claudiol / cyber-patriots Goto Github PK

Adding firewall and some type of Anti-Virus will need to be added. Firewall is already there but perhaps adding an Anti-Virus should be added. Something like ClamAV.

Will need to download and install ClamAV.

The kids have to find the files and then type the fully qualified directory.

On most Linux systems, you can use PAM (the "pluggable authentication module") to enforce password complexity. We need to have a scenario were the kids can add password complexity using a scenario.

If you have a file named /etc/pam.d/system-auth on RedHat (/etc/pam.d/common-password on Debian systems), look for lines that look like those shown below.

This is an RFE.

We have to come up with a package that has a specific vulnerability and they would have to find the CVE for it.

Need to check

• Standard User vs Admin
• Blank Passwords
• Easy to guess passwords
• Etc

We need to add more to this.

Need to set up tripwire config file to look for issues.

In the competition, wireshark and/or tcpdump needs to be uninstalled. This might be something that needs to be added to the image.

• Example: MySQL password
• Need more info here

Create a group blah and add users: mario, luigi, wario and waluigi

Jeff would like to get the scap workbench for Ubuntu