Commit Graph

83 Commits

Author SHA1 Message Date
Dave Eargle 74d205d5a0 fix virtio drivers for qemu build of win2k8; optimize vagrantfile for libvirt qemu windows guest 2019-11-27 17:26:51 -05:00
Jeffrey Martin a608baf2a7
move scripts to location vagrant won't clobber 2018-08-03 16:24:52 -05:00
Jeffrey Martin 70151811fd
consistency for usage of VagrantCloud 2018-08-03 12:48:18 -05:00
Jeffrey Martin 5b4901babf
do not attempt to mount vagrant share 2018-08-02 12:44:30 -05:00
Martin407 d1b2e72d74
Update Vagrantfile
Fixed a call to call to config.vm.provision instead of win2k8.vm.provision
2018-06-14 17:10:47 -05:00
James Barnett e76aa2cf73
WIP: updating powershell build script 2018-02-15 02:22:46 +00:00
James Barnett 3fdaf996ae Update recipes for better chef practices.
There were quite a few bugs in the chef recipes when building using other platforms.
These were mostly due to assuming the vagrant user would exist.
Things are now more generic and should be more reliable overall.
2017-08-04 11:18:57 -05:00
James Barnett 520c0564be Build Linux VM in packer.
This makes some other changes:
* Moves packer related files to packer directory.
* Updates build scripts for new packer directory.
* Renames boxes to metasploitabl3-<OS>
2017-07-31 15:48:27 -05:00
wchen-r7 1944427139 Clear chef cache 2017-07-20 15:44:38 -05:00
James Barnett 05d00a9373 Accidentally dropped some recipes 2017-07-13 12:57:31 -05:00
James Barnett 3e00bdc822 Merge branch 'add_linux_vm' into feature/linux_ctf 2017-07-12 18:18:18 -05:00
James Barnett 126949ce19
Revert "Revert "Merge branch 'docker_vuln'""
This reverts commit 50a8a91c71.
2017-07-12 18:15:48 -05:00
James Barnett 56a08163f5 Merge branch 'add_linux_vm' into feature/linux_ctf 2017-07-12 17:20:25 -05:00
wchen-r7 92d0e1bc45 Add Sinatra Leaked Secret Deserialization Vulnerability 2017-07-12 17:12:07 -05:00
James Barnett 5bbed5387e Add five_of_diamonds flag
This flag is hidden within a binary that runs a webservice on a given port.
The port is blocked until the correct port knocking sequence is initiated.
The default port sequence is all of the user's salary numbers.

The commit also moves a lot of values that were previously in recipes into
attributes files for easier maintaining going forward.
2017-06-30 14:47:30 -05:00
James Barnett dfcdafe410
Convert users to use attributes file. 2017-06-21 17:15:42 -05:00
James Barnett 1570bf7117
Add drupal 7.5
Also make some changes to other recipes as I learn more about chef.
2017-06-06 14:46:22 -05:00
James Barnett 456ed291b5
Merge branch 'add_linux_vm' into chatbot 2017-05-03 13:03:54 -05:00
wchen-r7 b12e79bb47 Add Autorun for linux share 2017-05-02 11:07:48 -05:00
wchen-r7 3b492538b7 Resolve merge conflict 2017-04-21 14:27:54 -05:00
James Barnett c03cbe633e
Merge branch 'add_linux_vm' into chatbot
Fix conflict in Vagrantfile
2017-04-20 15:20:07 -05:00
wchen-r7 be04fc19d8 Resolve merge conflict in Vagrantfile 2017-04-20 14:11:02 -05:00
James Barnett a66ff125d9
Add readme_app.
Also moved ruby installs out into its own recipe and included that in readme_app and sinatra recipes.
2017-04-19 16:25:46 -05:00
wchen-r7 41d86d73a3 Bring linux/cups up to date 2017-04-19 16:25:35 -05:00
wchen-r7 af004b1845 Resolve merge conflict in Vagrantfile 2017-04-19 11:07:53 -05:00
wchen-r7 8e2d05d2c8 up to date linux/sql_injection 2017-04-18 15:02:01 -05:00
James Barnett 8939a3d84f
Add vulnerable service cups. 2017-04-17 14:54:43 -05:00
wchen-r7 fe3cd99781 Add chatbot to Linux VM 2017-04-17 11:45:23 -05:00
jbarnett-r7 3002800d20 Merge pull request #123 from rapid7/windows_to_linux_share
Mount a share from Linux samba
2017-04-12 14:07:26 -05:00
James Barnett fa021341aa
Add php page vulnerable to sql injection. 2017-04-11 12:53:34 -05:00
wchen-r7 22cc0d944a Add share from Linux 2017-04-07 14:33:30 -05:00
James Barnett 9d750aa155
Add unrealircd vulnerable service. 2017-04-06 13:19:21 -05:00
jbarnett-r7 3daf5181f3 Merge pull request #111 from rapid7/add_custom_vuln
Add Custom Vulnerability (deserialization due to a compromised secret) for Linux VM
2017-04-05 17:27:49 -05:00
wchen-r7 d3dd4e00c3 Restore Vagrantfile 2017-04-05 16:03:00 -05:00
wchen-r7 2f2a2f2309 Use upstart script 2017-04-05 15:54:14 -05:00
wchen-r7 ed38a9e2fa Add Samba with vulnerable share
There is a samba share named "public". Cred to access:

chewbacca:rwaaaaawr5
2017-04-03 17:06:40 -05:00
wchen-r7 eef880200f Merge branch 'add_linux_vm' into add_custom_vuln 2017-04-03 11:19:47 -05:00
James Barnett 50a8a91c71 Revert "Merge branch 'docker_vuln'"
This reverts commit 7f77216223, reversing
changes made to 8b1af132e1.
2017-04-03 10:43:43 -05:00
wchen-r7 2642ae3146 fix typo 2017-03-31 17:17:09 -05:00
wchen-r7 1b21911005 Add Sinatra Leaked Secret Deserialization Vulnerability 2017-03-31 17:15:04 -05:00
Sliim dbe3947d22 linux: add docker_daemon_privilege_escalation
Install docker from the community cookbook and add some users in the
docker group from attributes.
I created the `attributes/default.rb` attribute file to configure which
users are added in the `docker` group. I suggest to put all configurable
values here, such as users, passwords etc..
2017-03-25 12:41:46 +01:00
James Barnett 6549e398bc
Add new vuln for proftpd mod_copy 2017-03-23 13:06:48 -05:00
James Barnett 3566e9f009
Add php 5.4.5 and phpmyadmin 3.5.8 2017-03-21 13:50:39 -05:00
James Barnett 4d6c47efda
Add shellshock vulnerability exploitable through Apache mod_cgi. 2017-03-13 17:34:45 -05:00
James Barnett 0c6a9063e8
Add recipe for vulnerable Apache Continuum 2017-02-17 16:25:13 -06:00
James Barnett c3bf91c693
WIP: Adding Linux VM using chef solo provisioning 2017-02-13 15:53:51 -06:00
James Barnett 2fd6a8f9f1
Use environment variable for setting difficulty. 2016-11-08 15:02:26 -06:00
wchen-r7 2211b516f5 Avoid using any libs for option parsing 2016-11-08 14:50:26 -06:00
wchen-r7 b67f807f25 Use optparse 2016-11-08 14:30:35 -06:00
jbarnett-r7 1c5c3c865a Merge pull request #28 from rapid7/levels
Make difficulty configurable
2016-11-01 22:41:16 -05:00