:24 +00:00
thomashaw
373b0bc5dc Parameterised Website using datastores. Loads of generators and encoders. Check out the example scenarios. 2017-01-15 19:56:13 +00:00
Z. Cliffe Schreuders
f8ba19ad75 datastores for storing and reusing calculated values 2017-01-07 21:21:17 +00:00
Z. Cliffe Schreuders
ab8ff07201 fix parameterised module input into modules 2017-01-05 21:07:48 +00:00
thomashaw
87e029fdd3 change [0] for .first 2016-12-22 20:23:44 +00:00
thomashaw
b09769c515 Adding read_fact to generators. 2016-12-13 19:26:48 +00:00
thomashaw
17f425b37f Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type. 2016-12-08 10:43:48 +00:00
thomashaw
d197421c11 Vagrantfile removed encoders + generators as they don't need to be on the box 2016-12-06 16:52:53 +00:00
thomashaw
7d7d2e2677 Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak. 2016-12-05 17:15:55 +00:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
thomashaw
f724415cdf Privilege changes: More specific privilege levels. r, rw, rwx for root & user. 2016-11-14 14:34:04 +00:00
Z. Cliffe Schreuders
9ff06fce7e default values for parameters (modules and literal values) 2016-11-08 00:28:33 +00:00
Z. Cliffe Schreuders
601362a12d random selection between inputs 2016-10-19 19:49:30 +01:00
Z. Cliffe Schreuders
518485f61d cleanup Vagrantfile output 2016-10-18 22:31:58 +01:00
Z. Cliffe Schreuders
4421c7d99c Merge branch 'parameterisation' 2016-10-18 21:25:17 +01:00
Z. Cliffe Schreuders
e282dde855 Merge branch 'master' of https://github.com/cliffe/SecGen 2016-10-18 21:23:02 +01:00
Z. Cliffe Schreuders
e63aa00e0a parameterisation 2016-10-18 21:19:47 +01:00
Jjk422
18268af6c9 Merge pull request #69 from thomashaw/shellshock_rebase
Tested and seems to be fully working.
2016-09-06 15:17:28 +01:00
thomashaw
d9d785f335 Metadata: Updated shellshock privilege = none, access = local 2016-09-06 13:46:31 +01:00