Commit Graph

314 Commits

Author SHA1 Message Date
wchen-r7
92d0e1bc45 Add Sinatra Leaked Secret Deserialization Vulnerability 2017-07-12 17:12:07 -05:00
wchen-r7
cdb7987c67 Embed 6 of Clubs in Sinatra service 2017-07-12 16:51:08 -05:00
wchen-r7
418d7f7ae3 Delete files that are not needed anymore 2017-07-12 14:58:29 -05:00
sinn3r
6cf3acc553 Merge pull request #1 from rapid7/ctf/port_knocking
Add 5 of Diamonds
2017-07-11 15:55:17 -05:00
James Barnett
6fd0a57fdf Configure iptables for other services. 2017-07-06 17:08:33 -05:00
James Barnett
fc336a5f1b Configure other services in iptables 2017-07-06 14:52:39 -05:00
James Barnett
367d3fd6db Use actual flag name 2017-06-30 15:45:08 -05:00
James Barnett
5bbed5387e Add five_of_diamonds flag
This flag is hidden within a binary that runs a webservice on a given port.
The port is blocked until the correct port knocking sequence is initiated.
The default port sequence is all of the user's salary numbers.

The commit also moves a lot of values that were previously in recipes into
attributes files for easier maintaining going forward.
2017-06-30 14:47:30 -05:00
James Barnett
dfcdafe410
Convert users to use attributes file. 2017-06-21 17:15:42 -05:00
James Barnett
541e39430b
Add tests for the chatbot. 2017-06-13 12:24:44 -05:00
sinn3r
929b9ca40a Merge pull request #149 from rapid7/linux/drupal
Add Drupal 7.5 to Linux VM
2017-06-10 07:01:41 -05:00
James Barnett
121b8ed880
Add tests for drupal. 2017-06-06 15:34:30 -05:00
James Barnett
eb9188f04d Merge branch 'inspec_testing' into linux/drupal 2017-06-06 14:58:36 -05:00
James Barnett
1570bf7117
Add drupal 7.5
Also make some changes to other recipes as I learn more about chef.
2017-06-06 14:46:22 -05:00
jbarnett-r7
e8f4bb24a7 Merge pull request #146 from rapid7/ruby_version
Fixed the Ruby version to 2.3.3 #145
2017-05-31 16:05:10 -05:00
James Barnett
e4b142c2ef
Add cups tests 2017-05-30 16:25:42 -05:00
Chan9390
99cd396aba
Fixed the Ruby version to 2.3.3 #145 2017-05-29 18:37:33 +05:30
James Barnett
00b263a0e2
Add tests for apache. 2017-05-26 14:23:27 -05:00
jbarnett-r7
032532edb6 Merge pull request #139 from Chan9390/patch-1
Removed executable file permission
2017-05-25 12:59:12 -05:00
jbarnett-r7
4d0d58455d Merge pull request #144 from rapid7/issue_template
Updated issue_template.md
2017-05-23 17:41:25 -05:00
jbarnett-r7
cfd58c846c Merge pull request #142 from rapid7/tomcat
Corrected tomcat version
2017-05-23 17:40:18 -05:00
Chan9390
a5ed120ae9
Updated issue_template.md 2017-05-21 22:33:48 +05:30
Chan9390
e487176a49
Corrected tomcat version 2017-05-20 15:27:24 +05:30
Chan9390
f456cab431
Removed executable file permission 2017-05-08 22:04:35 +05:30
jbarnett-r7
31af07a5d1 Merge pull request #132 from rapid7/chatbot
Add chatbot to Linux VM
2017-05-03 13:06:44 -05:00
James Barnett
456ed291b5
Merge branch 'add_linux_vm' into chatbot 2017-05-03 13:03:54 -05:00
jbarnett-r7
5887a4c02f Merge pull request #137 from PaterSiul/master
Fix Archlinux detection
2017-05-02 15:09:30 -05:00
jbarnett-r7
b16fc99470 Update README.md
Indicate Vagrant 1.9.1 is recommended.
2017-05-02 11:40:20 -05:00
wchen-r7
b12e79bb47 Add Autorun for linux share 2017-05-02 11:07:48 -05:00
wchen-r7
e937c7055d Increase timeout by 5 for GlassFish, also rm unnecessary taskkill 2017-05-02 10:22:19 -05:00
wchen-r7
adb719e5ed Land #135, Add vulnerable service cups 2017-04-21 14:52:16 -05:00
wchen-r7
3b492538b7 Resolve merge conflict 2017-04-21 14:27:54 -05:00
wchen-r7
8259ef67a1 Update chatbot.zip 2017-04-21 14:07:49 -05:00
PaterSiul
605fc21e3d Fix Archlinux detection
Archlinux doesn't seem to use DISTRIB_ID in os-release anymore.
https://www.freedesktop.org/software/systemd/man/os-release.html
lists no option as mandatory and ID seems like it could be stable.
2017-04-21 19:31:37 +02:00
James Barnett
e2221d2460
Install nodejs 4.x instead of 0.10.2. 2017-04-21 10:46:21 -05:00
James Barnett
1eae27f271
Move nodejs install to separate recipe. 2017-04-20 15:50:02 -05:00
James Barnett
c03cbe633e
Merge branch 'add_linux_vm' into chatbot
Fix conflict in Vagrantfile
2017-04-20 15:20:07 -05:00
wchen-r7
6488953464 Land #136, custom readme rails app for Linux 2017-04-20 15:17:43 -05:00
wchen-r7
27634d321b change port to 3500 because 3000 is occupied by the bot 2017-04-20 15:14:38 -05:00
James Barnett
1c2cea73f2
Add missing files. 2017-04-20 14:44:26 -05:00
James Barnett
9bb04bbaec
Update cups to listen on all interfaces. 2017-04-20 14:42:47 -05:00
wchen-r7
be04fc19d8 Resolve merge conflict in Vagrantfile 2017-04-20 14:11:02 -05:00
James Barnett
6462446b44
Fix bundle install and startup errors. 2017-04-20 13:43:11 -05:00
James Barnett
a66ff125d9
Add readme_app.
Also moved ruby installs out into its own recipe and included that in readme_app and sinatra recipes.
2017-04-19 16:25:46 -05:00
wchen-r7
41d86d73a3 Bring linux/cups up to date 2017-04-19 16:25:35 -05:00
wchen-r7
af004b1845 Resolve merge conflict in Vagrantfile 2017-04-19 11:07:53 -05:00
wchen-r7
71688d59f6 Land #129, webdav in Linux 2017-04-19 11:06:34 -05:00
wchen-r7
416066f536 Up to date linux/webdav 2017-04-18 16:08:10 -05:00
wchen-r7
e221d6ec49 Land #127, PHP injection in Linux VM 2017-04-18 16:03:21 -05:00
wchen-r7
88bea47229 Update payroll_app 2017-04-18 16:02:52 -05:00