thomashaw
815a5915e6
moved parameterised_website from vulnerabilities to services
2017-05-01 14:44:32 +01:00
thomashaw
4d6d2a1ed1
null check on tab parameters
2017-05-01 14:28:32 +01:00
thomashaw
f65d7a5d15
Moved js loading back to the to footer
2017-05-01 14:27:17 +01:00
thomashaw
288f70fbd2
Moved the images below the tabs
2017-05-01 14:00:17 +01:00
thomashaw
c7047e4e12
Parameterised 'Start here!' tab
2017-05-01 13:21:25 +01:00
thomashaw
4d34a7a89d
Changed the tab position and updated the scenario.xml
2017-05-01 11:57:40 +01:00
thomashaw
f2df7485ba
Added hidden_tabs to parameterised website
2017-04-29 12:06:50 +01:00
thomashaw
fa88a0fc6b
Tabbed pane now displays in main_container.html.erb + generate the tab pages from new read_fact = visible_tabs.
...
Also added read_fact = hidden_tabs which needs implementing next. The hidden tabs names should begin with tab_0.html, then increment from tab_(visible_tabs.length+1).html. The hidden tabs should not be indexed on the main page.
2017-04-27 20:02:43 +01:00
thomashaw
6f7b2f0edf
generators/html_snippet: input header and paragraphs, wrap them in <h3> and <p> tags.
2017-04-27 20:00:42 +01:00
thomashaw
9781976467
active tab changes on click
2017-04-27 13:48:40 +01:00
thomashaw
25e3065768
AJAX loading data into <div> from from html files.
2017-04-27 13:13:03 +01:00
thomashaw
a78af06f9b
Added JQuery + custom .js file, updated bootstrap / css
2017-04-27 12:28:28 +01:00
thomashaw
35fc36a204
edge_hill_scenario initial commit
2017-04-24 13:54:02 +01:00
Cliffe
88a98bf5e9
Merge pull request #95 from SecGen/master
...
Lots of nothing, merging to remove the illusion that SecGen/SecGen is ahead in terms of commits
2017-04-24 10:58:16 +01:00
Cliffe
812ba7dab8
Merge pull request #6 from cliffe/master
...
Update
2017-04-20 09:02:29 +01:00
Z. Cliffe Schreuders
36f7bf4e49
Merge branch 'master' of https://github.com/cliffe/SecGen
2017-04-19 00:13:19 +01:00
Z. Cliffe Schreuders
4b6c3c2d37
update to work with newer versions of vagrant (where the gem exists but doesn't execute) and update readme with more information and with gifs
2017-04-19 00:12:46 +01:00
thomashaw
ce61074bf1
vulnerabilities/unix/webapp/onlinestore - db_password is now dynamically generated
2017-04-18 16:22:52 +01:00
thomashaw
0b99e58c27
CTF module - vulnerabilities/unix/webapp/onlinestore (by Meehein @ University of Birmingham)
2017-04-18 15:46:13 +01:00
thomashaw
398ca4df47
vulnerabilities/unix/system/symlinks - CTF module with symlink (TOCTTOU) vulnerability with binary setgid shadow + crackable weak password
2017-04-18 14:37:16 +01:00
thomashaw
ce9a6f3de7
CTF module - vulnerabilities/unix/system/two_shell_calls (by Meehein @ University of Birmingham)
2017-04-14 12:44:58 +01:00
thomashaw
a62983a465
Fixing: generated scenario.xml in projects are now re-runnable
2017-04-12 20:28:38 +01:00
thomashaw
07eaad8199
Project Vagrantfile's now use relative paths. This enables distribution of project's without having to mess with paths.
2017-04-11 11:46:44 +01:00
thomashaw
d437d839df
Provisioning via rsync rather than VirtualBox Shared Folders due to giving away selected modules
2017-04-11 11:14:39 +01:00
Z. Cliffe Schreuders
e472c51f99
readme update
2017-04-06 23:20:43 +01:00
Z. Cliffe Schreuders
ef85d3615c
readme update
2017-04-06 23:17:45 +01:00
Z. Cliffe Schreuders
407acf4a9f
moved datastore example
2017-04-06 18:46:57 +01:00
Z. Cliffe Schreuders
c673bb900d
some pseudo code comments to help explain how modules chain together
2017-04-06 18:34:01 +01:00
thomashaw
b245a168e5
leaked_filename reduced chance of clashes + consolidated both random filename modules into 1
2017-04-04 22:27:57 +01:00
thomashaw
f4a0f54758
symlink traversal, better handling of 1 flag
2017-04-04 21:53:36 +01:00
thomashaw
f0802b88e7
Merge branch 'unpick_ctf_mess'
2017-04-04 20:42:35 +01:00
thomashaw
24bfe960ad
Merge branch 'master' of https://github.com/cliffe/SecGen
2017-04-04 20:41:14 +01:00
thomashaw
5e852da39b
word flag generator name update
2017-04-04 16:58:28 +01:00
thomashaw
eac3b86674
fixed word flag generator: remove non alpha-numerical characters from flag (umlauts were being interpreted incorrectly)
2017-04-04 16:49:36 +01:00
thomashaw
a0af1a5fef
fixed random boolean conversion error
2017-04-04 16:38:53 +01:00
thomashaw
0d87be643d
updated scenario
2017-04-04 16:38:34 +01:00
thomashaw
57a7dc69f6
ssh_leaked_keys - dynamically generated key
...
(cherry picked from commit b3e248c)
2017-04-04 16:30:52 +01:00
thomashaw
d93d3fdfed
samba symlink traversal, fixed the permissions error(cherry picked from commit b62a06f)
2017-04-04 16:30:26 +01:00
thomashaw
f068d698d0
leaked_file privilege changes (cherry picked from commit 3f4ddad)
2017-04-04 16:30:03 +01:00
thomashaw
a1dbc66009
adding dependency of imagemagick to readme.md
2017-04-04 16:29:38 +01:00
thomashaw
8977559f8a
exif metadata challenge + jpg converter/generator (cherry picked from commit e51347f)
2017-04-04 16:29:17 +01:00
thomashaw
aad46803ca
fixes / modifications - strong pw generator strip illegal characters, gitlist_040 changed leak flag position
...
(cherry picked from commit dc7e77f)
2017-04-04 16:26:53 +01:00
thomashaw
f6b7cc41cf
removing final name="" from fortress
2017-03-31 21:29:06 +01:00
thomashaw
04399470f2
updated scenarios, metadata changes + updated qr code
2017-03-31 19:21:36 +01:00
thomashaw
839a69f5e1
FIX ME after the event: needed to comment out this exit due to github.com/cliffe/secgen/issues/94
2017-03-31 16:30:58 +01:00
thomashaw
bf8d15e395
added a flag drop in root directory to samba_symlink_traversal
2017-03-31 14:57:06 +01:00
thomashaw
464d266bfe
Revert: adding breakthenet xss web vulnerability -- Now registers the mysql db + allows www-data to connect with password 'example', change this! register.php claims that registration was successful but logging in does not work... investigate further.
2017-03-31 14:12:14 +01:00
thomashaw
590e797219
ctf scenario updates - added alpha reversible, ssh_leaked_keys, static networks, vignere
2017-03-31 13:32:55 +01:00
thomashaw
42ac95b3ab
ssh_leaked_keys: adding strings_to_leak flag read_fact
2017-03-31 13:31:35 +01:00
thomashaw
39586af9a3
exif metadata module (WIP - needs some jpg files rather than png)
2017-03-31 13:29:50 +01:00
