Commit Graph

128 Commits

Author SHA1 Message Date
Jjk422
1649f39756 Chrome Internet history module
Allows for the insertion of the chrome History file with choice of number of generic and cybercrime urls with inputted time range.
2017-04-16 17:55:02 +01:00
Jjk422
6fb49684e9 Illegal image module cat
Allows for the placing of cat images (represent illegal images).
May have some difficulty with multiple cat images due to framework placing all base64 inputs and outputs into a single hash, this may need to be resolved for multiple modules
2017-04-16 10:15:05 +01:00
Jjk422
4acc43323a Basic timestamp modules 2017-04-15 18:25:26 +01:00
Jjk422
d64ea06f4d Merge branch 'master-forensics' into master-forensics-new
# Conflicts:
#	Gemfile
#	Gemfile.lock
2017-04-13 17:01:16 +01:00
Jjk422
820e3233e8 Merge branch 'packer_build_from_iso' into master-forensics-new
icense.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.

(cherry picked from commit 7960914a79)

# Conflicts:
#	lib/templates/Vagrantfile.erb

# Conflicts:
#	lib/templates/Vagrantfile.erb
2017-04-13 16:05:55 +01:00
thomashaw
a62983a465 Fixing: generated scenario.xml in projects are now re-runnable 2017-04-12 20:28:38 +01:00
thomashaw
07eaad8199 Project Vagrantfile's now use relative paths. This enables distribution of project's without having to mess with paths. 2017-04-11 11:46:44 +01:00
thomashaw
d437d839df Provisioning via rsync rather than VirtualBox Shared Folders due to giving away selected modules 2017-04-11 11:14:39 +01:00
thomashaw
f0802b88e7 Merge branch 'unpick_ctf_mess' 2017-04-04 20:42:35 +01:00
thomashaw
8977559f8a exif metadata challenge + jpg converter/generator (cherry picked from commit e51347f) 2017-04-04 16:29:17 +01:00
Jjk422
ac41834e82 Moved over ForGen internet history module need to modify into SecGen structure
IN PROGRESS:
Creating URL generator and chrome history file generator, added forensic option to xml_report_generator.
Need to find a way to efficiently pass history file from chrome_history_file_generator to chrome_history forensic module.

ERRORING:
Recieving error ==> storage_server: Error: Could not find class internet_history_chrome::init for vagrant-2008r2.lan on node vagrant-2008r2.lan
Need to look into vagrant/puppet not findign forensics internet history class
2017-04-03 11:45:20 +01:00
thomashaw
839a69f5e1 FIX ME after the event: needed to comment out this exit due to github.com/cliffe/secgen/issues/94 2017-03-31 16:30:58 +01:00
Z. Cliffe Schreuders
18620f1ab3 some public domain messages and stories for flavour 2017-03-28 14:39:50 +01:00
Jjk422
a13431fad9 Moved over ForGen internet history module need to modify into SecGen structure
IN PROGRESS:
Creating URL generator and chrome history file generator, added forensic option to xml_report_generator.
Need to find a way to efficiently pass history file from chrome_history_file_generator to chrome_history forensic module.
2017-03-27 09:21:40 +01:00
Z. Cliffe Schreuders
f969cc8a42 fixed issue with passing a nested literal value into a default module input 2017-03-21 21:59:26 +00:00
Jjk422
c4bec37107 Moved over ForGen internet history module need to modify into SecGen structure 2017-03-21 19:23:55 +00:00
Tom
0de7581a96 Merge pull request #88 from meehien/master
Some minor changes
2017-03-20 14:01:16 +00:00
Jjk422
7960914a79 Adds the Windows 2008 r2 server 64 bit basebox, allows for no license.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.
2017-03-19 17:52:17 +00:00
Z. Cliffe Schreuders
25771b6344 unique_module_names for selectively ensuring a scenario doesn't repeat modules (currently only in the scenario for nested under an input) 2017-03-18 17:03:47 +00:00
Mihai Ordean
cb0f6ac289 Merge https://github.com/cliffe/SecGen 2017-03-16 14:04:00 +00:00
thomashaw
bb884e9ffc generators/image/random_image: Returns random image as a base64 string. leaks the image to the parameterised_website. Icons in the public domain - thanks to http://publicicons.org/ 2017-03-16 12:03:22 +00:00
Z. Cliffe Schreuders
41bbb34649 fixed nested default modules 2017-03-16 10:21:21 +00:00
Z. Cliffe Schreuders
6a14c417c6 marker.xml for marking CTF flags and providing hints (which have IDs so we don't have to give the same hint twice), also updated organisation of scenarios 2017-03-14 17:30:33 +00:00
Mihai Ordean
d9391d384f added check to verify if leaked files is empty 2017-03-13 15:10:17 +00:00
Mihai Ordean
ad869c82dc added options to customize VirtualBox hw support from command line 2017-03-13 10:41:54 +00:00
thomashaw
e73b0f3d58 Shift Cipher Encoders: caesar_shift and ascii_value_shift 2017-03-03 12:51:26 +00:00
thomashaw
ffb0caf2bf Don't encode output to b64 if we're just running the script as a stand-alone. 2017-03-02 12:43:24 +00:00
thomashaw
32091ed0fe Special Character work + generator/encoder superclass refactor.
The full Vagrantfile facter string has been encoded in b64 for now, would be nice to b64 the individual arguments rather than the whole string.
2017-03-01 19:19:54 +00:00
thomashaw
e8f8dcece4 Team project work squashed + removed dead code 2017-02-17 14:59:07 +00:00
Z. Cliffe Schreuders
1f3f0c211d Merge branch 'access_datastore_elements' 2017-01-18 21:49:52 +00:00
Z. Cliffe Schreuders
655684e3d4 datastore iteration and element access 2017-01-18 21:44:16 +00:00
thomashaw
43c02f220f Updated for post-parameterisation 2017-01-17 16:27:18 +00:00
thomashaw
f8a97b2842 Parameterised Cleanup Module 2017-01-17 16:11:50 +00:00
thomashaw
16e3107838 Quick fix for the system_number method from last commit. 2017-01-17 15:59:29 +00:00
thomashaw
1522fd3ac9 Enable static IP address network IP address resolution & a fix for the duplicate modules being output when using multiple systems in Vagrantfile bug 2017-01-17 14:49:24 +00:00
thomashaw
373b0bc5dc Parameterised Website using datastores. Loads of generators and encoders. Check out the example scenarios. 2017-01-15 19:56:13 +00:00
Z. Cliffe Schreuders
f8ba19ad75 datastores for storing and reusing calculated values 2017-01-07 21:21:17 +00:00
Z. Cliffe Schreuders
ab8ff07201 fix parameterised module input into modules 2017-01-05 21:07:48 +00:00
thomashaw
87e029fdd3 change [0] for .first 2016-12-22 20:23:44 +00:00
thomashaw
b09769c515 Adding read_fact to generators. 2016-12-13 19:26:48 +00:00
thomashaw
17f425b37f Multiple leaked files, new secgen_functions module encapsulating the file_leak and overshare.erb logic. Updated old modules to use the new resource type. 2016-12-08 10:43:48 +00:00
thomashaw
d197421c11 Vagrantfile removed encoders + generators as they don't need to be on the box 2016-12-06 16:52:53 +00:00
thomashaw
7d7d2e2677 Rework: Moved hello_world to messages. Changed write_fact to output_type. Updated PATH constants to DIR. Changed string generators to more specific message_generator in strings_to_leak. 2016-12-05 17:15:55 +00:00
thomashaw
733c871072 Additional parameterisation. New modules: parameterised_accounts, generators and an account_encoder. Added plenty of parameters/default_inputs to currently existing vulnerability modules. 2016-11-30 18:09:22 +00:00
thomashaw
f724415cdf Privilege changes: More specific privilege levels. r, rw, rwx for root & user. 2016-11-14 14:34:04 +00:00
Z. Cliffe Schreuders
9ff06fce7e default values for parameters (modules and literal values) 2016-11-08 00:28:33 +00:00
Z. Cliffe Schreuders
601362a12d random selection between inputs 2016-10-19 19:49:30 +01:00
Z. Cliffe Schreuders
518485f61d cleanup Vagrantfile output 2016-10-18 22:31:58 +01:00
Z. Cliffe Schreuders
4421c7d99c Merge branch 'parameterisation' 2016-10-18 21:25:17 +01:00
Z. Cliffe Schreuders
e282dde855 Merge branch 'master' of https://github.com/cliffe/SecGen 2016-10-18 21:23:02 +01:00