Merge pull request #2 from blue9057/dockerized

Dockerized
blue9057 · May 30, 2024 · 7ba4ab4 · 7ba4ab4
2 parents 32454a7 + 5ac562a
commit 7ba4ab4
Show file tree

Hide file tree

Showing 293 changed files with 191 additions and 242 deletions.
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
@@ -0,0 +1,83 @@
+name: Docker
+
+# This workflow uses actions that are not certified by GitHub.
+# They are provided by a third-party and are governed by
+# separate terms of service, privacy policy, and support
+# documentation.
+
+on:
+  schedule:
+    - cron: '28 18 * * *'
+  push:
+    branches: [ "main" ]
+    # Publish semver tags as releases.
+    tags: [ 'v*.*.*' ]
+  pull_request:
+    branches: [ "main" ]
+
+env:
+  # Use docker.io for Docker Hub if empty
+  REGISTRY: ghcr.io
+  # github.repository as <account>/<repo>
+  IMAGE_NAME: ${{ github.repository }}
+
+
+jobs:
+  build:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v3
+
+      # Install the cosign tool except on PR
+      # https://github.com/sigstore/cosign-installer
+      - name: Install cosign
+        if: github.event_name != 'pull_request'
+        uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
+        with:
+          cosign-release: 'v2.1.1'
+
+      # Set up BuildKit Docker container builder to be able to build
+      # multi-platform images and export cache
+      # https://github.com/docker/setup-buildx-action
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
+
+      # Login against a Docker registry except on PR
+      # https://github.com/docker/login-action
+      - name: Log into registry ${{ env.REGISTRY }}
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      # Extract metadata (tags, labels) for Docker
+      # https://github.com/docker/metadata-action
+      - name: Extract Docker metadata
+        id: meta
+        uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+
+      # Build and push Docker image with Buildx (don't push on PR)
+      # https://github.com/docker/build-push-action
+      - name: Build and push Docker image
+        id: build-and-push
+        uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
+        with:
+          context: .
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
diff --git a/Dockerfile b/Dockerfile
@@ -0,0 +1,43 @@
+FROM ubuntu:22.04
+ENV PASSWORD="password"
+CMD ["/bin/sh", "-c", "su - labs"]
+
+COPY --chmod=700 ./solutions /root/
+RUN set -ex; \
+    \
+    apt-get update; \
+    apt-get install -y software-properties-common build-essential python2 python-pip file python3 language-pack-en gdb valgrind zsh git bash ruby wget curl tmux gcc vim make clang sudo gcc-multilib; \
+    add-apt-repository ppa:ubuntu-toolchain-r/test; \
+    apt-get update; \
+    useradd -m labs; \
+    useradd -m admin; \
+    usermod -aG sudo admin; \
+    update-locale LANG=en_US.UTF-8 LC_MESSAGES=POSIX; \
+    chsh -s $(which bash) labs; \
+    echo "labs:${PASSWORD}" | chpasswd; \
+    echo "admin:${PASSWORD}" | chpasswd 
+
+COPY --chmod=777 ./src/ /home/labs/
+RUN (cd /home/labs/week1 && make)
+RUN (cd /home/labs/week2 && make)
+RUN (cd /home/labs/week3 && make)
+RUN (cd /home/labs/week4 && make)
+RUN (cd /home/labs/week5 && make)
+RUN (cd /home/labs/week6 && make)
+RUN (cd /home/labs/week7 && make)
+RUN chown -R labs:labs /home/labs
+RUN (cd /home/labs/week1/challenges && python2 install.py)
+RUN (cd /home/labs/week2/challenges && python2 install.py)
+RUN (cd /home/labs/week3/challenges && python2 install.py)
+RUN (cd /home/labs/week4/challenges && python2 install.py)
+RUN (cd /home/labs/week5/challenges && python2 install.py)
+RUN (cd /home/labs/week6/challenges && python2 install.py)
+RUN (cd /home/labs/week7/challenges && python2 install.py)
+RUN (wget https://github.com/pwndbg/pwndbg/releases/download/2024.02.14/pwndbg_2024.02.14_amd64.deb && apt install -y ./pwndbg_2024.02.14_amd64.deb && rm pwndbg_2024.02.14_amd64.deb)
+
+USER labs
+WORKDIR /home/labs
+RUN (wget https://robertserver.s3.us-west-2.amazonaws.com/cand_dotfiles.tar.gz && tar -xvf cand_dotfiles.tar.gz && rm cand_dotfiles.tar.gz)
+RUN bash -c "$(curl -fsSL https://gef.blah.cat/sh)"
+RUN pip2 install pwntools
+
diff --git a/README.md b/README.md
@@ -1,3 +1,40 @@
+# how do i dock
+
+First, you need to install Podman with your preferred package manager. This should theoretically work with Docker as well, though I did not test it.
+
+```bash
+$ podman build -t cand https://github.com/gnubufferoverflows/cand-docker.git
+$ podman run -t -a stdin -a stdout -a stderr cand
+```
+
+The process will take a while. You may want to prepare a bottle of gin during this time to get yourself properly inebriated and in the hacking mood.
+
+When prompted for the password, enter the highly secure password `password`. The challenges can be found in the home directory of `/home/labs`. Enjoy!
+
+## ASLR
+
+Disable ASLR on the container, must run on your **host** system. For Linux systems: `sudo echo 0 | sudo tee /proc/sys/kernel/randomize_va_space`
+
+ASLR options:
+* `0`: Disable
+* `1`: Shared libraries, stack, mmap(), VDSO and heap
+* `2`: Full ASLR
+
+## Manage your Container
+
+Find container ID: `podman ps -a`
+
+Stop container (saving progress): `podman stop containerid`
+
+Get TTY back after stopping: `podman start -a containerid`
+
+Please note: I did not test all of the challenges, so please report any issues.
+
+Also please note: This is meant to be a container for single user use. It's not meant for a classroom. I don't intend on making a multi-user version.
+
+## For Cheaters
+If you have given up, the solutions can be found in `/root`. To get root, you need to do `su - admin` using the very secure password, then you may run `sudo`.
+
 # Cyber Attacks and Defense
 
 This repository serves as a comprehensive archive of educational content,

diff --git a/binaries/week1/level0 b/binaries/week1/level0
diff --git a/binaries/week1/level1 b/binaries/week1/level1
diff --git a/binaries/week1/level2 b/binaries/week1/level2
diff --git a/binaries/week1/level3 b/binaries/week1/level3
diff --git a/binaries/week1/level4 b/binaries/week1/level4
diff --git a/binaries/week1/level5 b/binaries/week1/level5
diff --git a/binaries/week1/level6 b/binaries/week1/level6
diff --git a/binaries/week1/level7 b/binaries/week1/level7
diff --git a/binaries/week1/level8 b/binaries/week1/level8
diff --git a/binaries/week1/level9 b/binaries/week1/level9
diff --git a/binaries/week2/bof-level0 b/binaries/week2/bof-level0
diff --git a/binaries/week2/bof-level1 b/binaries/week2/bof-level1
diff --git a/binaries/week2/bof-level2 b/binaries/week2/bof-level2
diff --git a/binaries/week2/bof-level3 b/binaries/week2/bof-level3
diff --git a/binaries/week2/bof-level4 b/binaries/week2/bof-level4
diff --git a/binaries/week2/bof-level5 b/binaries/week2/bof-level5
diff --git a/binaries/week2/bof-level6 b/binaries/week2/bof-level6
diff --git a/binaries/week2/bof-level7 b/binaries/week2/bof-level7
diff --git a/binaries/week2/bof-level8 b/binaries/week2/bof-level8
diff --git a/binaries/week2/bof-level9 b/binaries/week2/bof-level9
diff --git a/binaries/week3/README.md b/binaries/week3/README.md
diff --git a/binaries/week3/alphanumeric-shellcode-32 b/binaries/week3/alphanumeric-shellcode-32
diff --git a/binaries/week3/ascii-shellcode-64 b/binaries/week3/ascii-shellcode-64
diff --git a/binaries/week3/nonzero-shellcode-32 b/binaries/week3/nonzero-shellcode-32
diff --git a/binaries/week3/nonzero-shellcode-64 b/binaries/week3/nonzero-shellcode-64
diff --git a/binaries/week3/shellcode-32 b/binaries/week3/shellcode-32
diff --git a/binaries/week3/shellcode-64 b/binaries/week3/shellcode-64
diff --git a/binaries/week3/shellcode-template/Makefile b/binaries/week3/shellcode-template/Makefile
diff --git a/binaries/week3/shellcode-template/shellcode.S b/binaries/week3/shellcode-template/shellcode.S
diff --git a/binaries/week3/shellcode-template/shellcode.bin b/binaries/week3/shellcode-template/shellcode.bin
diff --git a/binaries/week3/shellcode-template/shellcode.o b/binaries/week3/shellcode-template/shellcode.o
diff --git a/binaries/week3/short-shellcode-32 b/binaries/week3/short-shellcode-32
diff --git a/binaries/week3/short-shellcode-64 b/binaries/week3/short-shellcode-64
diff --git a/binaries/week3/stack-ovfl-no-envp-32 b/binaries/week3/stack-ovfl-no-envp-32
diff --git a/binaries/week3/stack-ovfl-no-envp-no-argv-32 b/binaries/week3/stack-ovfl-no-envp-no-argv-32
diff --git a/binaries/week3/stack-ovfl-sc-32 b/binaries/week3/stack-ovfl-sc-32
diff --git a/binaries/week3/stack-ovfl-use-envp-32 b/binaries/week3/stack-ovfl-use-envp-32
diff --git a/binaries/week3/stack-ovfl-where-32 b/binaries/week3/stack-ovfl-where-32
diff --git a/binaries/week3/stack-ovfl-where-32-2 b/binaries/week3/stack-ovfl-where-32-2
diff --git a/binaries/week4/aslr/aslr-1 b/binaries/week4/aslr/aslr-1
diff --git a/binaries/week4/aslr/aslr-2 b/binaries/week4/aslr/aslr-2
diff --git a/binaries/week4/aslr/aslr-3 b/binaries/week4/aslr/aslr-3
diff --git a/binaries/week4/aslr/aslr-4 b/binaries/week4/aslr/aslr-4
diff --git a/binaries/week4/aslr/aslr-5 b/binaries/week4/aslr/aslr-5
diff --git a/binaries/week4/aslr/aslr-6 b/binaries/week4/aslr/aslr-6
diff --git a/binaries/week4/non-aslr/dep-1 b/binaries/week4/non-aslr/dep-1
diff --git a/binaries/week4/non-aslr/dep-2 b/binaries/week4/non-aslr/dep-2
diff --git a/binaries/week4/non-aslr/dep-3 b/binaries/week4/non-aslr/dep-3
diff --git a/binaries/week4/non-aslr/stack-cookie-1 b/binaries/week4/non-aslr/stack-cookie-1
diff --git a/binaries/week4/non-aslr/stack-cookie-2 b/binaries/week4/non-aslr/stack-cookie-2
diff --git a/binaries/week4/non-aslr/stack-cookie-3 b/binaries/week4/non-aslr/stack-cookie-3
diff --git a/binaries/week4/non-aslr/stack-cookie-4 b/binaries/week4/non-aslr/stack-cookie-4
diff --git a/binaries/week5/rop-1-32 b/binaries/week5/rop-1-32
diff --git a/binaries/week5/rop-1-64 b/binaries/week5/rop-1-64
diff --git a/binaries/week5/rop-2-32 b/binaries/week5/rop-2-32
diff --git a/binaries/week5/rop-2-64 b/binaries/week5/rop-2-64
diff --git a/binaries/week5/rop-3-32 b/binaries/week5/rop-3-32
diff --git a/binaries/week5/rop-3-64 b/binaries/week5/rop-3-64
diff --git a/binaries/week5/rop-4-32 b/binaries/week5/rop-4-32
diff --git a/binaries/week5/rop-4-64 b/binaries/week5/rop-4-64
diff --git a/binaries/week5/rop-5-32 b/binaries/week5/rop-5-32
diff --git a/binaries/week5/rop-5-64 b/binaries/week5/rop-5-64
diff --git a/binaries/week5/rop-6-64 b/binaries/week5/rop-6-64
diff --git a/binaries/week6/ar-2 b/binaries/week6/ar-2
diff --git a/binaries/week6/aw-1 b/binaries/week6/aw-1
diff --git a/binaries/week6/aw-2 b/binaries/week6/aw-2
diff --git a/binaries/week6/fs-arbt-read-32 b/binaries/week6/fs-arbt-read-32
diff --git a/binaries/week6/fs-arbt-read-64 b/binaries/week6/fs-arbt-read-64
diff --git a/binaries/week6/fs-arbt-write-32 b/binaries/week6/fs-arbt-write-32
diff --git a/binaries/week6/fs-arbt-write-64 b/binaries/week6/fs-arbt-write-64
diff --git a/binaries/week6/fs-code-exec-32 b/binaries/week6/fs-code-exec-32
diff --git a/binaries/week6/fs-code-exec-64 b/binaries/week6/fs-code-exec-64
diff --git a/binaries/week6/fs-code-exec-pie-64 b/binaries/week6/fs-code-exec-pie-64
diff --git a/binaries/week6/fs-no-binary-pie-64 b/binaries/week6/fs-no-binary-pie-64
diff --git a/binaries/week6/fs-read-1-32 b/binaries/week6/fs-read-1-32
diff --git a/binaries/week6/fs-read-1-64 b/binaries/week6/fs-read-1-64
diff --git a/binaries/week6/fs-read-2-32 b/binaries/week6/fs-read-2-32
diff --git a/binaries/week6/fs-read-2-64 b/binaries/week6/fs-read-2-64
diff --git a/binaries/week6/sr-1 b/binaries/week6/sr-1
diff --git a/binaries/week7/rop-static b/binaries/week7/rop-static
diff --git a/src/week1/challenges/install.py b/src/week1/challenges/install.py
@@ -5,7 +5,7 @@
 import glob
 
 WEEK = 'week1'
-UID_START = 10000
+UID_START = 10100
 
 def main():
 
@@ -15,7 +15,7 @@ def main():
 
     print(dirs)
 
-    lab_dir = "/home/labs/%s" % WEEK
+    lab_dir = "/home/labs/%s/challenges" % WEEK
     # create lab directory
     if not os.path.exists(lab_dir):
         os.system("sudo mkdir %s" % lab_dir)

diff --git a/src/week1/challenges/level0/level0 b/src/week1/challenges/level0/level0
diff --git a/src/week1/challenges/level1/level1 b/src/week1/challenges/level1/level1
diff --git a/src/week1/challenges/level2/level2 b/src/week1/challenges/level2/level2
diff --git a/src/week1/challenges/level3/level3 b/src/week1/challenges/level3/level3
diff --git a/src/week1/challenges/level4/level4 b/src/week1/challenges/level4/level4
diff --git a/src/week1/challenges/level5/level5 b/src/week1/challenges/level5/level5
diff --git a/src/week1/challenges/level6/level6 b/src/week1/challenges/level6/level6
diff --git a/src/week1/challenges/level7/level7 b/src/week1/challenges/level7/level7
diff --git a/src/week2/challenges/bof-level0/bof-level0 b/src/week2/challenges/bof-level0/bof-level0
diff --git a/src/week2/challenges/bof-level1/bof-level1 b/src/week2/challenges/bof-level1/bof-level1
diff --git a/src/week2/challenges/bof-level2/bof-level2 b/src/week2/challenges/bof-level2/bof-level2
diff --git a/src/week2/challenges/bof-level3/bof-level3 b/src/week2/challenges/bof-level3/bof-level3
diff --git a/src/week2/challenges/bof-level4/bof-level4 b/src/week2/challenges/bof-level4/bof-level4
diff --git a/src/week2/challenges/bof-level5/bof-level5 b/src/week2/challenges/bof-level5/bof-level5
diff --git a/src/week2/challenges/bof-level7/bof-level7 b/src/week2/challenges/bof-level7/bof-level7
diff --git a/src/week2/challenges/bof-level9/bof-level9 b/src/week2/challenges/bof-level9/bof-level9
diff --git a/src/week2/challenges/install.py b/src/week2/challenges/install.py
@@ -5,7 +5,7 @@
 import glob
 
 WEEK = 'week2'
-UID_START = 20000
+UID_START = 10200
 
 def main():
 
@@ -15,7 +15,7 @@ def main():
 
     print(dirs)
 
-    lab_dir = "/home/labs/%s" % WEEK
+    lab_dir = "/home/labs/%s/challenges" % WEEK
     # create lab directory
     if not os.path.exists(lab_dir):
         os.system("sudo mkdir %s" % lab_dir)

diff --git a/src/week3/challenges/alphanumeric-shellcode-32/alphanumeric-shellcode-32 b/src/week3/challenges/alphanumeric-shellcode-32/alphanumeric-shellcode-32
diff --git a/src/week3/challenges/ascii-shellcode-64/ascii-shellcode-64 b/src/week3/challenges/ascii-shellcode-64/ascii-shellcode-64