Commit Graph

190 Commits

Author SHA1 Message Date
Jjk422
aba2e2b028 Fixed error caused by total_memory option whereby the wrong type was not changed to the right type for a calculation in the packerfile (string -> int) 2017-04-18 23:13:07 +01:00
Jjk422
004c740ccd Added .no_puppet module to ensure manifests directory is uploaded to GitHub to avoid error. 2017-04-18 21:54:33 +01:00
Jjk422
b95c96c3bc Added powershell local requires to SecGen metadata of all modules that require powershell.
Also added manifests directory that was not commited to remote branch with initial module commit.
2017-04-18 21:50:50 +01:00
Jjk422
3029312cd1 Ensured all modules done previously could accept input values by adding process_options and get_options_array methods to the generator modules. 2017-04-16 23:34:19 +01:00
Jjk422
d1152d09d1 Added Sqlite browser install module 2017-04-16 23:32:11 +01:00
Jjk422
1649f39756 Chrome Internet history module
Allows for the insertion of the chrome History file with choice of number of generic and cybercrime urls with inputted time range.
2017-04-16 17:55:02 +01:00
Jjk422
6fb49684e9 Illegal image module cat
Allows for the placing of cat images (represent illegal images).
May have some difficulty with multiple cat images due to framework placing all base64 inputs and outputs into a single hash, this may need to be resolved for multiple modules
2017-04-16 10:15:05 +01:00
Jjk422
c99c12ea5c Basic timestamp modules
Now all timestamp modules have default randomisation.
May need to fix specifying values manually.
2017-04-15 20:20:06 +01:00
Jjk422
4acc43323a Basic timestamp modules 2017-04-15 18:25:26 +01:00
Jjk422
d64ea06f4d Merge branch 'master-forensics' into master-forensics-new
# Conflicts:
#	Gemfile
#	Gemfile.lock
2017-04-13 17:01:16 +01:00
Jjk422
820e3233e8 Merge branch 'packer_build_from_iso' into master-forensics-new
icense.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.

(cherry picked from commit 7960914a79)

# Conflicts:
#	lib/templates/Vagrantfile.erb

# Conflicts:
#	lib/templates/Vagrantfile.erb
2017-04-13 16:05:55 +01:00
thomashaw
07eaad8199 Project Vagrantfile's now use relative paths. This enables distribution of project's without having to mess with paths. 2017-04-11 11:46:44 +01:00
thomashaw
b245a168e5 leaked_filename reduced chance of clashes + consolidated both random filename modules into 1 2017-04-04 22:27:57 +01:00
thomashaw
f4a0f54758 symlink traversal, better handling of 1 flag 2017-04-04 21:53:36 +01:00
thomashaw
5e852da39b word flag generator name update 2017-04-04 16:58:28 +01:00
thomashaw
eac3b86674 fixed word flag generator: remove non alpha-numerical characters from flag (umlauts were being interpreted incorrectly) 2017-04-04 16:49:36 +01:00
thomashaw
a0af1a5fef fixed random boolean conversion error 2017-04-04 16:38:53 +01:00
thomashaw
57a7dc69f6 ssh_leaked_keys - dynamically generated key
(cherry picked from commit b3e248c)
2017-04-04 16:30:52 +01:00
thomashaw
d93d3fdfed samba symlink traversal, fixed the permissions error(cherry picked from commit b62a06f) 2017-04-04 16:30:26 +01:00
thomashaw
f068d698d0 leaked_file privilege changes (cherry picked from commit 3f4ddad) 2017-04-04 16:30:03 +01:00
thomashaw
8977559f8a exif metadata challenge + jpg converter/generator (cherry picked from commit e51347f) 2017-04-04 16:29:17 +01:00
thomashaw
aad46803ca fixes / modifications - strong pw generator strip illegal characters, gitlist_040 changed leak flag position
(cherry picked from commit dc7e77f)
2017-04-04 16:26:53 +01:00
Jjk422
ac41834e82 Moved over ForGen internet history module need to modify into SecGen structure
IN PROGRESS:
Creating URL generator and chrome history file generator, added forensic option to xml_report_generator.
Need to find a way to efficiently pass history file from chrome_history_file_generator to chrome_history forensic module.

ERRORING:
Recieving error ==> storage_server: Error: Could not find class internet_history_chrome::init for vagrant-2008r2.lan on node vagrant-2008r2.lan
Need to look into vagrant/puppet not findign forensics internet history class
2017-04-03 11:45:20 +01:00
thomashaw
f6b7cc41cf removing final name="" from fortress 2017-03-31 21:29:06 +01:00
thomashaw
04399470f2 updated scenarios, metadata changes + updated qr code 2017-03-31 19:21:36 +01:00
thomashaw
bf8d15e395 added a flag drop in root directory to samba_symlink_traversal 2017-03-31 14:57:06 +01:00
thomashaw
464d266bfe Revert: adding breakthenet xss web vulnerability -- Now registers the mysql db + allows www-data to connect with password 'example', change this! register.php claims that registration was successful but logging in does not work... investigate further. 2017-03-31 14:12:14 +01:00
thomashaw
42ac95b3ab ssh_leaked_keys: adding strings_to_leak flag read_fact 2017-03-31 13:31:35 +01:00
thomashaw
39586af9a3 exif metadata module (WIP - needs some jpg files rather than png) 2017-03-31 13:29:50 +01:00
thomashaw
98cc8aa5c8 Fixing metadata 2017-03-31 13:28:49 +01:00
thomashaw
fa10962295 adding breakthenet xss web vulnerability -- Now registers the mysql db + allows www-data to connect with password 'example', change this! register.php claims that registration was successful but logging in does not work... investigate further. 2017-03-30 11:21:33 +01:00
thomashaw
9f41e42381 vsftpd_backdoor: updated metadata, is actually root_rwx not user_rwx 2017-03-29 12:09:23 +01:00
thomashaw
c09341188b gitlist_040 fixed, removed bootstrap repo + added a hyperlink to /gitlist 2017-03-29 12:00:04 +01:00
thomashaw
241e83a7a9 generators/random/random_hex: added number_of_lines and line_length params
generators/challenges/encoded_diff: encodes a flag in hex, generates random_hex, shuffles the ordering, inserts a flag in a random position. accounts for line length vs flag length with random hex padding.
secgen_functions::leak_file.pp: Added division between data leaked to the same file
2017-03-28 10:51:57 +01:00
Jjk422
a13431fad9 Moved over ForGen internet history module need to modify into SecGen structure
IN PROGRESS:
Creating URL generator and chrome history file generator, added forensic option to xml_report_generator.
Need to find a way to efficiently pass history file from chrome_history_file_generator to chrome_history forensic module.
2017-03-27 09:21:40 +01:00
thomashaw
03aaae2bc3 xfce desktop environment: extracted out auto login as root into vulnerability module 2017-03-24 15:30:30 +00:00
thomashaw
75056b8bc8 Adding images_to_leak to appropriate modules. Use ::secgen_functions::leak_files to leak one or more images. Updated parameterised_website to leak multiple images. Updated gitlist to create a git repo with leaked strings and images. 2017-03-23 20:58:35 +00:00
Jjk422
c4bec37107 Moved over ForGen internet history module need to modify into SecGen structure 2017-03-21 19:23:55 +00:00
thomashaw
6918eb1d3e Minor fixes - parameterised_website leaks multiple strings_to_leak & metadata corrections 2017-03-21 11:44:17 +00:00
thomashaw
78b97bdeeb Vignere Cipher - Takes strings_to_encode and encryption_key, outputs: KEY_CIPHERTEXT 2017-03-21 11:44:07 +00:00
thomashaw
b9395ac69a Selecting default_inputs on specific generators rather than string_generator 2017-03-21 11:28:26 +00:00
Jjk422
b7293f32d0 Windows modules (web browsers, languages and text editor) and chocolatey repository manager. 2017-03-20 23:00:02 +00:00
thomashaw
94aa36cb2b strong_password_generator 2017-03-20 14:31:56 +00:00
Jjk422
7960914a79 Adds the Windows 2008 r2 server 64 bit basebox, allows for no license.
Will download ISO from microsoft site, will then build basebox (storing in VAGRANT_BASEBOX_STORAGE) and will then build with vagrant.
If Basebox is not present SecGen will prompt whether to use packer (requires download from packer website in README.md and for the binary to be in the system path) to build the Basebox.

*** Changes ***
constants.rb
51-57: Added the 2 constants PUPPET_VERSION: version of puppet to install on the newly generated system, and VAGRANT_BASEBOX_STORAGE which stores generated baseboxes (currently set to SecGen_root/.generated).

project_files_creator.rb
48-80: Added logic to check for existing basebox and to generate new basebox if not present.

base_metadata_schema.xsd
11: Added windows to platform options type
45-50: Added extra packer helper tags, packerfile_path (path to packer file in the layout of base_module_name/Packerfile_name) and product_key (will use a trial version if product key is not present)

vulnerability_metadata_schema.xsd
32: Added windows value to platformOptions type to allow for windows system implementation.

Vagrantfile.erb
21: Changed --hwvirtex to default of on without gui output, problems can occur if this is not set to on.
23,28,31: Removed - tags before ending %>, this was causing an error with the vagrantfile as the options were not being placed on different lines.
48-56: Added the use of winrm instead of the default ssh for the base module if the base module is windows.

puppet_install/LICENSE
Added Mozilla Public License Version 2.0 (GPL v3 compatable) that came with the puppet_install/windows.ps1 script, the script to install puppet can be rewritten with a more simple implementation, however this script should do error checking to add an extra level of stability to the puppet install.

puppet_install/windows.ps1
Will install puppet on the Windows machine.

virtualbox_guest_install/windows.bat
Will install the virtualbox guest additions on the Windows machine.

Autounattend.xml.erb
Aurounattend script that allows for setting out the system layout including system information, disk configuration and product keys.

Packerfile.erb
Packerfile that builds the machine via packer, was going to be fully parameterised with all options being in the SecGen metadata (it still can be converted to this easily) however this lead to a large SecGen_metadata file with multiple tags which were only used if the basebox is not present, therefore only the product_key and packerfile_path keys were added to the SecGen_metadata file. Although the product_key data may be moved to a central product_key file later on.

secgen_metadata.xml
SecGen metadata file for the new windows basebox.
2017-03-19 17:52:17 +00:00
Mihai Ordean
86192340d7 removed debian 8.2 2017-03-18 08:54:49 +00:00
Mihai Ordean
46827cd22c added ssh_leaked_keys module 2017-03-17 16:32:59 +00:00
Mihai Ordean
cb0f6ac289 Merge https://github.com/cliffe/SecGen 2017-03-16 14:04:00 +00:00
thomashaw
3028e076d9 parameterise local root level vulnerabilities -- added strings_to_leak 2017-03-16 13:20:32 +00:00
thomashaw
53149f3fd5 Misc. changes / cleanup 2017-03-16 12:39:50 +00:00
thomashaw
7c4d21e942 generators/images/qr_code: creates a QR code out of a string(usually a flag) and outputs it as a .png represented as a base64 string. 2017-03-16 12:32:33 +00:00