From 9f4f17dd742e3789949ba93a661bce61b5894b61 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ra=C3=BAl=20Calvo=20Laorden?= <25440046+r4ulcl@users.noreply.github.com> Date: Fri, 20 Dec 2024 15:52:54 +0100 Subject: [PATCH] Add HTML buttons on flags and update README with Collaborators and CWP --- APs/config/html/index.php | 264 ++++++++++++++++++++------------------ APs/config/html/login.php | 93 ++++++++------ README.md | 8 +- 3 files changed, 198 insertions(+), 167 deletions(-) diff --git a/APs/config/html/index.php b/APs/config/html/index.php index cbec465..706d1dc 100644 --- a/APs/config/html/index.php +++ b/APs/config/html/index.php @@ -1,7 +1,4 @@ - -
"; - echo "

"; + + +
+ +
"; + echo "

"; - if ($_SESSION["Username"] == "GLOBAL\GlobalAdmin") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.8.') !== false) { //only TLS - echo "flag{948e68a05011d8733b6e80300538c6abcdc20ebd}"; - } else { - echo "Your Princess Is in Another Castle!"; + if ($_SESSION["Username"] == "GLOBAL\GlobalAdmin") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.8.') !== false) { //only TLS + echo "Flag: "; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - - if ($_SESSION["Username"] == "CONTOSO\Administrator") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT 1 - echo "flag{04e474a4826cf10ba9f60da7ce07105ea2716aac}"; - } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 - echo "flag{04e474a4826cf10ba9f60da7ce07105ea2716aac}"; - } else { - echo "Your Princess Is in Another Castle!"; + + if ($_SESSION["Username"] == "CONTOSO\Administrator") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT 1 + echo "Flag: "; + } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 + echo "Flag: "; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - if ($_SESSION["Username"] == "admin") { + if ($_SESSION["Username"] == "admin") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT Relay - echo "Hello"; - } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.1.') !== false) { //only wep - echo "flag{c342fe657870020a1b164f2075f447564fdd1c3d}"; - } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.3.') !== false) { //only WPS - echo "flag{850e63f13f6c5e9a423670671a08b912c78fadc9}"; - } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.16.') !== false) { //only WPS - echo "flag{680efaa62f7e953c24667285173711bc6bb6d3ff}"; - } else { - echo "No FLAG, try logging in with another user ;)"; + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT Relay + echo "Hello"; + } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.1.') !== false) { //only wep + echo "Flag: "; + } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.3.') !== false) { //only WPS + echo "Flag: "; + } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.16.') !== false) { //only WPS + echo "Flag: "; + } else { + echo "No FLAG, try logging in with another user ;)"; + } } - } - - #ALL: and strpos($_SERVER['REMOTE_ADDR'], '192.168.X.') !== false to only use users in each network - if ($_SESSION["Username"] == "CONTOSO\juan.tr") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT - echo "flag{3407a6e0ad77965731da8357c4270ecce8b642e4}"; - echo "

"; - } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 - echo "flag{3407a6e0ad77965731da8357c4270ecce8b642e4}"; - echo "

"; - } else { - echo "Your Princess Is in Another Castle!"; + #ALL: and strpos($_SERVER['REMOTE_ADDR'], '192.168.X.') !== false to only use users in each network + + if ($_SESSION["Username"] == "CONTOSO\juan.tr") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT + echo "Flag: "; + echo "

"; + } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 + echo "Flag: "; + echo "

"; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - if ($_SESSION["Username"] == 'CONTOSO\test') { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT 1 - echo "flag{14ddfbfcc90f80bd40287537d19b0aefdb5a0058}"; - echo "

"; - } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 - echo "flag{14ddfbfcc90f80bd40287537d19b0aefdb5a0058}"; - echo "

"; - } else { - echo "Your Princess Is in Another Castle!"; + if ($_SESSION["Username"] == 'CONTOSO\test') { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT 1 + echo "Flag: "; + echo "

"; + } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 + echo "Flag: "; + echo "

"; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - if ($_SESSION["Username"] == 'CONTOSO\ftp') { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT - echo "flag{004b3aef9bbbf24cdd55a4e13e384a40dc996848}"; - echo "

"; - } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 - echo "flag{004b3aef9bbbf24cdd55a4e13e384a40dc996848}"; - echo "

"; - } else { - echo "Your Princess Is in Another Castle!"; + if ($_SESSION["Username"] == 'CONTOSO\ftp') { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.5.') !== false) { //only MGT + echo "Flag: "; + echo "

"; + } elseif (strpos($_SERVER['REMOTE_ADDR'], '192.168.6.') !== false) { //only MGT 2 + echo "Flag: "; + echo "

"; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - if ($_SESSION["Username"] == "test1") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.2.') !== false) { //only PSK - echo "flag{2d5931f342c034a7e9d69f97fe23d13121898bc8}"; - } else { - echo "Your Princess Is in Another Castle!"; + if ($_SESSION["Username"] == "test1") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.2.') !== false) { //only PSK + echo "Flag: "; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - if ($_SESSION["Username"] == "test2") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.2.') !== false) { //only PSK - echo "flag{2d5931f342c034a7e9d69f97fe23d13121898bc8}"; - } else { - echo "Your Princess Is in Another Castle!"; + if ($_SESSION["Username"] == "test2") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.2.') !== false) { //only PSK + echo "Flag: "; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - if ($_SESSION["Username"] == "free1") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.10.') !== false) { //only OPN - echo "flag{561004e3f4fd9fe640ecc0c411ac3129a4e08629}"; - } else { - echo "Your Princess Is in Another Castle!"; + if ($_SESSION["Username"] == "free1") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.10.') !== false) { //only OPN + echo "Flag: "; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - if ($_SESSION["Username"] == "free2") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.10.') !== false) { //only OPN - echo "flag{561004e3f4fd9fe640ecc0c411ac3129a4e08629}"; - } else { - echo "Your Princess Is in Another Castle!"; + if ($_SESSION["Username"] == "free2") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.10.') !== false) { //only OPN + echo "Flag: "; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - - if ($_SESSION["Username"] == "anon1") { - # NO AP LOGIN - echo "flag{2f0ca3e56d79b7ece0b881e4f501a238bd23705d}"; - } - - if ($_SESSION["Username"] == "administrator") { - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.1.') !== false) { //only WEP - echo "flag{c342fe657870020a1b164f2075f447564fdd1c3d}"; - } else { - echo "Your Princess Is in Another Castle!"; + + if ($_SESSION["Username"] == "anon1") { + # NO AP LOGIN + echo "Flag: "; } - } - #relay user - if ($_SESSION["Username"] == "CONTOSOREG\luis.da") { # RELAY - echo "flag{3ddc7691df2591decd6ae75b30c4b917cedf6bd2}"; - echo "

"; - echo "

"; - } + if ($_SESSION["Username"] == "administrator") { + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.1.') !== false) { //only WEP + echo "Flag: "; + } else { + echo "Your Princess Is in Another Castle!"; + } + } - if ($_SESSION["Username"] == "CORPO\god") { # RELAY creds stolen in responder in regional network - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.7.') !== false) { //only WEP - echo "flag{04b15d196d8a89d1fd32e75dafcdcfd43e1b4588}"; + #relay user + if ($_SESSION["Username"] == "CONTOSOREG\luis.da") { # RELAY + echo "Flag: "; echo "

"; echo "

"; - echo "

"; - echo "AP CONFIG:"; - echo "

"; - echo " + } + + if ($_SESSION["Username"] == "CORPO\god") { # RELAY creds stolen in responder in regional network + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.7.') !== false) { //only WEP + echo "Flag: "; + echo "

"; + echo "

"; + echo "

"; + echo "AP CONFIG:"; + echo "

"; + echo " eap_user_file=/root/mgt/hostapd_wpe.eap_user
ca_cert=/root/certs/ca.crt
server_cert=/root/certs/server.crt
@@ -165,22 +178,21 @@
# 802.11 Options
ssid=wifi-corp
- channel=6
"; - echo "Certificate Authority: http://", $_SERVER['SERVER_ADDR'], "/.internalCA/ "; - } else { - echo "Your Princess Is in Another Castle!"; + channel=44
"; + echo "Certificate Authority: http://", $_SERVER['SERVER_ADDR'], "/.internalCA/ "; + } else { + echo "Your Princess Is in Another Castle!"; + } } - } - - echo "

"; - echo "

"; - ?> + echo "

"; + ?> - Congratulation! You have logged into password protected page. Click here to Logout. + Congratulation! You have logged into password protected page. Click here to Logout. +
\ No newline at end of file diff --git a/APs/config/html/login.php b/APs/config/html/login.php index f4195fc..1654b8e 100644 --- a/APs/config/html/login.php +++ b/APs/config/html/login.php @@ -4,8 +4,8 @@ // Check if the user is already logged in if (isset($_SESSION['Username'])) { - header("Location: index.php"); - exit; + header("Location: index.php"); + exit; } /* Check Login form submitted */ @@ -61,53 +61,66 @@ -
- + function copyFlagToClipboard(flag) { + if (navigator.clipboard) { + navigator.clipboard.writeText(flag).then(() => { + alert('Flag copied to clipboard!'); + }, (err) => { + console.error('Could not copy text: ', err); + }); + } else { + alert(flag); + } + } + - header("location:index.php"); - exit; - } +
+ flag{3ddc7691df2591decd6ae75b30c4b917cedf6bd2}"; + } - # Check IP from CONTOSOREG Tablets Relay - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.18.') !== false) { - echo "flag{de9d7be205df3a9422b7fe054995aac57c41bdbb}"; - } + # Check IP from CONTOSOREG Tablets Relay + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.18.') !== false) { + echo "Flag: "; + } - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.1.') !== false) { #only WEP - echo "flag{c342fe657870020a1b164f2075f447564fdd1c3d}"; - } + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.1.') !== false) { #only WEP + echo "Flag: "; + } - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.14.') !== false) { #only SAE management - echo "flag{a192e7909455cb1ffd1d2355e70e2ef0f4ccc811}"; - } + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.14.') !== false) { #only SAE management + echo "Flag: "; + } - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.15.') !== false) { #only SAE IT - echo "flag{f4629b4c22636fa0ae72eb5d1cf9caf88b4ecbee}"; - } + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.15.') !== false) { #only SAE IT + echo "Flag: "; + } - if (strpos($_SERVER['REMOTE_ADDR'], '192.168.8.') !== false) { //only MGT TLS - echo "Hello Global Admin:"; - echo "

"; - echo "Your pass is: SuperSuperSecure@!@"; - } + if (strpos($_SERVER['REMOTE_ADDR'], '192.168.8.') !== false) { //only MGT TLS + echo "Hello Global Admin:"; + echo "

"; + echo "Your pass is: SuperSuperSecure@!@"; + } - ?> + ?> - Open Router Login"; } diff --git a/README.md b/README.md index 8993d69..9b1eb8b 100755 --- a/README.md +++ b/README.md @@ -161,13 +161,19 @@ To recreate the Docker files with the changes made, modify the docker-compose.ym ## Support this project +### Certified WiFiChallenge Professional (CWP) + +[``](https://academy.wifichallenge.com/courses/certified-wifichallenge-professional-cwp) + ### Buymeacoffee [``](https://www.buymeacoffee.com/r4ulcl) ## Collaborators -Oscar Alfonso (OscarAkaElvis / v1s1t0r, [airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) author) - Collaboration in testing and script improvement +- Raúl Sampedro (@rsrdesarrollo) - Update the Nzyme Docker configuration to support ARM architecture + +- Oscar Alfonso (OscarAkaElvis / v1s1t0r, [airgeddon](https://github.com/v1s1t0r1sh3r3/airgeddon) author) - Collaboration in testing and script improvement ## License