thomashaw
bfa430ba52
generator/concat_paragraph: concatenate data multiple input generators, with optional separators
2017-09-05 17:43:59 +01:00
thomashaw
02f191104d
generator/credit_card_data: outputs credit card type and number
2017-09-05 17:41:50 +01:00
thomashaw
a7b75765ab
generators/realistic_organisation: added an organisation generator which uses the business_name for domain and email addresses.
...
renamed generators/organisation to generators/random_organisation
2017-09-05 13:45:18 +01:00
thomashaw
fa5015918b
corrected method call
2017-09-05 12:31:17 +01:00
thomashaw
70e9d5cc27
generators/business_email: corrected method call
2017-09-05 12:28:17 +01:00
thomashaw
705383e108
encoder/random_string_selector: cleaned up print_string output. other encoders: added encoding print string padding
2017-09-05 11:26:29 +01:00
thomashaw
f9ac37360c
generators/domain: added default read_fact for name
2017-08-16 19:08:03 +01:00
thomashaw
50c5854873
generators/mail_id: removed type=text_paragraph
2017-08-16 15:43:23 +01:00
thomashaw
1d2786a076
generators/organisation: added domain fact
2017-08-16 13:14:05 +01:00
thomashaw
ee83e5016e
structured_content: initial work, created an organisation generator. Organisation based scenarios need updating to use this.
...
datastore access_json: can now access individual structured_content elements
2017-08-14 14:09:29 +01:00
thomashaw
2e35c1e915
generators/flag/flag_concat: joins strings and wraps in flag{}
2017-06-22 09:06:57 +01:00
thomashaw
bae2a644af
mail message: module_name update
2017-06-21 20:36:28 +01:00
thomashaw
48f09bec49
Person generator now accepts accounts and fills in the missing data (email, name)
2017-06-21 18:45:27 +01:00
thomashaw
c29294671f
Random username and Name based username generator merged. Name-based behaviour runs when 'name' parameter is passed. Otherwise outputs a random username.
2017-06-21 14:27:52 +01:00
thomashaw
3a0f426842
utilities/mail module: creates system mail messages for a user on a linux system.
...
generators/mail_message: hash containing the data for a mail message.
generators/mail_id: outputs a randomly generated mail id string.
generators/date: added mail format and option to pass a date in + have it formatted.
2017-06-13 19:34:53 +01:00
thomashaw
2dc7d93d33
utilities/parameterised_accounts: adds an account with a strong password by default
...
vulnerabilities/crackable_user_account: adds an account with a weak password by default
2017-05-30 11:23:58 +01:00
thomashaw
428d39a279
vulnerabilities/onlinestore: parameterised dealer_id / murderer_id / murdered_ids / murdered_on. Updated scenarios/../leeds_beckett_online_store.xml
2017-05-13 20:00:32 +01:00
thomashaw
5c24e13577
Date generator module_name fix
2017-05-13 17:46:22 +01:00
thomashaw
034c2ec409
generators/date_generator: added mysql_datetime format
2017-05-13 16:29:19 +01:00
thomashaw
58907d171d
parameterised online_store
2017-05-11 15:02:56 +01:00
thomashaw
577272aa61
generators/compression/zip: Added optional password to zip file generator
2017-05-09 16:29:27 +01:00
thomashaw
22cfa3027e
removing special chars from b64 flag generator + changed qr code link
2017-05-09 15:24:46 +01:00
thomashaw
66aa51dd9d
Updating hints
2017-05-09 12:37:12 +01:00
thomashaw
366fe6cbdd
Cleaning up some TODOs
2017-05-04 11:46:39 +01:00
thomashaw
342b64e481
hidden_zip_in_image_file: added example & now removes the archive from disk after storing it in memory
2017-05-04 11:38:45 +01:00
thomashaw
66893ee6cd
generators/compression/zip (takes strings_to_leak) & generators/challenges/hidden_zip_in_image_file (takes a zip file + concats)
2017-05-03 13:53:33 +01:00
thomashaw
8db4c6ab81
Image Generators no longer select from readme_gifs. Moved png's into /misc directory.
2017-05-02 16:54:59 +01:00
thomashaw
1dd5f400b3
spelling corrections: vignere to vigenere, _reversable to _reversible
2017-05-02 14:45:27 +01:00
thomashaw
bacd0b5f78
Add <hint> links to generator and encoder challenge modules including schema change to include <hint> tags.
...
Added exif_metadata scenario.
2017-05-02 14:42:03 +01:00
thomashaw
6f7b2f0edf
generators/html_snippet: input header and paragraphs, wrap them in <h3> and <p> tags.
2017-04-27 20:00:42 +01:00
thomashaw
398ca4df47
vulnerabilities/unix/system/symlinks - CTF module with symlink (TOCTTOU) vulnerability with binary setgid shadow + crackable weak password
2017-04-18 14:37:16 +01:00
thomashaw
b245a168e5
leaked_filename reduced chance of clashes + consolidated both random filename modules into 1
2017-04-04 22:27:57 +01:00
thomashaw
5e852da39b
word flag generator name update
2017-04-04 16:58:28 +01:00
thomashaw
eac3b86674
fixed word flag generator: remove non alpha-numerical characters from flag (umlauts were being interpreted incorrectly)
2017-04-04 16:49:36 +01:00
thomashaw
a0af1a5fef
fixed random boolean conversion error
2017-04-04 16:38:53 +01:00
thomashaw
57a7dc69f6
ssh_leaked_keys - dynamically generated key
...
(cherry picked from commit b3e248c)
2017-04-04 16:30:52 +01:00
thomashaw
8977559f8a
exif metadata challenge + jpg converter/generator (cherry picked from commit e51347f)
2017-04-04 16:29:17 +01:00
thomashaw
aad46803ca
fixes / modifications - strong pw generator strip illegal characters, gitlist_040 changed leak flag position
...
(cherry picked from commit dc7e77f)
2017-04-04 16:26:53 +01:00
thomashaw
f6b7cc41cf
removing final name="" from fortress
2017-03-31 21:29:06 +01:00
thomashaw
04399470f2
updated scenarios, metadata changes + updated qr code
2017-03-31 19:21:36 +01:00
thomashaw
39586af9a3
exif metadata module (WIP - needs some jpg files rather than png)
2017-03-31 13:29:50 +01:00
thomashaw
241e83a7a9
generators/random/random_hex: added number_of_lines and line_length params
...
generators/challenges/encoded_diff: encodes a flag in hex, generates random_hex, shuffles the ordering, inserts a flag in a random position. accounts for line length vs flag length with random hex padding.
secgen_functions::leak_file.pp: Added division between data leaked to the same file
2017-03-28 10:51:57 +01:00
thomashaw
75056b8bc8
Adding images_to_leak to appropriate modules. Use ::secgen_functions::leak_files to leak one or more images. Updated parameterised_website to leak multiple images. Updated gitlist to create a git repo with leaked strings and images.
2017-03-23 20:58:35 +00:00
thomashaw
6918eb1d3e
Minor fixes - parameterised_website leaks multiple strings_to_leak & metadata corrections
2017-03-21 11:44:17 +00:00
thomashaw
b9395ac69a
Selecting default_inputs on specific generators rather than string_generator
2017-03-21 11:28:26 +00:00
thomashaw
94aa36cb2b
strong_password_generator
2017-03-20 14:31:56 +00:00
Mihai Ordean
cb0f6ac289
Merge https://github.com/cliffe/SecGen
2017-03-16 14:04:00 +00:00
thomashaw
53149f3fd5
Misc. changes / cleanup
2017-03-16 12:39:50 +00:00
thomashaw
7c4d21e942
generators/images/qr_code: creates a QR code out of a string(usually a flag) and outputs it as a .png represented as a base64 string.
2017-03-16 12:32:33 +00:00
thomashaw
638e87e571
generators/challenges/hidden_data_in_image_file: Appends strings_to_leak to a random image's raw data.
2017-03-16 12:22:03 +00:00
