Security Challenge Modules

This repository contains a bunch of puppet modules to setup computer security based challenges inside a virtual machine. Most of the modules include their own documentation but for more general documentation then checkout the _docs folder.

These puppet modules contain security vulnerabilities and are not intended for live machines.

Overview of the included modules

Exercise modules

Module Name	Current Module Status	SecGen Framework Supported	Brief Description
aclexercise	75% complete	no	Access control list capture the flag exercise
ctf_buffer_overflow	done	yes	Buffer overflow capture the flag exercise
ctf_java_protocols	done	yes	Cryptography protocols capture the flag exercise
ctf_reverse_engineering	done	yes	Reverse engineering capture the flag exercise
phishing	prototype	no	Prototype for sending phishing emails to scripted victims

Helper modules

Module Name	Current Module Status	SecGen Framework Supported	Brief Description
gateway	done	no	Configures a container to be a network gateway
gentoken	done	yes	Generates capture the flag tokens
genuser	done	no	Creates users easier than puppet does
mailserver	usable	no	Configures a postfix/dovecot unencrypted mailserver
puppetdocker	usable	no	Creates containers and networks to simulate the internet
sshserver	done	no	Configures an ssh server for password authentication and root login

Package installer modules

Module Name	Current Module Status	SecGen Framework Supported	Brief Description
adobereader	done	no	Installs Adobe Reader 8.1.2 through wine
clang	obsolete	yes	Installs a c compiler
ida	done	yes	Installs ida
jdgui	done	no	Installs jdgui
metasploit	done	no	Installs metasploit
wine	done	no	Installs wine for windows applications in linux
wireshark	done	yes	Installs wireshark