diff --git a/Scripts/targetconfigs/DataSources.xml b/Scripts/targetconfigs/DataSources.xml new file mode 100644 index 0000000..02010ac --- /dev/null +++ b/Scripts/targetconfigs/DataSources.xml @@ -0,0 +1,30 @@ + + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/Drives.xml b/Scripts/targetconfigs/Drives.xml new file mode 100644 index 0000000..92376ad --- /dev/null +++ b/Scripts/targetconfigs/Drives.xml @@ -0,0 +1,21 @@ + + + + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/Groups.xml b/Scripts/targetconfigs/Groups.xml new file mode 100644 index 0000000..b0a8790 --- /dev/null +++ b/Scripts/targetconfigs/Groups.xml @@ -0,0 +1,19 @@ + + + + + + diff --git a/Scripts/targetconfigs/Printers.xml b/Scripts/targetconfigs/Printers.xml new file mode 100644 index 0000000..0a03a8e --- /dev/null +++ b/Scripts/targetconfigs/Printers.xml @@ -0,0 +1,67 @@ + + + + + + + + + + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/ScheduledTasks.xml b/Scripts/targetconfigs/ScheduledTasks.xml new file mode 100644 index 0000000..80401bb --- /dev/null +++ b/Scripts/targetconfigs/ScheduledTasks.xml @@ -0,0 +1,267 @@ + + + + + + + + + + + + + + + + + + + + + + WIN-P3LTV7KC6IO\Administrator + Demo + + + + %LogonDomain%\%LogonUser + InteractiveToken + LeastPrivilege + + + + + PT10M + PT1H + true + true + + IgnoreNew + true + true + true + true + true + true + true + false + true + true + P3D + 7 + + PT1M + 3 + + + + + 2008-05-28T14:06:04 + true + + + 2008-05-28T14:06:08 + true + + 1 + + + + 2008-05-28T14:06:11 + true + + 1 + + + + + + + + 2008-05-28T14:06:16 + true + + + 1 + + + + + + + + true + + + true + + + true + + + true + + + true + RemoteConnect + + + true + RemoteConnect + + + true + SessionLock + + + true + SessionUnlock + + + + + a + b + c + + + a + b + c + d + + + e + + f + + + aa + bb + + + + + + + + + + + + WIN-P3LTV7KC6IO\Administrator + Demo ImdTask + + + + %LogonDomain%\%LogonUser + InteractiveToken + HighestAvailable + + + + + PT10M + PT1H + true + false + + IgnoreNew + true + true + true + false + false + true + true + false + false + false + P3D + 7 + + + calc.exe + + + + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/Services.xml b/Scripts/targetconfigs/Services.xml new file mode 100644 index 0000000..212d1bf --- /dev/null +++ b/Scripts/targetconfigs/Services.xml @@ -0,0 +1,22 @@ + + + + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/SiteManager.xml b/Scripts/targetconfigs/SiteManager.xml new file mode 100644 index 0000000..76ab90a --- /dev/null +++ b/Scripts/targetconfigs/SiteManager.xml @@ -0,0 +1,46 @@ + + + + + ftp.example.com + 21 + 0 + 0 + username + SGVsbG9QYXNzd29yZA== + 1 + 0 + MODE_DEFAULT + 0 + Auto + 0 + My FTP Site + Sample FTP site for demonstration + + + 0 + 0 + + + + sftp.example.com + 22 + 1 + 1 + sftpuser + SGVsbG9QYXNzd29yZA== + 1 + 0 + MODE_DEFAULT + 1 + Auto + 0 + My SFTP Site + Sample SFTP site + + + 0 + 0 + + + diff --git a/Scripts/targetconfigs/WinSCP.ini b/Scripts/targetconfigs/WinSCP.ini new file mode 100644 index 0000000..ffb54a3 --- /dev/null +++ b/Scripts/targetconfigs/WinSCP.ini @@ -0,0 +1,17 @@ +[Configuration\Interface] +Random=4074A9829D979781989E96 + +[Sessions\example] +HostName=ftp.example.com +PortNumber=21 +UserName=myuser +Password=0V5aNH+/kT8= ; Encrypted password +LocalDirectory=C:\Users\myuser\Documents +RemoteDirectory=/public_html +FSProtocol=0 +PostLoginCommands= +PrivateKeyFile= + +[Configuration\Interface\Commander] +LastLocalDirectory=C:\Users\myuser\Documents +LastRemoteDirectory=/public_html diff --git a/Scripts/targetconfigs/app.config b/Scripts/targetconfigs/app.config new file mode 100644 index 0000000..26a50d9 --- /dev/null +++ b/Scripts/targetconfigs/app.config @@ -0,0 +1,106 @@ + + + + +
+ +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Scripts/targetconfigs/bootstrap.ini b/Scripts/targetconfigs/bootstrap.ini new file mode 100644 index 0000000..f04387c --- /dev/null +++ b/Scripts/targetconfigs/bootstrap.ini @@ -0,0 +1,18 @@ +[GeneralSettings] +username=adminUser +password=P@ssw0rd123 +timeout=30 +loglevel=info +public=public +private=mysecret +secret=mysecret +key=mykey + +[DatabaseSettings] +db_name=my_database +db_host=localhost +db_port=3306 + +[NetworkSettings] +protocol=http +port=8080 \ No newline at end of file diff --git a/Scripts/targetconfigs/config.xml b/Scripts/targetconfigs/config.xml new file mode 100644 index 0000000..455171b --- /dev/null +++ b/Scripts/targetconfigs/config.xml @@ -0,0 +1,10 @@ + + + John Doe + + + + #jbcrypt:$2a$10$D6wVozrLhk.TIq.jBBKZluIh/EqzpjCUJFT/mWUnyAO4EYmxk5.aK + + + diff --git a/Scripts/targetconfigs/context.xml b/Scripts/targetconfigs/context.xml new file mode 100644 index 0000000..8e887ab --- /dev/null +++ b/Scripts/targetconfigs/context.xml @@ -0,0 +1,12 @@ + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/dbxdrivers.ini b/Scripts/targetconfigs/dbxdrivers.ini new file mode 100644 index 0000000..7429c2a --- /dev/null +++ b/Scripts/targetconfigs/dbxdrivers.ini @@ -0,0 +1,295 @@ +[Installed Drivers] +DB2=1 +Interbase=1 +MySQL=1 +Oracle=1 +Informix=1 +MSSQL=1 +UIB Interbase6=1 +UIB Interbase65=1 +UIB Interbase7=1 +UIB Interbase71=1 +UIB FireBird102=1 +UIB FireBird103=1 +UIB FireBird15=1 +UIB Yaffil=1 + +[DB2] +GetDriverFunc=getSQLDriverDB2 +LibraryName=dbexpdb2.dll +VendorLib=db2cli.dll +Database=DBNAME +User_Name=user +Password=password +BlobSize=-1 +ErrorResourceFile= +LocaleCode=0000 +DB2 TransIsolation=ReadCommited + +[Interbase] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpint.dll +VendorLib=gds32.dll +Database=database.gdb +RoleName=RoleName +User_Name=sysdba +Password=masterkey +ServerCharSet= +SQLDialect=1 +BlobSize=-1 +CommitRetain=False +WaitOnLocks=True +ErrorResourceFile= +LocaleCode=0000 +Interbase TransIsolation=ReadCommited +Trim Char=False + +[MySQL] +GetDriverFunc=getSQLDriverMYSQL +LibraryName=dbexpmysql.dll +VendorLib=libmysql.dll +HostName=localhost +Database=DBNAME +User_Name=root +Password= +BlobSize=-1 +ErrorResourceFile= +LocaleCode=0000 + +[Oracle] +GetDriverFunc=getSQLDriverORACLE +LibraryName=dbexpora.dll +VendorLib=oci.dll +DataBase=Database Name +User_Name=user +Password=password +BlobSize=-1 +ErrorResourceFile= +LocaleCode=0000 +Oracle TransIsolation=ReadCommited +RowsetSize=20 +OS Authentication=False +Multiple Transaction=False +Trim Char=False + +[Informix] +GetDriverFunc=getSQLDriverINFORMIX +LibraryName=dbexpinf.dll +VendorLib=isqlb09a.dll +HostName=ServerName +DataBase=Database Name +User_Name=user +Password=password +BlobSize=-1 +ErrorResourceFile= +LocaleCode=0000 +Informix TransIsolation=ReadCommited +Trim Char=False + +[MSSQL] +GetDriverFunc=getSQLDriverMSSQL +LibraryName=dbexpmss.dll +VendorLib=oledb +HostName=ServerName +DataBase=Database Name +User_Name=user +Password=password +BlobSize=-1 +ErrorResourceFile= +LocaleCode=0000 +MSSQL TransIsolation=ReadCommited +OS Authentication=False + + +[AutoCommit] +False=0 +True=1 + +[BlockingMode] +False=0 +True=1 + +[WaitOnLocks] +False=1 +True=0 + +[CommitRetain] +False=0 +True=1 + +[OS Authentication] +False=0 +True=1 + +[Multiple Transaction] +False=0 +True=1 + +[Trim Char] +False=0 +True=1 + +[DB2 TransIsolation] +DirtyRead=0 +ReadCommited=1 +RepeatableRead=2 + +[Interbase TransIsolation] +ReadCommited=1 +RepeatableRead=2 + +[Oracle TransIsolation] +DirtyRead=0 +ReadCommited=1 +RepeatableRead=2 + +[Informix TransIsolation] +DirtyRead=0 +ReadCommited=1 +RepeatableRead=2 + +[MSSQL TransIsolation] +DirtyRead=0 +ReadCommited=1 +RepeatableRead=2 + +[SQLDialect] +1=0 +2=1 +3=2 + +[UIB Interbase6] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIBint6.dll +VendorLib=GDS32.DLL +BlobSize=-1 +CommitRetain=False +Database=database.ib +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True + +[UIB Interbase65] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIBint65.dll +VendorLib=GDS32.DLL +BlobSize=-1 +CommitRetain=False +Database=database.ib +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True + +[UIB Interbase7] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIBint7.dll +VendorLib=GDS32.DLL +BlobSize=-1 +CommitRetain=False +Database=database.ib +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True + +[UIB Interbase71] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIBint71.dll +VendorLib=GDS32.DLL +BlobSize=-1 +CommitRetain=False +Database=database.ib +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True + +[UIB FireBird102] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIBfire102.dll +VendorLib=GDS32.DLL +BlobSize=-1 +CommitRetain=False +Database=database.fb +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True + +[UIB FireBird103] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIBfire103.dll +VendorLib=GDS32.DLL +BlobSize=-1 +CommitRetain=False +Database=database.fb +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True + +[UIB FireBird15] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIBfire15.dll +VendorLib=fbclient.dll +BlobSize=-1 +CommitRetain=False +Database=database.fb +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True + +[UIB Yaffil] +GetDriverFunc=getSQLDriverINTERBASE +LibraryName=dbexpUIByaffil.dll +VendorLib=GDS32.DLL +BlobSize=-1 +CommitRetain=False +Database=database.gdb +ErrorResourceFile= +LocaleCode=0000 +Password=masterkey +RoleName=RoleName +ServerCharSet= +SQLDialect=3 +Interbase TransIsolation=ReadCommited +User_Name=SYSDBA +WaitOnLocks=True diff --git a/Scripts/targetconfigs/example.dtsx b/Scripts/targetconfigs/example.dtsx new file mode 100644 index 0000000..3f07772 --- /dev/null +++ b/Scripts/targetconfigs/example.dtsx @@ -0,0 +1,102 @@ + + + + + + + + + Data Source=dbserver1;Initial Catalog=Database1;User ID=dbuser1;Password=dbpassword1; + + Primary Database Connection + True + + + + + + + + Data Source=dbserver2;Initial Catalog=Database2;User ID=dbuser2;Password=dbpassword2; + + Secondary Database Connection + True + + + + + + + ftpserver.com + ftpuser + ftppassword + 21 + 60 + True + + + + + + + smtp.mailserver.com + 25 + smtpuser + smtppassword + True + SMTP Server Connection for Emails + + + + + + + + + + + Package.ConnectionManagers[DB1] + SELECT * FROM Table1; + + + + + + + Package.ConnectionManagers[FTPConnection] + /data/ + C:\data\ + Receive + + + + + + + Package.ConnectionManagers[SMTPConnection] + noreply@mailserver.com + user@example.com + SSIS Task Notification + Task has been completed successfully. + + + + + diff --git a/Scripts/targetconfigs/example.rdp b/Scripts/targetconfigs/example.rdp new file mode 100644 index 0000000..3b60510 --- /dev/null +++ b/Scripts/targetconfigs/example.rdp @@ -0,0 +1,8 @@ +screen mode id:i:2 +desktopwidth:i:1920 +desktopheight:i:1080 +session bpp:i:32 +winposstr:s:0,3,0,0,800,600 +full address:s:yourserver.com +username:s:YourUsername +password 51:b:encrypted_password_value diff --git a/Scripts/targetconfigs/jboss-cli.xml b/Scripts/targetconfigs/jboss-cli.xml new file mode 100644 index 0000000..15c4f22 --- /dev/null +++ b/Scripts/targetconfigs/jboss-cli.xml @@ -0,0 +1,34 @@ + + + + 127.0.0.1 + 9990 + + + + + admin + password + + + + + false + + + + + + + + + + + + + + + true + 500 + + diff --git a/Scripts/targetconfigs/krb5.conf b/Scripts/targetconfigs/krb5.conf new file mode 100644 index 0000000..e5eb2e3 --- /dev/null +++ b/Scripts/targetconfigs/krb5.conf @@ -0,0 +1,36 @@ +[libdefaults] + default_realm = EXAMPLE.COM + dns_lookup_realm = false + dns_lookup_kdc = true + rdns = false + ticket_lifetime = 24h + forwardable = yes + +[realms] + EXAMPLE.COM = { + kdc = ad.example.com + admin_server = ad.example.com + default_domain = example.com + } + +[domain_realm] + .example.com = EXAMPLE.COM + example.com = EXAMPLE.COM + +# Insecure: Exposing credentials in krb5.conf for automated ticket retrieval (NOT recommended) +[login] + krb5_get_init_creds_keytab = false + +# Insecure: Plaintext credentials for AD principal +[appdefaults] + kinit = { + principal = admin@EXAMPLE.COM + password = P@ssw0rd123 + } + + pam = { + debug = false + ticket_lifetime = 36000 + renew_lifetime = 36000 + forwardable = true + } diff --git a/Scripts/targetconfigs/machine.config b/Scripts/targetconfigs/machine.config new file mode 100644 index 0000000..a88e973 --- /dev/null +++ b/Scripts/targetconfigs/machine.config @@ -0,0 +1,192 @@ + + + + + +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/Scripts/targetconfigs/my.cnf b/Scripts/targetconfigs/my.cnf new file mode 100644 index 0000000..331d851 --- /dev/null +++ b/Scripts/targetconfigs/my.cnf @@ -0,0 +1,37 @@ + + +[client] +# Client configuration options +user=yourusername +password=yourpassword +port=3306 +socket=/var/run/mysqld/mysqld.sock + +[mysqld] +# MySQL server configuration +user=mysql +pid-file=/var/run/mysqld/mysqld.pid +socket=/var/run/mysqld/mysqld.sock +port=3306 +basedir=/usr +datadir=/var/lib/mysql +tmpdir=/tmp +log-error=/var/log/mysql/error.log +bind-address=127.0.0.1 +max_connections=100 +skip-external-locking + +# Buffer pool size for InnoDB +innodb_buffer_pool_size=256M + +# Other MySQL server settings +max_allowed_packet=16M +query_cache_limit=1M +query_cache_size=16M +log_bin=/var/log/mysql/mysql-bin.log + +[mysql] +# Client-specific settings for the MySQL command-line tool +user=yourusername +password=yourpassword +no-auto-rehash diff --git a/Scripts/targetconfigs/php.ini b/Scripts/targetconfigs/php.ini new file mode 100644 index 0000000..0596f16 --- /dev/null +++ b/Scripts/targetconfigs/php.ini @@ -0,0 +1,26 @@ +[PHP] +; Basic PHP settings + +; Maximum size of POST data allowed +post_max_size = 8M + +; Maximum allowed size for uploaded files +upload_max_filesize = 2M + +; INSECURE: Storing database credentials in php.ini (not recommended) +; This exposes credentials to anyone with access to php.ini or via phpinfo() if not secured. + +mysql.default_user = "dbuser" +mysql.default_password = "P@ssw0rd123" +mysql.default_host = "localhost" +mysql.default_database = "example_db" + +; Log errors to a file +log_errors = On +error_log = /var/log/php_errors.log + +; Ensure that this option is Off to avoid disclosing sensitive configuration details +expose_php = Off + +; Ensure that phpinfo() is secured or disabled to prevent exposure of configuration data +disable_functions = phpinfo diff --git a/Scripts/targetconfigs/pureftpd.passwd b/Scripts/targetconfigs/pureftpd.passwd new file mode 100644 index 0000000..8b18094 --- /dev/null +++ b/Scripts/targetconfigs/pureftpd.passwd @@ -0,0 +1,2 @@ +username:$1$X9p2ER8W$M7P5CxX5CHPxuAiB5BBJq/:1001:1001::/home/ftp/username:/bin/false:: +user2:$1$XYz3ERzW$G9P7CxF6CPxxuAiB6BBJq/:1002:1002::/home/ftp/user2:/bin/false:: diff --git a/Scripts/targetconfigs/putty.reg b/Scripts/targetconfigs/putty.reg new file mode 100644 index 0000000..9179cdd --- /dev/null +++ b/Scripts/targetconfigs/putty.reg @@ -0,0 +1,37 @@ +Windows Registry Editor Version 5.00 + +[HKEY_CURRENT_USER\Software\SimonTatham\PuTTY] +"TermWidth"=dword:00000050 +"TermHeight"=dword:00000018 +"WinTitle"="PuTTY" + +[HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\Default%20Settings] +"HostName"="" +"PortNumber"=dword:00000016 +"Protocol"="ssh" +"TerminalType"="xterm" +"Font"="Courier New" +"FontHeight"=dword:0000000a +"WinHeight"=dword:00000018 +"WinWidth"=dword:00000050 +"ConnectionSharing"=dword:00000001 + +[HKEY_CURRENT_USER\Software\SimonTatham\PuTTY\Sessions\My%20SSH%20Session] +"HostName"="192.168.1.100" +"PortNumber"=dword:00000016 +"Protocol"="ssh" +"TerminalType"="xterm" +"Font"="Courier New" +"FontHeight"=dword:0000000a +"WinHeight"=dword:00000018 +"WinWidth"=dword:00000050 +"Compression"=dword:00000001 +"ConnectionSharing"=dword:00000001 +"PublicKeyFile"="C:\\Users\\YourUsername\\.ssh\\id_rsa.ppk" +"LogFileName"="C:\\putty_logs\\my_session.log" +"LogType"=dword:00000001 +"LogFileClash"=dword:00000001 +"LogFlush"=dword:00000001 +"LogOmitPasswords"=dword:00000001 +"LogOmitData"=dword:00000000 +"UserName"="myusername" ; Username stored here diff --git a/Scripts/targetconfigs/server.xml b/Scripts/targetconfigs/server.xml new file mode 100644 index 0000000..d6a7fc2 --- /dev/null +++ b/Scripts/targetconfigs/server.xml @@ -0,0 +1,111 @@ + + + + + + componenttest-1.0 + restConnector-2.0 + jdbc-4.2 + mpOpenApi-1.0 + + + + + + + + + + + + + adminuser + + + reader + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + SET CURRENT SCHEMA = APP + SET CURRENT SQLID = APP + + + + + + + + + + + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/setting.ini b/Scripts/targetconfigs/setting.ini new file mode 100644 index 0000000..731040a --- /dev/null +++ b/Scripts/targetconfigs/setting.ini @@ -0,0 +1,18 @@ +[GeneralSettings] +app_name = MyApp +version = 1.0.0 +theme = dark + +[DatabaseSettings] +host = localhost +port = 3306 +username = dbuser +password = dbpass + +[CustomSettings] +user = myuser +pass = mypass + +[Logging] +log_level = DEBUG +log_file = /var/log/myapp.log diff --git a/Scripts/targetconfigs/shadow b/Scripts/targetconfigs/shadow new file mode 100644 index 0000000..52055a4 --- /dev/null +++ b/Scripts/targetconfigs/shadow @@ -0,0 +1,4 @@ +root:$6$examplehash$E5iNRLtC5/j/kCkRhYlOro.Y9PzE0Gv8jlsfLZUNwlEm7HMBZSO9.mUvefOrKT6BjKSO4obQ.EtCZKhQgmgwV0:19000:0:99999:7::: +user1:$6$examplehash$OwhxlyS5hoxfFE4tmtyOR8Hw1k8PLqokP9FYxYP8QMG3wO0u.0Xvd4g/0Udr6BQZilJk4k7XwlxJ6p0RJ2IL5/:19000:0:99999:7::: +nobody:*:19000:0:99999:7::: +daemon:*:19000:0:99999:7::: diff --git a/Scripts/targetconfigs/smb.conf b/Scripts/targetconfigs/smb.conf new file mode 100644 index 0000000..8dceecd --- /dev/null +++ b/Scripts/targetconfigs/smb.conf @@ -0,0 +1,48 @@ +[global] + # General server settings + workgroup = EXAMPLE + realm = EXAMPLE.COM + server string = Samba Server Version %v + security = ads + encrypt passwords = yes + kerberos method = secrets and keytab + log file = /var/log/samba/log.%m + max log size = 50 + + # Domain and authentication settings + idmap config * : backend = tdb + idmap config EXAMPLE : backend = rid + idmap config EXAMPLE : range = 10000-20000 + template shell = /bin/bash + winbind use default domain = yes + winbind offline logon = yes + winbind enum users = yes + winbind enum groups = yes + + # INSECURE: Credentials for binding to Active Directory (avoid plaintext credentials) + # This exposes the AD admin account and password directly in the smb.conf file + username = ad-admin + password = P@ssw0rd123 + + # Kerberos keytab file location (more secure than plaintext credentials) + dedicated keytab file = /etc/krb5.keytab + kerberos method = secrets and keytab + +[homes] + comment = Home Directories + browseable = no + writable = yes + +[printers] + comment = All Printers + path = /var/spool/samba + printable = yes + guest ok = no + writable = no + browseable = no + +[shared] + path = /srv/samba/shared + browseable = yes + read only = no + valid users = @staff diff --git a/Scripts/targetconfigs/sssd.conf b/Scripts/targetconfigs/sssd.conf new file mode 100644 index 0000000..9130037 --- /dev/null +++ b/Scripts/targetconfigs/sssd.conf @@ -0,0 +1,59 @@ +[sssd] +config_file_version = 2 +services = nss, pam, ssh, sudo +domains = example.com + +[nss] +filter_groups = root +filter_users = root + +[pam] +offline_credentials_expiration = 2 +offline_failed_login_attempts = 3 +offline_failed_login_delay = 5 + +[domain/example.com] +# Basic configuration for connecting to Active Directory +id_provider = ad +auth_provider = ad +access_provider = ad + +# Enable Kerberos for authentication +krb5_realm = EXAMPLE.COM +krb5_server = ad.example.com +krb5_kpasswd = ad.example.com + +# Active Directory server information +ad_domain = example.com +ad_server = ad.example.com +ad_hostname = linuxclient.example.com + +# INSECURE PRACTICE: Hardcoding AD username and password in sssd.conf +# These values will expose the username and password in plaintext +ldap_default_bind_dn = cn=admin,cn=users,dc=example,dc=com +ldap_default_authtok = P@ssw0rd123 + +# Using the above configuration exposes credentials to anyone who can read this file + +# User and group filtering (optional) +ldap_id_mapping = true + +# Performance optimizations +cache_credentials = true +enumerate = false +use_fully_qualified_names = false + +# Access Control (Optional: limit login to users in AD group 'LinuxAdmins') +access_provider = simple +simple_allow_groups = LinuxAdmins + +# Security settings +min_id = 1000 +fallback_homedir = /home/%u + +# Timeout and retry settings for better AD stability +ldap_search_timeout = 10 +ldap_connection_expire_timeout = 60 + +# Debugging options (uncomment for troubleshooting) +# debug_level = 9 diff --git a/Scripts/targetconfigs/standalone.xml b/Scripts/targetconfigs/standalone.xml new file mode 100644 index 0000000..131d69f --- /dev/null +++ b/Scripts/targetconfigs/standalone.xml @@ -0,0 +1,54 @@ + + + + + + + + + + + + jdbc:mysql://localhost:3306/mydatabase + mysql + + ${VAULT::vault::mydbuser} + ${VAULT::vault::mydbpassword} + + + 5 + 20 + + + + true + true + + + 5000 + + + false + + + + + + com.mysql.jdbc.jdbc2.optional.MysqlXADataSource + + + + + + + + + + + + + + + + + diff --git a/Scripts/targetconfigs/sysprep.inf b/Scripts/targetconfigs/sysprep.inf new file mode 100644 index 0000000..64453e9 --- /dev/null +++ b/Scripts/targetconfigs/sysprep.inf @@ -0,0 +1,34 @@ +[Unattended] +OemSkipEula=Yes +InstallFilesPath=C:\sysprep\i386 + +[GuiUnattended] +AdminPassword=YourAdminPassword +EncryptedAdminPassword=NO +OEMSkipRegional=1 +TimeZone=004 +OemSkipWelcome=1 + +[UserData] +ProductKey=XXXXX-XXXXX-XXXXX-XXXXX-XXXXX +FullName="Your Name" +OrgName="Your Organization" +ComputerName=* + +[Display] +BitsPerPel=32 +Xresolution=1024 +YResolution=768 +Vrefresh=60 + +[SetupMgr] +DistFolder=C:\sysprep\i386 +DistShare=windist + +[Identification] +JoinDomain=YourDomain +DomainAdmin=YourDomainAdmin +DomainAdminPassword=YourDomainAdminPassword + +[Networking] +InstallDefaultComponents=Yes diff --git a/Scripts/targetconfigs/tnsnames.ora b/Scripts/targetconfigs/tnsnames.ora new file mode 100644 index 0000000..644cd02 --- /dev/null +++ b/Scripts/targetconfigs/tnsnames.ora @@ -0,0 +1,21 @@ +MYDB = + (DESCRIPTION = + (ADDRESS = (PROTOCOL = TCP)(HOST = mydbserver.example.com)(PORT = 1521)) + (CONNECT_DATA = + (SERVICE_NAME = mydbservice) + ) + ) + (USER = myusername) + (PASSWORD = mypassword) + +MYDB_ALIAS = + (DESCRIPTION = + (ADDRESS_LIST = + (ADDRESS = (PROTOCOL = TCP)(HOST = mydbserver.example.com)(PORT = 1521)) + ) + (CONNECT_DATA = + (SERVICE_NAME = mydbservice) + ) + ) + (USER = anotheruser) + (PASSWORD = anotherpassword) diff --git a/Scripts/targetconfigs/tomcat-users.xml b/Scripts/targetconfigs/tomcat-users.xml new file mode 100644 index 0000000..ed2bb94 --- /dev/null +++ b/Scripts/targetconfigs/tomcat-users.xml @@ -0,0 +1,36 @@ + + + + + + + + + + + + + \ No newline at end of file diff --git a/Scripts/targetconfigs/unattend-base64.xml b/Scripts/targetconfigs/unattend-base64.xml new file mode 100644 index 0000000..4a85479 --- /dev/null +++ b/Scripts/targetconfigs/unattend-base64.xml @@ -0,0 +1,49 @@ + + + + + * + acme corp. + acme corp. + + false + + + LocalAdmin + true + 10 + + UEBzc3dvcmQxMjMh + false</PlainText> + </Password> + </AutoLogon> + </component> + </settings> + + <settings pass="oobeSystem"> + <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"> + <UserAccounts> + <LocalAccounts> + <LocalAccount wcm:action="add"> + <Password> + <Value>UEBzc3dvcmQxMjMh</Value> <!-- This is Base64 for 'P@ssword123!' --> + <PlainText>false</PlainText> + </Password> + <Group>Administrators</Group> + <Description>Provisioning Admin</Description> + <DisplayName>LocalAdmin</DisplayName> + <Name>LocalAdmin</Name> + </LocalAccount> + </LocalAccounts> + </UserAccounts> + <OOBE> + <HideEULAPage>true</HideEULAPage> + <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen> + <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE> + <HideOnlineAccountScreens>true</HideOnlineAccountScreens> + <HideLocalAccountScreen>true</HideLocalAccountScreen> + <ProtectYourPC>1</ProtectYourPC> + </OOBE> + </component> + </settings> +</unattend> diff --git a/Scripts/targetconfigs/unattend-cleartext.xml b/Scripts/targetconfigs/unattend-cleartext.xml new file mode 100644 index 0000000..aecf09c --- /dev/null +++ b/Scripts/targetconfigs/unattend-cleartext.xml @@ -0,0 +1,107 @@ +<?xml version="1.0" encoding="utf-8"?> +<!--Version 2.3--> +<unattend xmlns="urn:schemas-microsoft-com:unattend"> + <settings pass="windowsPE"> + <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> + <SetupUILanguage> + <UILanguage>en-US</UILanguage> + </SetupUILanguage> + <InputLocale>en-US</InputLocale> + <SystemLocale>en-US</SystemLocale> + <UILanguage>en-US</UILanguage> + <UserLocale>en-US</UserLocale> + </component> + </settings> + <settings pass="specialize"> + <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> + <ComputerName>*</ComputerName> + <RegisteredOrganization>Cool Company, LLC.</RegisteredOrganization> + <RegisteredOwner>Cool Company, LLC.</RegisteredOwner> + <WindowsFeatures> + <ShowInternetExplorer>false</ShowInternetExplorer> + </WindowsFeatures> + <AutoLogon> + <Username>LocalAdmin</Username> + <Enabled>true</Enabled> + <LogonCount>10</LogonCount> + <Password> + <Value>P@ssword</Value> + </Password> + </AutoLogon> + </component> + <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> + <RunSynchronous> + <RunSynchronousCommand wcm:action="add"> + <Description>UnfilterAdminToken</Description> + <Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v FilterAdministratorToken /t REG_DWORD /d 0 /f</Path> + <Order>1</Order> + </RunSynchronousCommand> + <RunSynchronousCommand wcm:action="add"> + <Description>Disable consumer features</Description> + <Path>reg add HKLM\Software\Policies\Microsoft\Windows\CloudContent /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f</Path> + <Order>2</Order> + </RunSynchronousCommand> + <RunSynchronousCommand wcm:action="add"> + <Description>DISABLE_UAC_EnableLUA</Description> + <Path>cmd /c reg ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f</Path> + <Order>3</Order> + </RunSynchronousCommand> + <RunSynchronousCommand wcm:action="add"> + <Path>Dism /online /enable-feature /featurename:NetFX3 /All /Source:C:\Temp\sxs /LimitAccess</Path> + <Order>4</Order> + <Description>DISM .net</Description> + </RunSynchronousCommand> + </RunSynchronous> + </component> + </settings> + <settings pass="oobeSystem"> + <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> + <InputLocale>en-US</InputLocale> + <SystemLocale>en-US</SystemLocale> + <UILanguage>en-US</UILanguage> + <UserLocale>en-US</UserLocale> + <UILanguageFallback>en-US</UILanguageFallback> + </component> +<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> + <OOBE> + <HideEULAPage>true</HideEULAPage> + <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen> + <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE> + <HideOnlineAccountScreens>true</HideOnlineAccountScreens> + <HideLocalAccountScreen>true</HideLocalAccountScreen> + <ProtectYourPC>1</ProtectYourPC> + </OOBE> + <UserAccounts> + <LocalAccounts> + <LocalAccount wcm:action="add"> + <Password> + <Value>P@ssword</Value> + <PlainText>true</PlainText> + </Password> + <Group>Administrators</Group> + <Description>Provisioning Admin</Description> + <DisplayName>LocalAdmin</DisplayName> + <Name>LocalAdmin</Name> + </LocalAccount> + </LocalAccounts> + </UserAccounts> + <DesktopOptimization> + <ShowWindowsStoreAppsOnTaskbar>false</ShowWindowsStoreAppsOnTaskbar> + <GoToDesktopOnSignIn>false</GoToDesktopOnSignIn> + </DesktopOptimization> + <FirstLogonCommands> + <SynchronousCommand wcm:action="add"> + <CommandLine>cmd /c net start BESClient</CommandLine> + <Description>Start BigFix Service</Description> + <Order>1</Order> + </SynchronousCommand> + <SynchronousCommand wcm:action="add"> + <CommandLine>cmd /c del C:\Windows\System32\Sysprep\unattend.xml</CommandLine> + <Description>Delete Unattend</Description> + <Order>2</Order> + </SynchronousCommand> + </FirstLogonCommands> +</component> + </settings> + <cpi:offlineImage cpi:source="wim:c:/provisioning/w102k/sources/install.wim#Windows 10 Enterprise" xmlns:cpi="urn:schemas-microsoft-com:cpi" /> +</unattend> \ No newline at end of file diff --git a/Scripts/targetconfigs/vnc.ini b/Scripts/targetconfigs/vnc.ini new file mode 100644 index 0000000..8c3f53c --- /dev/null +++ b/Scripts/targetconfigs/vnc.ini @@ -0,0 +1,41 @@ +[Server] +# The port on which the VNC server listens for connections (default: 5900) +Port=5900 + +# Defines the IP address to bind the VNC server to. Leave blank to bind to all interfaces. +BindTo=0.0.0.0 + +# Enable or disable authentication. If 1, authentication is enabled. +Authentication=1 + +# VNC password (encoded or plain text depending on the software) +Password=01d47b4186dfa5a3 + +# Encryption (optional). Enable or disable encryption for VNC connections. +Encryption=1 + +# Set the idle timeout for client connections (in seconds) +IdleTimeout=600 + +# Maximum number of clients that can connect at once +MaxClients=5 + +[Security] +# Use SSL encryption for communication between VNC clients and server +UseSSL=0 + +# If SSL is enabled, provide the path to the SSL certificate file. +SSLCertificateFile=C:\path\to\ssl\certificate.pem + +# Enable or disable TLS encryption +UseTLS=1 + +[Logging] +# Enable or disable logging. If 1, logging is enabled. +EnableLogging=1 + +# Log file location +LogFile=C:\path\to\log\vncserver.log + +# Log level (INFO, DEBUG, ERROR, etc.) +LogLevel=INFO \ No newline at end of file diff --git a/Scripts/targetconfigs/web.config b/Scripts/targetconfigs/web.config new file mode 100644 index 0000000..852e0dc --- /dev/null +++ b/Scripts/targetconfigs/web.config @@ -0,0 +1,147 @@ +<?xml version="1.0" encoding="utf-8"?> +<configuration> + <!-- Config Sections for Custom Service Credentials --> + <configSections> + <section name="serviceCredentials" type="System.Configuration.NameValueSectionHandler" /> + <sectionGroup name="system.net"> + <section name="settings" type="System.Net.Configuration.SettingsSection, System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" /> + </sectionGroup> + </configSections> + + <!-- Application Settings for web application --> + <appSettings> + <add key="ApplicationUsername" value="myAppUser" /> + <add key="ApplicationPassword" value="myAppPassword" /> + <add key="OAuthServiceUrl" value="https://oauth.example.com/token" /> + <add key="ClientId" value="myClientId" /> + <add key="ClientSecret" value="myClientSecret" /> + <add key="ServiceUrl" value="https://service.example.com/api" /> + <add key="ServiceUserName" value="serviceUser" /> + <add key="ServicePassword" value="servicePassword" /> + <add key="ApiEndpoint" value="https://api.example.com/endpoint" /> + <add key="ApiUserName" value="apiUser" /> + <add key="ApiPassword" value="apiPassword" /> + </appSettings> + + <!-- Custom service credentials --> + <serviceCredentials> + <add key="ServiceUrl" value="https://customservice.example.com" /> + <add key="UserName" value="customUser" /> + <add key="Password" value="customPassword" /> + </serviceCredentials> + + <!-- Connection strings for various databases --> + <connectionStrings> + <add name="SqlServerConnection" + connectionString="Data Source=localhost;Initial Catalog=myDB;User ID=myUser;Password=myPass;" + providerName="System.Data.SqlClient" /> + <add name="SqlServerIntegratedSecurity" + connectionString="Data Source=localhost;Initial Catalog=myDB;Integrated Security=True;" + providerName="System.Data.SqlClient" /> + <add name="MySqlConnection" + connectionString="Server=localhost;Database=myDB;User=myUser;Password=myPass;" + providerName="MySql.Data.MySqlClient" /> + <add name="PostgreSqlConnection" + connectionString="Host=localhost;Port=5432;Database=myDB;Username=myUser;Password=myPass;" + providerName="Npgsql" /> + <add name="OracleConnection" + connectionString="Data Source=MyOracleDB;User Id=oracleUser;Password=oraclePass;" + providerName="Oracle.ManagedDataAccess.Client" /> + </connectionStrings> + + <!-- Web-specific settings for forms authentication, session state, and errors --> + <system.web> + <!-- Compilation settings --> + <compilation debug="true" targetFramework="4.0" /> + + <!-- Authentication settings for web applications --> + <authentication mode="Forms"> + <forms loginUrl="login.aspx" timeout="30"> + <credentials passwordFormat="Clear"> + <user name="user1" password="password1" /> + <user name="user2" password="password2" /> + </credentials> + </forms> + </authentication> + + <!-- Authorization settings to allow or deny user access --> + <authorization> + <allow users="*" /> <!-- Allow all users --> + <deny users="?" /> <!-- Deny anonymous users --> + </authorization> + + <!-- Custom error pages --> + <customErrors mode="RemoteOnly"> + <error statusCode="404" redirect="404.aspx" /> + <error statusCode="500" redirect="500.aspx" /> + </customErrors> + + <!-- Session State settings (optional) --> + <sessionState mode="InProc" timeout="20" /> + </system.web> + + <!-- SMTP settings for email (relevant for web applications) --> + <system.net> + <mailSettings> + <smtp from="you@example.com"> + <network host="smtp.example.com" port="587" + userName="smtpUser" + password="smtpPassword" + defaultCredentials="false" /> + </smtp> + </mailSettings> + </system.net> + + <!-- WCF (Windows Communication Foundation) Service configuration for web applications --> + <system.serviceModel> + <bindings> + <basicHttpBinding> + <binding name="MyBinding"> + <security mode="Transport"> + <transport clientCredentialType="Basic" /> + </security> + </binding> + </basicHttpBinding> + </bindings> + <client> + <endpoint address="https://example.com/service" + binding="basicHttpBinding" + bindingConfiguration="MyBinding" + contract="IMyService" /> + </client> + <behaviors> + <endpointBehaviors> + <behavior> + <clientCredentials> + <userName userName="serviceUser" password="servicePassword" /> + </clientCredentials> + </behavior> + </endpointBehaviors> + </behaviors> + </system.serviceModel> + + <!-- IIS-specific settings for URL rewriting and other web server configurations --> + <system.webServer> + <!-- Enable URL rewriting (optional) --> + <rewrite> + <rules> + <rule name="RedirectToHTTPS"> + <match url="(.*)" /> + <conditions> + <add input="{HTTPS}" pattern="^OFF$" /> + </conditions> + <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" redirectType="Permanent" /> + </rule> + </rules> + </rewrite> + + <!-- Enable static content compression (optional) --> + <staticContent> + <clientCache cacheControlMode="UseMaxAge" cacheControlMaxAge="7.00:00:00" /> + </staticContent> + + <!-- HTTP modules and handlers (optional) --> + <modules runAllManagedModulesForAllRequests="true" /> + </system.webServer> + +</configuration> diff --git a/Scripts/targetconfigs/wp-config.php b/Scripts/targetconfigs/wp-config.php new file mode 100644 index 0000000..d5d8630 --- /dev/null +++ b/Scripts/targetconfigs/wp-config.php @@ -0,0 +1,66 @@ +<?php +// ** MySQL settings - You can get this info from your web host ** // +/** The name of the database for WordPress */ +define( 'DB_NAME', 'your_database_name' ); + +/** MySQL database username */ +define( 'DB_USER', 'your_database_username' ); + +/** MySQL database password */ +define( 'DB_PASSWORD', 'your_secure_password_here' ); + +/** MySQL hostname */ +define( 'DB_HOST', 'localhost' ); + +/** Database Charset to use in creating database tables. */ +define( 'DB_CHARSET', 'utf8' ); + +/** The Database Collate type. Don't change this if in doubt. */ +define( 'DB_COLLATE', '' ); + +/**#@+ + * Authentication Unique Keys and Salts. + * + * Change these to different unique phrases! + * You can generate these using the WordPress.org secret-key service + * https://api.wordpress.org/secret-key/1.1/salt/ + * You can change these at any point in time to invalidate all existing cookies. + * This will force all users to have to log in again. + */ +define('AUTH_KEY', 'put_your_unique_phrase_here'); +define('SECURE_AUTH_KEY', 'put_your_unique_phrase_here'); +define('LOGGED_IN_KEY', 'put_your_unique_phrase_here'); +define('NONCE_KEY', 'put_your_unique_phrase_here'); +define('AUTH_SALT', 'put_your_unique_phrase_here'); +define('SECURE_AUTH_SALT', 'put_your_unique_phrase_here'); +define('LOGGED_IN_SALT', 'put_your_unique_phrase_here'); +define('NONCE_SALT', 'put_your_unique_phrase_here'); + +/**#@-*/ + +/** + * WordPress Database Table prefix. + * + * You can have multiple installations in one database if you give each a unique + * prefix. Only numbers, letters, and underscores please! + */ +$table_prefix = 'wp_'; + +/** + * For developers: WordPress debugging mode. + * + * Change this to true to enable the display of notices during development. + * It is strongly recommended that plugin and theme developers use WP_DEBUG + * in their development environments. + */ +define( 'WP_DEBUG', false ); + +/* That's all, stop editing! Happy publishing. */ + +/** Absolute path to the WordPress directory. */ +if ( ! defined( 'ABSPATH' ) ) { + define( 'ABSPATH', __DIR__ . '/' ); +} + +/** Sets up WordPress vars and included files. */ +require_once ABSPATH . 'wp-settings.php';