Add recipe for vulnerable Apache Continuum

This commit is contained in:
James Barnett 2017-02-17 16:25:13 -06:00
parent c3bf91c693
commit 0c6a9063e8
No known key found for this signature in database
GPG Key ID: 647983861A4EC5EA
4 changed files with 28 additions and 1 deletions

1
Vagrantfile vendored
View File

@ -151,6 +151,7 @@ Vagrant.configure("2") do |config|
chef.add_recipe "metasploitable::mysql"
chef.add_recipe "metasploitable::apache_continuum"
chef.add_recipe "metasploitable::users"
end
end

View File

@ -0,0 +1,26 @@
#
# Cookbook:: metasploitable
# Recipe:: apache_continuum
#
# Copyright:: 2017, Rapid7, All Rights Reserved.
execute "apt-get update" do
command "apt-get update"
end
package 'openjdk-6-jre'
package 'openjdk-6-jdk'
bash 'Download and extract Apache Continuum 1.4.2' do
code <<-EOH
mkdir /opt/apache-continuum/
cd /opt/apache-continuum/
wget http://archive.apache.org/dist/continuum/binaries/apache-continuum-1.4.2-bin.tar.gz
tar xvf apache-continuum-1.4.2-bin.tar.gz
rm apache-continuum-1.4.2/bin/wrapper-linux-x86-32
rm -rf apache-continuum-1.4.2/data
tar -xvzf /vagrant/resources/apache_continuum/data.tar.gz -C /opt/apache-continuum/apache-continuum-1.4.2/
ln -s /opt/apache-continuum/apache-continuum-1.4.2/bin/continuum /etc/init.d/continuum
update-rc.d continuum defaults 80
service continuum start
EOH
end

View File

@ -2,7 +2,7 @@
# Cookbook:: metasploitable
# Recipe:: mysql
#
# Copyright:: 2017, The Authors, All Rights Reserved.
# Copyright:: 2017, Rapid7, All Rights Reserved.
mysql_client 'default' do
action :create

Binary file not shown.