metasploitable3/chef/cookbooks/metasploitable/templates/knockd/knockd.conf.erb

[options]
        UseSyslog

[openFlag]
        sequence    = <%= node[:users].keys[0..2].map { |u| node[:users][u][:salary] }.join(',') %>
        seq_timeout = 15
        command     = /sbin/iptables -I INPUT 1 -s %IP% -p tcp --dport <%= node[:flags][:five_of_diamonds][:vuln_port] %> -j ACCEPT
        tcpflags    = syn
        cmd_timeout = 30
        stop_command = /sbin/iptables -D INPUT -s %IP% -p tcp --dport <%= node[:flags][:five_of_diamonds][:vuln_port] %> -j ACCEPT

[closeFlag]
        sequence    = <%= node[:users].keys[0..2].map { |u| node[:users][u][:salary] }.reverse.join(',') %>
        seq_timeout = 15
        command     = /sbin/iptables -D INPUT -s %IP% -p tcp --dport <%= node[:flags][:five_of_diamonds][:vuln_port] %> -j ACCEPT
        tcpflags    = syn
Add five_of_diamonds flag This flag is hidden within a binary that runs a webservice on a given port. The port is blocked until the correct port knocking sequence is initiated. The default port sequence is all of the user's salary numbers. The commit also moves a lot of values that were previously in recipes into attributes files for easier maintaining going forward. 2017-06-30 21:47:30 +02:00			`[options]`
			`UseSyslog`

			`[openFlag]`
Update linux tests. - Finished out flag tests - All tests are passing correctly - Use integer for mode consistently 2017-08-15 19:43:37 +02:00			`sequence = <%= node[:users].keys[0..2].map { \|u\| node[:users][u][:salary] }.join(',') %>`
Add five_of_diamonds flag This flag is hidden within a binary that runs a webservice on a given port. The port is blocked until the correct port knocking sequence is initiated. The default port sequence is all of the user's salary numbers. The commit also moves a lot of values that were previously in recipes into attributes files for easier maintaining going forward. 2017-06-30 21:47:30 +02:00			`seq_timeout = 15`
Use actual flag name 2017-06-30 22:45:08 +02:00			`command = /sbin/iptables -I INPUT 1 -s %IP% -p tcp --dport <%= node[:flags][:five_of_diamonds][:vuln_port] %> -j ACCEPT`
Add five_of_diamonds flag This flag is hidden within a binary that runs a webservice on a given port. The port is blocked until the correct port knocking sequence is initiated. The default port sequence is all of the user's salary numbers. The commit also moves a lot of values that were previously in recipes into attributes files for easier maintaining going forward. 2017-06-30 21:47:30 +02:00			`tcpflags = syn`
Auto close for knockd 2017-07-22 08:28:30 +02:00			`cmd_timeout = 30`
			`stop_command = /sbin/iptables -D INPUT -s %IP% -p tcp --dport <%= node[:flags][:five_of_diamonds][:vuln_port] %> -j ACCEPT`
Add five_of_diamonds flag This flag is hidden within a binary that runs a webservice on a given port. The port is blocked until the correct port knocking sequence is initiated. The default port sequence is all of the user's salary numbers. The commit also moves a lot of values that were previously in recipes into attributes files for easier maintaining going forward. 2017-06-30 21:47:30 +02:00
			`[closeFlag]`
Update linux tests. - Finished out flag tests - All tests are passing correctly - Use integer for mode consistently 2017-08-15 19:43:37 +02:00			`sequence = <%= node[:users].keys[0..2].map { \|u\| node[:users][u][:salary] }.reverse.join(',') %>`
Add five_of_diamonds flag This flag is hidden within a binary that runs a webservice on a given port. The port is blocked until the correct port knocking sequence is initiated. The default port sequence is all of the user's salary numbers. The commit also moves a lot of values that were previously in recipes into attributes files for easier maintaining going forward. 2017-06-30 21:47:30 +02:00			`seq_timeout = 15`
Use actual flag name 2017-06-30 22:45:08 +02:00			`command = /sbin/iptables -D INPUT -s %IP% -p tcp --dport <%= node[:flags][:five_of_diamonds][:vuln_port] %> -j ACCEPT`
Auto close for knockd 2017-07-22 08:28:30 +02:00			`tcpflags = syn`