acl-hackerbot-flags.xml

<?xml version="1.0"?>

<scenario xmlns="http://www.github/cliffe/SecGen/scenario"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.github/cliffe/SecGen/scenario">

  <name>Labtainers lab: acl</name>
  <author>Z. Cliffe Schreuders</author>
  <description>A Labtainers lab.</description>

  <type>ctf-lab</type>
  <type>lab-sheet</type>
  <difficulty>intermediate</difficulty>

  <CyBOK KA="AAA" topic="Authorisation">
    <keyword>access control</keyword>
    <keyword>enforcing access control</keyword>
    <keyword>ACCESS CONTROL - DAC (DISCRETIONARY ACCESS CONTROL)</keyword>
    <keyword>Vulnerabilities and attacks on access control misconfigurations</keyword>
  </CyBOK>
  <CyBOK KA="MAT" topic="MALCODE/MALWARE">
    <keyword>trojan</keyword>
    <keyword>backdoor</keyword>
    <keyword>TROJANS - BACKDOOR</keyword>
  </CyBOK>
  <CyBOK KA="OSV" topic="Primitives for Isolation and Mediation">
    <keyword>Access controls and operating systems</keyword>
    <keyword>Linux security model</keyword>
    <keyword>Unix File Permissions</keyword>
    <keyword>filesystems, inodes, and commands</keyword>
    <keyword>umask</keyword>
  </CyBOK>
  <CyBOK KA="OSV" topic="Primitives for Isolation and Mediation">
    <keyword>Access controls and operating systems</keyword>
    <keyword>Linux security model</keyword>
    <keyword>Linux Extended Access Control Lists (facl)</keyword>
  </CyBOK>
  <CyBOK KA="OSV" topic="Role of Operating Systems">
    <keyword>mediation</keyword>
  </CyBOK>

  <system>
    <system_name>desktop</system_name>
    <base distro="Debian 9" type="desktop" name="KDE"/>

    <input into_datastore="IP_addresses">
      <!-- 0 desktop -->
      <value>172.16.0.2</value>
      <!-- 1 hackerbot_server -->
      <value>172.16.0.3</value>
    </input>

    <input into_datastore="accounts">
      <generator type="account">
        <input into="username">
          <generator type="random_sanitised_word">
            <input into="wordlist">
              <value>mythical_creatures</value>
            </input>
          </generator>
        </input>
        <input into="password">
          <value>tiaspbiqe2r</value>
        </input>
        <input into="super_user">
          <value>true</value>
        </input>
        <input into="groups">
					<value>docker</value>
				</input>
        <input into="leaked_filenames">
          <value></value>
        </input>
        <input into="strings_to_leak">
          <value></value>
        </input>
      </generator>
    </input>

    <input into_datastore="desktop_root_password">
      <generator type="strong_password_generator"/>
    </input>

    <!--Create the groups-->
		<utility module_path=".*/groups">
			<input into="groups">
				<value>docker</value>
			</input>
		</utility>
    <!--Create the users-->
    <utility module_path=".*/parameterised_accounts">
      <input into="accounts">
        <datastore>accounts</datastore>
      </input>
    </utility>

    <utility module_path=".*/kde_minimal">
      <input into="autologin_user">
        <datastore access="0" access_json="['username']">accounts</datastore>
      </input>
      <input into="accounts">
        <datastore>accounts</datastore>
      </input>
      <input into="autostart_konsole">
        <value>false</value>
      </input>
    </utility>
    <utility module_path=".*/handy_cli_tools"/>

		<utility module_path=".*/iceweasel">
			<input into="accounts">
				<datastore>accounts</datastore>
			</input>
			<input into="autostart">
				<value>true</value>
			</input>
			<input into="start_page">
				<datastore access="1">IP_addresses</datastore>
			</input>
		</utility>

		<utility module_path=".*/pidgin">
			<input into="server_ip">
				<datastore access="1">IP_addresses</datastore>
			</input>
			<input into="accounts">
				<datastore access="0">accounts</datastore>
			</input>
		</utility>


    <vulnerability module_path=".*/ssh_root_login">
      <input into="root_password">
        <datastore>desktop_root_password</datastore>
      </input>
    </vulnerability>

    <utility module_path=".*/labtainers">
      <input into="lab">
        <value>acl</value>
      </input>

      <input into="accounts">
        <datastore>accounts</datastore>
      </input>
    </utility>

    <network type="private_network">
      <input into="IP_address">
        <datastore access="0">IP_addresses</datastore>
      </input>
    </network>
    <input into_datastore="spoiler_admin_pass">
      <generator type="strong_password_generator"/>
    </input>
    <build type="cleanup">
      <input into="root_password">
        <datastore>spoiler_admin_pass</datastore>
      </input>
    </build>
  </system>


	<system>
		<system_name>hackerbot_server</system_name>
		<base distro="Kali" name="MSF"/>

		<service type="ircd"/>

		<utility module_path=".*/metasploit_framework"/>
		<utility module_path=".*/nmap"/>
		<utility module_path=".*/handy_cli_tools"/>

		<service type="httpd"/>

		<utility module_path=".*/hackerbot">
			<input into="hackerbot_configs" into_datastore="hackerbot_instructions">
				<generator module_path=".*/hb_labtainer">
					<input into="accounts">
						<datastore>accounts</datastore>
					</input>
					<input into="root_password">
						<datastore>desktop_root_password</datastore>
					</input>
					<input into="labtainers_ip">
						<datastore access="0">IP_addresses</datastore>
					</input>
				</generator>
			</input>
		</utility>

    <utility module_path=".*/labtainers_marker">
      <input into="lab">
        <value>acl</value>
      </input>
    </utility>

    <network type="private_network" >
     	<input into="IP_address">
    		<datastore access="1">IP_addresses</datastore>
     	</input>
    </network>

    <build type="cleanup">
      <input into="root_password">
        <datastore>spoiler_admin_pass</datastore>
      </input>
    </build>
	</system>


</scenario>