Commit Graph

23 Commits

Author SHA1 Message Date
James Barnett
9ae9c0a561 Enable WebDAV on Apache. 2017-07-12 17:15:29 -05:00
James Barnett
bc8fb88017 Add poc for sql injection. 2017-07-12 17:15:09 -05:00
James Barnett
dc8ffbcec6 Add php page vulnerable to sql injection. 2017-07-12 17:15:09 -05:00
James Barnett
abb0f3b972 Fix syntax in user config. 2017-07-12 17:14:45 -05:00
James Barnett
78ead4c361 Add unrealircd vulnerable service. 2017-07-12 17:14:26 -05:00
James Barnett
a731463315 Remove unused file. 2017-07-12 17:14:10 -05:00
wchen-r7
ebdb3eaa7f Add missing file 2017-07-12 17:13:45 -05:00
wchen-r7
adac2ae241 Update sinatra.rb 2017-07-12 17:13:45 -05:00
wchen-r7
9360d8376c Use upstart script 2017-07-12 17:13:45 -05:00
wchen-r7
08e194483b Add a comment explaining where the passwords are 2017-07-12 17:13:28 -05:00
wchen-r7
456a0dec9d Add Samba with vulnerable share
There is a samba share named "public". Cred to access:

chewbacca:rwaaaaawr5
2017-07-12 17:13:13 -05:00
wchen-r7
185c915655 Change port 2017-07-12 17:12:57 -05:00
wchen-r7
92d0e1bc45 Add Sinatra Leaked Secret Deserialization Vulnerability 2017-07-12 17:12:07 -05:00
James Barnett
50a8a91c71 Revert "Merge branch 'docker_vuln'"
This reverts commit 7f77216223, reversing
changes made to 8b1af132e1.
2017-04-03 10:43:43 -05:00
Sliim
dbe3947d22 linux: add docker_daemon_privilege_escalation
Install docker from the community cookbook and add some users in the
docker group from attributes.
I created the `attributes/default.rb` attribute file to configure which
users are added in the `docker` group. I suggest to put all configurable
values here, such as users, passwords etc..
2017-03-25 12:41:46 +01:00
James Barnett
5d36ad0306
Fix typo in proftpd recipe header 2017-03-24 15:31:47 -05:00
James Barnett
6549e398bc
Add new vuln for proftpd mod_copy 2017-03-23 13:06:48 -05:00
James Barnett
3566e9f009
Add php 5.4.5 and phpmyadmin 3.5.8 2017-03-21 13:50:39 -05:00
James Barnett
8ae68cb895
Remove unused file. 2017-03-13 17:35:51 -05:00
James Barnett
4d6c47efda
Add shellshock vulnerability exploitable through Apache mod_cgi. 2017-03-13 17:34:45 -05:00
James Barnett
ffed818290
Do an apt-get update before installing mysql. 2017-03-13 17:33:17 -05:00
James Barnett
0c6a9063e8
Add recipe for vulnerable Apache Continuum 2017-02-17 16:25:13 -06:00
James Barnett
c3bf91c693
WIP: Adding Linux VM using chef solo provisioning 2017-02-13 15:53:51 -06:00