pwn 0.5.509 → 0.5.510

data/packer/provisioners/init_image.sh

@@ -0,0 +1,103 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+pwn_env_file='/etc/profile.d/pwn_envs.sh'
+pwn_provider=`echo $PWN_PROVIDER`
+
+$screen_cmd "chmod 755 ${pwn_env_file} ${assess_update_errors}"
+grok_error
+
+case $pwn_provider in
+  'aws')
+    # Begin Converting to Kali Rolling
+    $screen_cmd "${apt} install -y gnupg2 dirmngr software-properties-common"
+    grok_error
+
+    $screen_cmd "rm -rf /var/lib/apt/lists && > /etc/apt/sources.list && add-apt-repository 'deb https://http.kali.org/kali kali-rolling main non-free contrib' && echo 'deb-src https://http.kali.org/kali kali-rolling main contrib non-free' >> /etc/apt/sources.list && apt-key adv --keyserver hkp://keys.gnupg.net --recv-keys 7D8D0BF6"
+    grok_error
+
+    # Download and import the official Kali Linux key
+    $screen_cmd "wget -q -O - https://archive.kali.org/archive-key.asc | sudo apt-key add"
+    grok_error
+
+    # Update our apt db so we can install kali-keyring
+    $screen_cmd "apt update"
+    grok_error
+
+    # Install the Kali keyring
+    $screen_cmd "${apt} install -y kali-archive-keyring"
+    grok_error
+
+    # Update our apt db again now that kali-keyring is installed
+    $screen_cmd "apt update"
+    grok_error
+
+    $screen_cmd "${apt} install -y kali-linux-core"
+    grok_error
+
+    $screen_cmd "${apt} install -y kali-linux-large"
+    grok_error
+
+    # $screen_cmd "${apt} install -y kali-desktop-xfce ${assess_update_errors}"
+    # grok_error
+
+    $screen_cmd "dpkg --configure -a"
+    grok_error
+
+    $screen_cmd "${apt} -y autoremove --purge"
+    grok_error
+
+    $screen_cmd "${apt} -y clean"
+    grok_error
+    ;;
+
+  'docker')
+    $screen_cmd "${apt} install -y curl gnupg2 openssh-server net-tools"
+    grok_error
+
+    $screen_cmd "service ssh start"
+    grok_error
+
+    $screen_cmd "${apt} dist-upgrade -y ${assess_update_errors}"
+    grok_error
+
+    $screen_cmd "${apt} full-upgrade -y ${assess_update_errors}"
+    grok_error
+
+    $screen_cmd "useradd -m -s /bin/bash admin ${assess_update_errors}"
+    grok_error
+
+    $screen_cmd "usermod -aG sudo admin ${assess_update_errors}"
+    grok_error
+    ;; 
+  'qemu') 
+    $screen_cmd "useradd -m -s /bin/bash admin ${assess_update_errors}"
+    grok_error
+
+    $screen_cmd "usermod -aG sudo admin ${assess_update_errors}"
+    grok_error
+    ;;
+
+  'virtualbox') 
+    $screen_cmd "useradd -m -s /bin/bash admin ${assess_update_errors}"
+    grok_error
+
+    $screen_cmd "usermod -aG sudo admin ${assess_update_errors}"
+    grok_error
+    ;;
+
+  'vmware') 
+    $screen_cmd "useradd -m -s /bin/bash admin ${assess_update_errors}"
+    grok_error
+
+   $screen_cmd "usermod -aG sudo admin ${assess_update_errors}"
+   grok_error
+   ;;
+
+  *) echo "ERROR: Unknown PWN Provider: ${pwn_provider}"
+     exit 1
+     ;;
+esac
+
+# Restrict Home Directory
+sudo chmod 700 /home/admin

data/packer/provisioners/install_vagrant_ssh_key.sh

@@ -0,0 +1,15 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+for user in pwnadmin admin; do
+  if [[ ! -d "/home/${user}/.ssh" ]]; then
+    sudo mkdir -p /home/$user/.ssh
+    sudo chmod 0700 /home/$user/.ssh
+    sudo touch /home/$user/.ssh/authorized_keys
+    sudo chmod 0600 /home/$user/.ssh/authorized_keys
+    sudo chown -R $user:$user /home/$user/.ssh
+  fi
+
+  $screen_cmd "wget --no-check-certificate https://raw.githubusercontent.com/hashicorp/vagrant/master/keys/vagrant.pub -O ->> /home/${user}/.ssh/authorized_keys ${assess_update_errors}"
+  grok_error
+done

data/packer/provisioners/irc.sh

@@ -0,0 +1,13 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+printf "Installing irssi *********************************************************************"
+$screen_cmd "${apt} install -y irssi inspircd ${assess_update_errors}"
+grok_error
+
+sudo sed -e 's/^new_cursors=true/new_cursors=false/g' \
+     -i /etc/inspircd/inspircd.conf
+sudo systemctl enable inspircd
+sudo systemctl restart inspircd
+
+# TODO: tweak /etc/inspircd/inspircd.conf to compliment pwn-irc AI agents

data/packer/provisioners/jenkins.sh

@@ -0,0 +1,77 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+target_jdk='openjdk-21-jdk'
+jenkins_java_version=$(echo ${target_jdk} | sed 's/-/ /g' | awk '{print $2}')
+pwn_provider=`echo $PWN_PROVIDER`
+
+# Make sure the pwn gemset has been loaded
+source /etc/profile.d/rvm.sh
+ruby_version=$(cat ${pwn_root}/.ruby-version)
+rvm use ruby-$ruby_version@pwn
+
+printf "Installing Jenkins ********************************************************************"
+domain_name=`hostname -d`
+curl -fsSL https://pkg.jenkins.io/debian/jenkins.io-2023.key | sudo tee \
+    /usr/share/keyrings/jenkins-keyring.asc > /dev/null
+
+echo deb [signed-by=/usr/share/keyrings/jenkins-keyring.asc] \
+    https://pkg.jenkins.io/debian binary/ | sudo tee \
+    /etc/apt/sources.list.d/jenkins.list > /dev/null
+
+sudo sh -c 'echo deb https://pkg.jenkins.io/debian-stable binary/ > /etc/apt/sources.list.d/jenkins.list'
+
+$screen_cmd "${apt} update"
+grok_error
+
+$screen_cmd "${apt} install -yq ${target_jdk}"
+grok_error
+
+$screen_cmd "${apt} install -yq jenkins"
+grok_error
+
+sleep 9
+sudo /bin/bash --login -c "cp ${pwn_root}/etc/userland/$pwn_provider/jenkins/jenkins /etc/default/jenkins"
+sudo /bin/bash --login -c "sed -i \"s/DOMAIN/${domain_name}/g\" /etc/default/jenkins" 
+sudo usermod -a -G sudo jenkins
+sudo /bin/bash --login -c 'echo "jenkins ALL=(ALL) NOPASSWD:ALL" > /etc/sudoers.d/jenkins'
+
+# Ensure Java version is supported by Jenkins
+sudo echo tee -a /etc/systemd/system/jenkins.service.d/override.conf << EOF
+[Service]
+Environment="JAVA_OPTS=-Djava.awt.headless=true -Dhudson.DNSMultiCast.disabled=true -Djava.net.preferIPv4Stack=true -Dmail.smtp.starttls.enable=true -Dhudson.model.DirectoryBrowserSupport.CSP= -Xms4G -Xmx24G"
+Environment="JENKINS_LISTEN_ADDRESS=127.0.0.1"
+Environment="JENKINS_PORT=8888"
+Environment="JENKINS_JAVA_CMD=/usr/lib/jvm/java-${jenkins_java_version}-openjdk-amd64/bin/java"
+EOF
+
+sudo systemctl daemon-reload
+sudo systemctl enable jenkins
+sudo systemctl restart jenkins
+
+printf "Sleeping 540s While Jenkins Daemon Wakes Up ********************************************"
+ruby -e "(0..540).each { print '.'; sleep 1 }"
+
+initial_admin_pwd=`sudo cat /var/lib/jenkins/secrets/initialAdminPassword`
+echo "JENKINS Initial Admin: ${initial_admin_pwd}"
+
+# TODO: Get this working
+# printf "Updating Pre-Installed Jenkins Plugins ************************************************"
+# pwn_jenkins_update_plugins --ip 127.0.0.1 -U admin --api-key $initial_admin_pwd --no-restart-jenkins
+
+printf "Installing Necessary Jenkins Plugins **************************************************"
+pwn_jenkins_install_plugin --ip 127.0.0.1 \
+  -d 8888 \
+  -U admin \
+  --api-key $initial_admin_pwd \
+  -p "ansicolor, build-pipeline-plugin, bulk-builder, git, git-client, htmlpublisher, log-parser, mailer, matrix-auth, nested-view, purge-build-queue-plugin, ssh-agent, ssh-credentials"

data/packer/provisioners/metasploit.rb

@@ -0,0 +1,59 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'yaml'
+
+# Install Metasploit from Source
+printf 'Installing Metasploit *****************************************************************'
+if ENV.fetch('PWN_ROOT')
+  pwn_root = ENV.fetch('PWN_ROOT')
+elsif Dir.exist?('/pwn')
+  pwn_root = '/pwn'
+else
+  pwn_root = Dir.pwd
+end
+
+pwn_provider = ENV.fetch('PWN_PROVIDER') if ENV.fetch('PWN_PROVIDER')
+
+metasploit_root = '/opt/metasploit-framework-dev'
+`sudo git clone https://github.com/rapid7/metasploit-framework.git #{metasploit_root}`
+`sudo apt install -y libpq-dev postgresql-server-dev-all`
+metasploit_ruby_version = File.readlines("#{metasploit_root}/.ruby-version")[0].to_s.scrub.strip.chomp
+metasploit_gemset = File.readlines("#{metasploit_root}/.ruby-gemset")[0].to_s.scrub.strip.chomp
+`
+  sudo bash \
+    --login \
+    -c "\
+      rvm install ruby-#{metasploit_ruby_version} && \
+      rvm use ruby-#{metasploit_ruby_version} && \
+      rvm gemset create #{metasploit_gemset} && \
+      cd #{metasploit_root} && \
+      gem install bundler && \
+      bundle install
+    "
+`
+
+printf 'Starting up MSFRPCD *******************************************************************'
+vagrant_example = "#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml.EXAMPLE"
+vagrant_yaml = "#{pwn_root}/etc/userland/#{pwn_provider}/metasploit/vagrant.yaml"
+
+system(
+  "
+    sudo bash \
+      --login \
+      -c 'cp #{vagrant_example} #{vagrant_yaml}'
+  "
+)
+
+system(
+  "
+    sudo bash \
+      --login \
+      -c \"\
+        rvm use ruby-#{metasploit_ruby_version}@#{metasploit_gemset} && \
+        cp #{pwn_root}/etc/systemd/msfrpcd.service /etc/systemd/system/ && \
+        systemctl enable msfrpcd.service && \
+        systemctl start msfrpcd.service
+      \"
+  "
+)

data/packer/provisioners/nmap.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y nmap ncat ndiff ${assess_update_errors}"
+grok_error

data/packer/provisioners/openvas.sh

@@ -0,0 +1,23 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+$screen_cmd "${apt} install -y gvm ${assess_update_errors}"
+grok_error
+
+sudo systemctl enable redis-server
+sudo systemctl start redis-server
+sudo gvm-setup
+sudo gvm-check-setup
+
+# Add a working systemd daemon
+sudo gvm-start

data/packer/provisioners/openvas_wrappers.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+source /etc/profile.d/globals.sh
+
+$screen_cmd "cd /opt && git clone https://github.com/ninp0/openvas_wrappers.git && ln -sf /opt/openvas_wrappers/continuous_openvas_scan_task.sh /usr/local/bin/ && ln -sf /opt/openvas_wrappers/continuous_openvas_scan_task_cert_authn.sh /usr/local/bin/ ${assess_update_errors}"

data/packer/provisioners/openvpn.sh

@@ -0,0 +1,7 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y openvpn resolvconf ${assess_update_errors}"
+grok_error
+sudo systemctl enable resolvconf
+sudo systemctl start resolvconf

data/packer/provisioners/peda.sh

@@ -0,0 +1,4 @@
+#!/bin/bash --login
+# PEDA - Python Exploit Development Assistance for GDB to be used w/ AFL
+sudo /bin/bash --login -c 'cd /opt && git clone https://github.com/longld/peda.git peda-dev && echo "source /opt/peda-dev/peda.py" >> /root/.gdbinit'
+sudo -H -u admin /bin/bash --login -c 'echo "source /opt/peda-dev/peda.py" >> /home/admin/.gdbinit'

data/packer/provisioners/phantomjs.rb

@@ -0,0 +1,28 @@
+#!/usr/bin/env ruby
+# frozen_string_literal: true
+
+require 'rest-client'
+require 'nokogiri'
+
+printf 'Installing phantomjs ******************************************************************'
+phantomjs_tar_bz2 = ''
+phantomjs_tar_extraction_path = '/opt/phantomjs-releases'
+phantomjs_linux_download = ''
+url = 'http://phantomjs.org/download.html'
+# Look for specific links w/ pattern matching 64 bit linux tar.gz
+phantomjs_resp = RestClient.get(url)
+links = Nokogiri::HTML(phantomjs_resp).xpath('//a/@href')
+links.each do |link|
+  if link.value.match?(/linux-x86_64\.tar\.bz2/)
+    phantomjs_tar_bz2 = "/opt/#{File.basename(link.value)}"
+    phantomjs_linux_download = link.value
+  end
+end
+
+puts `sudo wget -O #{phantomjs_tar_bz2} #{phantomjs_linux_download}` unless File.exist?(phantomjs_tar_bz2)
+
+puts `sudo mkdir -p #{phantomjs_tar_extraction_path}` unless Dir.exist?(phantomjs_tar_extraction_path)
+puts `sudo tar -xjvf #{phantomjs_tar_bz2} -C #{phantomjs_tar_extraction_path}`
+phantomjs_tar_extracted_root = "#{phantomjs_tar_extraction_path}/#{File.basename(phantomjs_tar_bz2, '.tar.bz2')}"
+puts `sudo cp "#{phantomjs_tar_extracted_root}/bin/phantomjs" "/usr/local/bin/phantomjs"`
+puts `sudo rm #{phantomjs_tar_bz2}`

data/packer/provisioners/phantomjs_wrapper.sh

@@ -0,0 +1,22 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+source /etc/profile.d/rvm.sh
+ruby_version=`cat ${pwn_root}/.ruby-version`
+rvm use ruby-$ruby_version@pwn
+
+# This is needed to ensure other ruby installations aren't picked up
+# by #!/usr/bin/env ruby inside of the script below
+# /pwn/packer/provisioners/phantomjs.rb
+$screen_cmd "${apt} install phantomjs ${assess_update_errors}"
+grok_error

data/packer/provisioners/post_install.sh

@@ -0,0 +1,41 @@
+#!/bin/bash --login
+pwn_provider=`echo $PWN_PROVIDER`
+
+# Clenup History
+sudo /bin/bash --login -c 'find /home -type f -name ".*history" -exec shred -u {} \;'
+sudo /bin/bash --login -c 'find /root -type f -name ".*history" -exec shred -u {} \;'
+
+# Cleanup Logs
+sudo /bin/bash --login -c 'find /var/log -type f -name "*.log" | while read log; do > $log; done'
+sudo /bin/bash --login -c 'find /var/log -type f -name "dmesg.*" -exec rm {} \;'
+sudo /bin/bash --login -c '> /var/log/debug'
+sudo /bin/bash --login -c '> /var/log/dmesg'
+sudo /bin/bash --login -c '> /var/log/lastlog'
+sudo /bin/bash --login -c '> /var/log/messages'
+sudo /bin/bash --login -c '> /var/log/syslog'
+sudo /bin/bash --login -c '> /var/log/wtmp'
+
+# Disable Local Root Access
+sudo passwd -l root
+
+if [[ $pwn_provider == 'aws' ]]; then
+  sudo /bin/bash --login -c 'find /etc/ssh -type f -name "*_key*" -exec shred -u {} \;'
+  sudo /bin/bash --login -c 'find /home -type f -name "authorized_keys" -exec shred -u {} \;'
+  sudo /bin/bash --login -c 'apt autoremove -y --purge'
+  # This allows for PacketFu::Utils.whoami? to properly fuction (Used in PWN::Plugins::Packet)
+  # Socket.getifaddrs.each {|ifaddr| puts ifaddr.addr.inspect}; << return nil when teredo interface exists
+  # this breaks https://github.com/packetfu/packetfu/blob/master/lib/packetfu/utils.rb#L196
+  # which tries to call ifaddr.addr.ip? when ifaddr.addr == Nil
+  sudo systemctl stop miredo
+  sudo systemctl disable miredo
+fi
+
+# Clear Bash History
+history -c
+
+if [[ $pwn_provider != 'aws' ]]; then
+  # Create lame password for admin user & reset during deployment via Vagrant
+  echo -e "changeme\nchangeme" | sudo passwd admin
+
+  sudo passwd --expire pwnadmin
+fi

data/packer/provisioners/postgresql.sh

@@ -0,0 +1,49 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+pwn_provider=`echo $PWN_PROVIDER`
+
+pdb='pwn'
+
+$screen_cmd "${apt} install -y postgresql ${assess_update_errors}"
+grok_error
+
+if [[ $pwn_provider == 'docker' ]]; then
+  $screen_cmd "/etc/init.d/postgresql start ${assess_update_errors}"
+  grok_error
+else
+  $screen_cmd "sudo systemctl enable postgresql ${assess_update_errors}"
+  grok_error
+  $screen_cmd "sudo systemctl restart postgresql ${assess_update_errors}"
+  grok_error
+fi
+
+
+$screen_cmd "sudo -iu postgres createdb ${pdb} ${assess_update_errors}"
+grok_error
+
+function create_table() {
+  current_table="${1}"
+  pwn_table_def=$(cat <<EOF
+    create table ${current_table} (
+      id SERIAL PRIMARY KEY,
+      row_result varchar(33000) NOT NULL
+    );
+EOF
+  )
+  echo $pwn_table_def | sudo -iu postgres psql -X -d $pdb
+  grok_error
+}
+
+create_table 'sast'
+create_table 'fuzz_net_app_proto'

data/packer/provisioners/preeny.sh

@@ -0,0 +1,8 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# PEDA - Python Exploit Development Assistance for GDB to be used w/ AFL
+$screen_cmd "${apt} install -y libini-config-dev libseccomp-dev"
+grok_error
+
+sudo /bin/bash --login -c 'cd /opt && git clone https://github.com/zardus/preeny preeny-dev && cd /opt/preeny-dev && make'

data/packer/provisioners/pwn.sh

@@ -0,0 +1,100 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+if [[ $PWN_ROOT == '' ]]; then
+  if [[ ! -d '/pwn' ]]; then
+    pwn_root=$(pwd)
+  else
+    pwn_root='/pwn'
+  fi
+else
+  pwn_root="${PWN_ROOT}"
+fi
+
+pwn_provider=`echo $PWN_PROVIDER`
+os=$(uname -s)
+
+case $os in
+  "Darwin")
+    echo 'Installing wget to retrieve tesseract trained data...'
+    sudo port -N install wget
+
+    echo "Installing fontconfig..."
+    sudo port -N install fontconfig
+
+    echo "Installing cmatrix..."
+    sudo port -N install cmatrix
+
+    echo 'Installing Postgres Libraries for pg gem...'
+    sudo port -N install postgresql96-server
+
+    echo 'Installing libpcap Libraries...'
+    sudo port -N install libpcap
+
+    echo "Installing libsndfile1 & libsndfile1-dev Libraries..."
+    sudo port -N install libsndfile
+
+    echo 'Installing ImageMagick...'
+    sudo port -N install imagemagick
+
+    echo 'Installing Tesseract OCR...'
+    sudo port -N install tesseract
+    sudo /bin/bash --login -c 'cd /opt/local/share/tessdata && wget https://raw.githubusercontent.com/tesseract-ocr/tessdata/master/eng.traineddata'
+    ;;
+  "Linux")
+    apt --version > /dev/null 2>&1
+    if [[ $? == 0 ]]; then
+      echo "Installing wget to retrieve tesseract trained data..."
+      $screen_cmd "${apt} install -y wget ${assess_update_errors}"
+      grok_error
+
+      echo "Installing fontconfig..."
+      $screen_cmd "${apt} install -y fontconfig ${assess_update_errors}"
+      grok_error
+
+      echo "Installing fontmatrix..."
+      $screen_cmd "${apt} install -y cmatrix-xfont ${assess_update_errors}"
+      grok_error
+
+      echo "Installing Postgres Libraries for pg gem..."
+      $screen_cmd "${apt} install -y postgresql-server-dev-all ${assess_update_errors}"
+      grok_error
+
+      echo "Installing libpcap Libraries..."
+      $screen_cmd "${apt} install -y libpcap-dev ${assess_update_errors}"
+      grok_error
+
+      echo "Installing fftw Libraries..."
+      $screen_cmd "${apt} install -y libfftw3-dev ${assess_update_errors}"
+      grok_error
+
+      echo "Installing libsndfile1 & libsndfile1-dev Libraries..."
+      $screen_cmd "${apt} install -y libsndfile1 ${assess_update_errors}"
+      grok_error
+
+      $screen_cmd "${apt} install -y libsndfile1-dev ${assess_update_errors}"
+      grok_error
+
+      echo "Installing imagemagick & libmagickwand-dev Libraries..."
+      $screen_cmd "${apt} install -y imagemagick ${assess_update_errors}"
+      grok_error
+
+      $screen_cmd "${apt} install -y libmagickwand-dev ${assess_update_errors}"
+      grok_error
+
+      echo "Installing tesseract-ocr-all & trainers..."
+      $screen_cmd "${apt} install -y tesseract-ocr-all ${assess_update_errors}"
+      grok_error
+
+      $screen_cmd "cd /usr/share/tesseract-ocr && wget https://raw.githubusercontent.com/tesseract-ocr/tessdata/master/eng.traineddata ${assess_update_errors}"
+      grok_error
+    else
+      echo "A Linux Distro was Detected, however, ${0} currently only supports Kali Rolling, Ubuntu, & OSX for now...feel free to install manually."
+    fi
+    ;;
+  *)
+    echo "${os} not currently supported."
+    exit 1
+esac
+
+rvmsudo /bin/bash --login -c "cd ${pwn_root} && cp etc/userland/${pwn_provider}/metasploit/vagrant.yaml.EXAMPLE etc/userland/${pwn_provider}/metasploit/vagrant.yaml && ./reinstall_pwn_gemset.sh && ./build_pwn_gem.sh && rubocop"

data/packer/provisioners/pwntools.sh

@@ -0,0 +1,13 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# Quick Prototyping of Exploits
+# $ ipython
+# in [1]: from pwn import *
+# More information available here: https://docs.pwntools.com/en/stable/
+#sudo /bin/bash --login -c "apt update && apt install -y python2.7 python-pip python-dev git libssl-dev libffi-dev build-essential && pip install --upgrade pip && pip install --upgrade pwntools"
+$screen_cmd "${apt} update ${assess_update_errors}"
+grok_error
+
+$screen_cmd "${apt} install -y python2.7 python-pip python-dev git libssl-dev libffi-dev build-essential && pip install pwntools ${assess_update_errors}"
+grok_error

data/packer/provisioners/radamsa.sh

@@ -0,0 +1,7 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+$screen_cmd "${apt} install -y gcc make git wget ${assess_update_errors}"
+grok_error
+
+sudo /bin/bash --login -c 'cd /opt && git clone https://gitlab.com/akihe/radamsa.git && cd radamsa && make && make install'

data/packer/provisioners/radare2.sh

@@ -0,0 +1,29 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+r2_root='/usr/local/bin'
+
+# This is the preferred method of installation
+# to support radare2 plugin installation (e.g. r2ghidra)
+sudo apt install -y capstone-tool meson
+cd /opt && sudo git clone https://github.com/radareorg/radare2
+sudo chown -R $USER:$USER radare2
+cd radare2 && sudo ./sys/install.sh
+
+${r2_root}/r2 -qq -c 'r2pm -U' /bin/id
+${r2_root}/r2 -qq -c 'r2pm -ci decai' /bin/id
+${r2_root}/r2 -qq -c 'r2pm -ci r2ai-plugin' /bin/id
+${r2_root}/r2 -qq -c 'r2pm -ci r2dec' /bin/id
+${r2_root}/r2 -qq -c 'r2pm -ci r2ghidra-sleigh' /bin/id
+${r2_root}/r2 -qq -c 'r2pm -ci r2ghidra' /bin/id
+${r2_root}/r2 -qq -c 'r2pm -ci r2frida' /bin/id
+
+${r2_root}/r2pm -U
+${r2_root}/r2pm -ci decai
+${r2_root}/r2pm -ci r2ai-plugin
+${r2_root}/r2pm -ci r2dec
+${r2_root}/r2pm -ci r2ghidra-sleigh
+${r2_root}/r2pm -ci r2ghidra
+${r2_root}/r2pm -ci r2frida
+
+mkdir -p ~/.local/share/radare2/r2panels
+cp $PWN_ROOT/third_party/r2-pwn-layout ~/.local/share/radare2/r2panels/

data/packer/provisioners/rc.local.sh

@@ -0,0 +1,16 @@
+#!/bin/bash --login
+source /etc/profile.d/globals.sh
+
+# Configure simple tasks to run @ boot
+sudo tee -a '/etc/rc.local' << 'EOF'
+#!/bin/sh -e
+ifconfig lo:0 127.0.0.2 netmask 255.0.0.0 up
+ifconfig lo:1 127.0.0.3 netmask 255.0.0.0 up
+ifconfig lo:2 127.0.0.4 netmask 255.0.0.0 up
+#sudo -H -u admin /usr/local/bin/toggle_tor.sh
+
+exit 0
+EOF
+
+$screen_cmd "chmod 755 /etc/rc.local ${assess_update_errors}"
+grok_error

data/packer/provisioners/reboot_os.sh

@@ -0,0 +1,7 @@
+#!/bin/bash --login
+# nohup prevents freezes in Packer due to execution moving to the next
+# script while a reboot is in progress. This should be coupled with a
+# "pause_before" stanza for the next provisioner in the Packer
+# to guarantee the required behaviour.
+nohup sudo shutdown --reboot now </dev/null >/dev/null 2>&1 &
+exit 0