pwn 0.4.333

data/vagrant/provisioners/postgres.sh

@@ -0,0 +1,22 @@
+#!/bin/bash
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+pwn_provider=`echo $PWN_PROVIDER`
+postgres_userland_root="${pwn_root}/etc/userland/${pwn_provider}/postgres"
+postgres_vagrant_yaml="${postgres_userland_root}/vagrant.yaml"
+user=`ruby -e "require 'yaml'; print YAML.load_file('${postgres_vagrant_yaml}')['user']"`
+pass=`ruby -e "require 'yaml'; print YAML.load_file('${postgres_vagrant_yaml}')['pass']"`
+create_user_cmd=$(cat << EOF
+  create user ${user}
+  with password '${pass}';
+EOF
+)
+sudo /bin/bash --login -c "echo ${create_user_cmd} | sudo -iu postgres psql"

data/vagrant/provisioners/pwn.sh

@@ -0,0 +1,15 @@
+#!/bin/bash --login
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+#sudo /bin/bash --login -c "cd ${pwn_root} && ./reinstall_pwn_gemset.sh"
+#sudo /bin/bash --login -c "cd ${pwn_root} && ./build_pwn_gem.sh"
+export rvmsudo_secure_path=1
+rvmsudo /bin/bash --login -c "cd ${pwn_root} && ./build_pwn_gem.sh"

data/vagrant/provisioners/rvm.sh

@@ -0,0 +1,18 @@
+#!/bin/bash --login
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+ruby_version=`cat ${pwn_root}/.ruby-version`
+ruby_gemset=`cat ${pwn_root}/.ruby-gemset`
+printf "Updating RVM..."
+rvmsudo rvm get latest
+rvm reload
+/bin/bash --login -c "source /etc/profile.d/rvm.sh && rvm --default ruby-${ruby_version}@${ruby_gemset}"
+echo "complete."

data/vagrant/provisioners/ssllabs-scan.sh

@@ -0,0 +1,10 @@
+#!/bin/bash --login
+printf "Updating ssllabs-scan Dependencies..."
+sudo apt install -y golang
+echo "complete."
+
+
+echo "Updating ssllabs-scan..."
+ssllabsscan_root="/opt/ssllabs-scan"
+sudo /bin/bash --login -c "cd ${ssllabsscan_root} && git pull && make && ln -sf ${ssllabsscan_root}/ssllabs-scan /usr/bin/"
+echo "complete."

data/vagrant/provisioners/toggle_tor.sh

@@ -0,0 +1,2 @@
+#!/bin/bash
+sudo /bin/bash --login -c 'cd /opt/toggle_tor && git pull'

data/vagrant/provisioners/update_jenkins_plugins.rb

@@ -0,0 +1,30 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'yaml'
+
+if ENV['PWN_ROOT']
+  pwn_root = ENV['PWN_ROOT']
+elsif Dir.exist?('/pwn')
+  pwn_root = '/pwn'
+else
+  pwn_root = Dir.pwd
+end
+
+pwn_provider = ENV['PWN_PROVIDER'] if ENV['PWN_PROVIDER']
+jenkins_userland_config = YAML.load_file("#{pwn_root}/etc/userland/#{pwn_provider}/jenkins/vagrant.yaml")
+userland_user = jenkins_userland_config['user']
+userland_pass = jenkins_userland_config['pass']
+
+print 'Updating Jenkins Plugins...'
+puts `
+  /bin/bash \
+    --login \
+    -c "
+      pwn_jenkins_update_plugins \
+        -s '127.0.0.1' \
+        -d 8888 \
+        -U '#{userland_user}' \
+        -P '#{userland_pass}'
+    "
+`

data/vagrant/provisioners/update_os.sh

@@ -0,0 +1,108 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# Automate Package Install Questions :)
+# Obtain values via: debconf-get-selections | less
+
+pwn_provider=`echo $PWN_PROVIDER`
+
+# Update OS per update_os_instructions function and grok for errors in screen session logs
+# to mitigate introduction of bugs during updgrades.
+
+# PINNED PACKAGES
+# pin openssl for arachni proxy plugin Arachni/arachni#1011
+# sudo tee -a '/etc/apt/preferences.d/openssl' << 'EOF'
+# Package: openssl
+# Pin: version 1.1.0*
+# Pin-Priority: 1001
+# EOF
+if [[ -f /etc/apt/preferences.d/openssl ]]; then
+  while true; do
+    echo 'Previously Pinned OpenSSL Package Detected!'
+    printf '/etc/apt/preferences.d/openssl exists.  Remove File and update to latest version of OpenSSL y|n?'
+    read answer
+    case $answer in
+      'Y' | 'y') sudo rm /etc/apt/preferences.d/openssl; break;;
+      'N' | 'n') break;;
+      *) echo -e "Invalid Keypress.\n";;
+    esac
+  done
+fi
+
+if [[ -f /etc/apt/preferences.d/jenkins ]]; then
+  while true; do
+    echo 'Previously Pinned Jenkins Package Detected!'
+    printf '/etc/apt/preferences.d/jenkins exists.  Remove File and update to latest version of Jenkins y|n?'
+    read answer
+    case $answer in
+      'Y' | 'y') sudo rm /etc/apt/preferences.d/jenkins; break;;
+      'N' | 'n') break;;
+      *) echo -e "Invalid Keypress.\n";;
+    esac
+  done
+fi
+
+# pin until breadcrumbs are implemented in the framwework
+#sudo tee -a '/etc/apt/preferences.d/jenkins' << 'EOF'
+#Package: jenkins
+#Pin: version 2.190
+#Pin-Priority: 1002
+#EOF
+
+# Cleanup up prior screenlog.0 file from previous update_os failure(s)
+if [[ -e screenlog.0 ]]; then 
+  sudo rm screenlog.*
+fi
+
+$screen_cmd "${apt} update ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y debconf-i18n ${assess_update_errors}"
+grok_error
+
+#$screen_cmd "echo 'samba-common samba-common/dhcp boolean false' | ${debconf_set} ${assess_update_errors}"
+#grok_error
+
+#$screen_cmd "echo 'libc6 libraries/restart-without-asking boolean true' | ${debconf_set} ${assess_update_errors}"
+#grok_error
+
+#$screen_cmd "echo 'console-setup console-setup/codeset47 select Guess optimal character set' | ${debconf_set} ${assess_update_errors}"
+#grok_error
+
+#$screen_cmd "echo 'wireshark-common wireshark-common/install-setuid boolean false' | ${debconf_set} ${assess_update_errors}"
+#grok_error
+
+$screen_cmd "${apt} dist-upgrade -y ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} full-upgrade -y ${assess_update_errors}"
+grok_error
+
+lsb_release -i | grep -i kali
+if [[ $? == 0 ]]; then
+   $screen_cmd "${apt} install -y kali-linux-core ${assess_update_errors}"
+   grok_error
+
+   $screen_cmd "${apt} install -y kali-linux-large ${assess_update_errors}"
+   grok_error
+
+   $screen_cmd "${apt} install -y kali-desktop-xfce ${assess_update_errors}"
+   grok_error
+else
+  echo "Other Linux Distro Detected - Skipping Kali Metapackage Installation..."
+fi
+
+$screen_cmd "${apt} install -y apt-file ${assess_update_errors}"
+grok_error
+
+$screen_cmd "apt-file update ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} autoremove -y --purge ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} -y clean"
+grok_error
+
+$screen_cmd "dpkg --configure -a ${assess_update_errors}"
+grok_error

data/vagrant/provisioners/upload_globals.sh

@@ -0,0 +1,55 @@
+#!/bin/bash --login
+pwn_env_file='/etc/profile.d/pwn_envs.sh'
+pwn_provider=`echo $PWN_PROVIDER`
+
+if [[ $pwn_provider == 'docker' ]]; then
+  apt update && apt install -y sudo screen apt-utils
+  # echo 'Set disable_coredump false' >> /etc/sudoers
+else
+  sudo apt update && sudo apt install -y screen apt-utils
+fi
+
+sudo tee -a $pwn_env_file << EOF
+export PWN_ROOT='/opt/pwn'
+export PWN_PROVIDER='${pwn_provider}'
+EOF
+
+sudo tee -a /etc/profile.d/globals.sh << 'EOF'
+#!/bin/bash --login
+export DEBIAN_FRONTEND=noninteractive
+export TERM=xterm
+
+screen_session=`basename -- ${0} .sh`
+screen_cmd="screen -T xterm -L -S ${screen_session} -d -m sudo /bin/bash --login -c"
+assess_update_errors='|| echo IMAGE_ABORT && exit 1'
+debconf_set='/usr/bin/debconf-set-selections'
+apt="DEBIAN_FRONTEND=noninteractive apt -o Dpkg::Options::='--force-confdef' -o Dpkg::Options::='--force-confnew'"
+
+grok_error() {
+  while true; do
+    # Wait until screen exits session
+    screen -ls | grep $screen_session
+    if [[ $? == 1 ]]; then
+      grep IMAGE_ABORT screenlog.*
+      if [[ $? == 0 ]]; then
+        echo "Failures encountered in $(ls screenlog.*) for ${screen_session} session!!!"
+        cat screenlog.*
+        rm screenlog.*
+        exit 1
+      else
+        echo "No errors in $(ls screenlog.*) detected...moving onto the next."
+        ls screenlog.* > /dev/null 2>&1
+        if [[ $? == 0 ]]; then
+          rm screenlog.*
+        fi
+        break
+      fi
+    else
+      printf '.'
+      sleep 9
+    fi
+  done
+}
+EOF
+
+sudo chmod 755 /etc/profile.d/globals.sh

data/vagrant/provisioners/userland_fdisk.sh

@@ -0,0 +1,22 @@
+#!/bin/bash
+
+(
+echo d # Delete a partition
+echo 5 # Choosing Logical /dev/sda5 for deletion
+echo d # Delete a partition
+echo 2 # Choosing Extended /dev/sda2 for deletion
+echo n # Create a partition
+echo e # Create an Extended partition
+echo -e "\n" # Choose default begin sector
+echo -e "\n" # Choose default end sector
+echo n # Create a partition
+echo -e "\n" # Choose default begin sector
+echo -e "\n" # Choose default end sector
+echo t # Change partition ID
+echo 5 # Choose /dev/sda5
+echo 8e # Change to Linux LVM partition ID
+echo w # Write changes to disk
+echo y # Confirm changes
+echo q # Quit
+) | sudo fdisk -W never /dev/sda
+echo "complete."

data/vagrant/provisioners/userland_lvm.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+sudo pvresize /dev/sda5
+sudo lvresize -l +100%FREE /dev/kali-vg/root
+sudo resize2fs /dev/kali-vg/root

data/vagrant/provisioners/wpscan.rb

@@ -0,0 +1,25 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+print 'Updating WordPress Web Vulnerability Scanner (wpscan)...'
+Dir.chdir('/opt')
+wpscan_root = '/opt/wpscan-dev/'
+`sudo rm -rf #{wpscan_root}`
+`sudo git clone https://github.com/wpscanteam/wpscan.git wpscan-dev`
+wpscan_ruby_version = File.readlines("#{wpscan_root}/.ruby-version")[0].to_s.scrub.strip.chomp
+wpscan_gemset = File.readlines("#{wpscan_root}/.ruby-gemset")[0].to_s.scrub.strip.chomp
+`sudo bash \
+  --login \
+  -c "
+    source /etc/profile.d/rvm.sh; \
+    rvm install ruby-#{wpscan_ruby_version}; \
+    rvm use ruby-#{wpscan_ruby_version}; \
+    rvm gemset create #{wpscan_gemset}; \
+    rvm use ruby-#{wpscan_ruby_version}@#{wpscan_gemset}; \
+    cd #{wpscan_root}; \
+    gem install bundler; \
+    bundle install --without test; \
+    rake install
+  "
+`
+puts 'complete.'

data/vagrant_rsync_third_party.lst

@@ -0,0 +1 @@
+third_party/burpsuite-pro.jar

data/vagrant_rsync_userland_template.lst

@@ -0,0 +1,8 @@
+apache2/vagrant.yaml
+burpsuite/vagrant.yaml
+jenkins/jobs_userland
+jenkins/vagrant.yaml
+letsencrypt/vagrant.yaml
+metasploit/vagrant.yaml
+openvas/vagrant.yaml
+recon-ng/vagrant.yaml