23 Commits

Author	SHA1	Message	Date
James Barnett	fa021341aa	Add php page vulnerable to sql injection.	2017-04-11 12:53:34 -05:00
James Barnett	9ee6631831	Merge branch 'add_linux_vm' of github.com:rapid7/metasploitable3 into add_linux_vm	2017-04-10 14:33:26 -05:00
James Barnett	a2c943940a	Fix syntax in user config.	2017-04-10 14:33:00 -05:00
James Barnett	9d750aa155	Add unrealircd vulnerable service.	2017-04-06 13:19:21 -05:00
jbarnett-r7	3daf5181f3	Merge pull request #111 from rapid7/add_custom_vuln ... Add Custom Vulnerability (deserialization due to a compromised secret) for Linux VM	2017-04-05 17:27:49 -05:00
James Barnett	759bde200a	Remove unused file.	2017-04-05 17:27:15 -05:00
wchen-r7	ab5a2ae9d3	Add missing file	2017-04-05 15:59:49 -05:00
wchen-r7	bccc03578b	Update sinatra.rb	2017-04-05 15:58:26 -05:00
wchen-r7	2f2a2f2309	Use upstart script	2017-04-05 15:54:14 -05:00
wchen-r7	1e8b607fe1	Add a comment explaining where the passwords are	2017-04-03 17:19:20 -05:00
wchen-r7	ed38a9e2fa	Add Samba with vulnerable share ... There is a samba share named "public". Cred to access: chewbacca:rwaaaaawr5	2017-04-03 17:06:40 -05:00
wchen-r7	eef880200f	Merge branch 'add_linux_vm' into add_custom_vuln	2017-04-03 11:19:47 -05:00
wchen-r7	820f265241	Change port	2017-03-31 17:20:04 -05:00
wchen-r7	1b21911005	Add Sinatra Leaked Secret Deserialization Vulnerability	2017-03-31 17:15:04 -05:00
Sliim	dbe3947d22	linux: add docker_daemon_privilege_escalation ... Install docker from the community cookbook and add some users in the docker group from attributes. I created the `attributes/default.rb` attribute file to configure which users are added in the `docker` group. I suggest to put all configurable values here, such as users, passwords etc..	2017-03-25 12:41:46 +01:00
James Barnett	5d36ad0306	Fix typo in proftpd recipe header	2017-03-24 15:31:47 -05:00
James Barnett	6549e398bc	Add new vuln for proftpd mod_copy	2017-03-23 13:06:48 -05:00
James Barnett	3566e9f009	Add php 5.4.5 and phpmyadmin 3.5.8	2017-03-21 13:50:39 -05:00
James Barnett	8ae68cb895	Remove unused file.	2017-03-13 17:35:51 -05:00
James Barnett	4d6c47efda	Add shellshock vulnerability exploitable through Apache mod_cgi.	2017-03-13 17:34:45 -05:00
James Barnett	ffed818290	Do an apt-get update before installing mysql.	2017-03-13 17:33:17 -05:00
James Barnett	0c6a9063e8	Add recipe for vulnerable Apache Continuum	2017-02-17 16:25:13 -06:00
James Barnett	c3bf91c693	WIP: Adding Linux VM using chef solo provisioning	2017-02-13 15:53:51 -06:00