James Barnett
9ae9c0a561
Enable WebDAV on Apache.
2017-07-12 17:15:29 -05:00
James Barnett
bc8fb88017
Add poc for sql injection.
2017-07-12 17:15:09 -05:00
James Barnett
dc8ffbcec6
Add php page vulnerable to sql injection.
2017-07-12 17:15:09 -05:00
James Barnett
abb0f3b972
Fix syntax in user config.
2017-07-12 17:14:45 -05:00
wchen-r7
848c23898e
Add share from Linux
2017-07-12 17:14:45 -05:00
James Barnett
78ead4c361
Add unrealircd vulnerable service.
2017-07-12 17:14:26 -05:00
James Barnett
a731463315
Remove unused file.
2017-07-12 17:14:10 -05:00
wchen-r7
ebdb3eaa7f
Add missing file
2017-07-12 17:13:45 -05:00
wchen-r7
adac2ae241
Update sinatra.rb
2017-07-12 17:13:45 -05:00
wchen-r7
9360d8376c
Use upstart script
2017-07-12 17:13:45 -05:00
wchen-r7
08e194483b
Add a comment explaining where the passwords are
2017-07-12 17:13:28 -05:00
wchen-r7
456a0dec9d
Add Samba with vulnerable share
...
There is a samba share named "public". Cred to access:
chewbacca:rwaaaaawr5
2017-07-12 17:13:13 -05:00
wchen-r7
185c915655
Change port
2017-07-12 17:12:57 -05:00
wchen-r7
92d0e1bc45
Add Sinatra Leaked Secret Deserialization Vulnerability
2017-07-12 17:12:07 -05:00
jbarnett-r7
e8f4bb24a7
Merge pull request #146 from rapid7/ruby_version
...
Fixed the Ruby version to 2.3.3 #145
2017-05-31 16:05:10 -05:00
Chan9390
99cd396aba
Fixed the Ruby version to 2.3.3 #145
2017-05-29 18:37:33 +05:30
jbarnett-r7
032532edb6
Merge pull request #139 from Chan9390/patch-1
...
Removed executable file permission
2017-05-25 12:59:12 -05:00
jbarnett-r7
4d0d58455d
Merge pull request #144 from rapid7/issue_template
...
Updated issue_template.md
2017-05-23 17:41:25 -05:00
jbarnett-r7
cfd58c846c
Merge pull request #142 from rapid7/tomcat
...
Corrected tomcat version
2017-05-23 17:40:18 -05:00
Chan9390
a5ed120ae9
Updated issue_template.md
2017-05-21 22:33:48 +05:30
Chan9390
e487176a49
Corrected tomcat version
2017-05-20 15:27:24 +05:30
Chan9390
f456cab431
Removed executable file permission
2017-05-08 22:04:35 +05:30
jbarnett-r7
5887a4c02f
Merge pull request #137 from PaterSiul/master
...
Fix Archlinux detection
2017-05-02 15:09:30 -05:00
jbarnett-r7
b16fc99470
Update README.md
...
Indicate Vagrant 1.9.1 is recommended.
2017-05-02 11:40:20 -05:00
wchen-r7
e937c7055d
Increase timeout by 5 for GlassFish, also rm unnecessary taskkill
2017-05-02 10:22:19 -05:00
PaterSiul
605fc21e3d
Fix Archlinux detection
...
Archlinux doesn't seem to use DISTRIB_ID in os-release anymore.
https://www.freedesktop.org/software/systemd/man/os-release.html
lists no option as mandatory and ID seems like it could be stable.
2017-04-21 19:31:37 +02:00
jbarnett-r7
f5786dde31
Merge pull request #94 from pbarry-r7/vbox_ver_check_in_powershell
...
Enhanced VBox version check error msgs for PS.
2017-04-13 16:32:24 -05:00
jbarnett-r7
280e9e9fdd
Merge pull request #96 from jikuja/PR
...
Fix glassfish
2017-04-11 14:02:19 -05:00
James Barnett
f09ea0d648
Use canonical spelling for user names. Fixes #105
2017-04-03 11:30:58 -05:00
James Barnett
50a8a91c71
Revert "Merge branch 'docker_vuln'"
...
This reverts commit 7f772162238b1af132e1
2017-04-03 10:43:43 -05:00
James Barnett
7f77216223
Merge branch 'docker_vuln'
2017-03-30 15:27:41 -05:00
James Barnett
9f20618e2a
Add docker and compat_resource cookbooks.
2017-03-30 15:26:04 -05:00
Sliim
dbe3947d22
linux: add docker_daemon_privilege_escalation
...
Install docker from the community cookbook and add some users in the
docker group from attributes.
I created the `attributes/default.rb` attribute file to configure which
users are added in the `docker` group. I suggest to put all configurable
values here, such as users, passwords etc..
2017-03-25 12:41:46 +01:00
James Barnett
5d36ad0306
Fix typo in proftpd recipe header
2017-03-24 15:31:47 -05:00
James Barnett
6549e398bc
Add new vuln for proftpd mod_copy
2017-03-23 13:06:48 -05:00
James Barnett
3566e9f009
Add php 5.4.5 and phpmyadmin 3.5.8
2017-03-21 13:50:39 -05:00
jbarnett-r7
8b1af132e1
Merge pull request #93 from a-garcia/Update_Elasticsearch's_initial_startup_time
...
Updated the initial startup time for Elasticsearch Fixes #73
2017-03-17 15:11:20 -05:00
James Barnett
8ae68cb895
Remove unused file.
2017-03-13 17:35:51 -05:00
James Barnett
4d6c47efda
Add shellshock vulnerability exploitable through Apache mod_cgi.
2017-03-13 17:34:45 -05:00
James Barnett
ffed818290
Do an apt-get update before installing mysql.
2017-03-13 17:33:17 -05:00
Janne Kujanpää
1245a782bb
Fix glassfish
...
This fix was in #65 but was removed from PR for some reason
2017-03-07 19:10:02 +02:00
James Barnett
1066317922
Update URL for WAMP download. Fixes #91
2017-03-06 17:05:28 -06:00
Pearce Barry
b2c9443a5c
Land #61 , Print current vbox version if less than minimum version
2017-03-06 08:56:16 -06:00
Pearce Barry
8dda67eff1
Enhanced VBox version check error msgs for PS.
2017-03-06 08:28:04 -06:00
Arturo Garcia
448dbb007c
Updated the initial startup time for Elasticsearch from 5 seconds to 30 seconds.
2017-03-05 08:45:08 -06:00
James Barnett
0c6a9063e8
Add recipe for vulnerable Apache Continuum
2017-02-17 16:25:13 -06:00
James Barnett
c3bf91c693
WIP: Adding Linux VM using chef solo provisioning
2017-02-13 15:53:51 -06:00
Kyle Gray (Noxferatu)
ef8fed0fd2
Merge pull request #65 from Centurion89/add_vmware_build_support
...
Adding Vagrant build support for VMWare
2017-01-12 10:30:08 -06:00
James Barnett
3fbc4b42d4
Add the Oracle root CA during packer build to fix failures caused by expired Oracle certificate in guest additions. Fixes #75
2017-01-11 15:05:32 -06:00
jbarnett-r7
16ff6de74f
Merge pull request #79 from infosec-intern/exactmatch_fix
...
Fix VirtualBox version check in PowerShell build script
2017-01-11 12:03:11 -06:00
