trinitor/DetectionLab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Commiting changes

Browse Source
This commit is contained in:
Jared Haight
2018-02-22 19:20:42 -08:00
parent e815ceb47a
commit aec9cc233f
2 changed files with 201 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Boxes/.gitignore vendored
View File

@@ -1,2 +0,0 @@
*
!.gitignore

220
build.ps1
View File

@@ -19,6 +19,7 @@
./build.ps1 -ProviderName vmware_workstation -PackerPath 'C:\packer.exe'
#>
[cmdletbinding()]
Param(
# Vagrant provider to use.
[ValidateSet('virtualbox', 'vmware_workstation')]
@@ -27,6 +28,33 @@ Param(
)
$DL_DIR = Split-Path -Parent -Path $MyInvocation.MyCommand.Definition
$LAB_HOSTS = ('logger', 'dc', 'wef', 'win10')
# Set Provider variable for use deployment functions
if ($ProviderName -eq 'vmware_workstation') {
$Provider = 'vmware'
}
else {
$Provider = 'virtualbox'
}
function install_checker {
param(
[string]$Name
)
$results = Get-ItemProperty 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*' | Select-Object DisplayName
$results += Get-ItemProperty 'HKLM:\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\*' | Select-Object DisplayName
forEach ($result in $results) {
if ($result -like "*$Name*") {
return $true
}
}
return $false
}
function check_packer_and_vagrant {
# Check if vagrant is in path
try {
@@ -42,12 +70,12 @@ function check_packer_and_vagrant {
[System.Version]$version_comparison = 2.0.0
if ($vagrant_version -lt $version_comparison) {
Write-Warning 'WARNING: It is highly recommended to use Vagrant 2.0.0 or above before continuing'
Write-Warning 'It is highly recommended to use Vagrant 2.0.0 or above before continuing'
}
#Check for packer at $PackerPath
if (!(Get-Item $PackerPath)) {
Write-Output "Packer not found at $PackerPath"
Write-Error "Packer not found at $PackerPath"
Write-Output 'Re-run the script setting the PackerPath parameter to the location of packer'
Write-Output "Example: build.ps1 -PackerPath 'C:\packer.exe'"
Write-Output 'Exiting..'
@@ -57,24 +85,31 @@ function check_packer_and_vagrant {
# Returns 0 if not installed or 1 if installed
function check_virtualbox_installed {
if (Get-WmiObject Win32_Product -Filter "Name LIKE '%VirtualBox%'") {
Write-Verbose '[check_virtualbox_installed] Running..'
if (install_checker -Name "VirtualBox") {
Write-Verbose '[check_virtualbox_installed] Virtualbox found.'
return $true
}
else {
Write-Verbose '[check_virtualbox_installed] Virtualbox not found.'
return $false
}
}
function check_vmware_workstation_installed {
if (Get-WmiObject Win32_Product -Filter "Name = 'VMWare Workstation'") {
Write-Verbose '[check_vmware_workstation_installed] Running..'
if (install_checker -Name "VMWare Workstation") {
Write-Verbose '[check_vmware_workstation_installed] Vmware found.'
return $true
}
else {
Write-Verbose '[check_vmware_workstation_installed] Vmware not found.'
return $false
}
}
#TODO: Verify that the plugin is called 'vagrant-vmware-workstation'
function check_vmware_vagrant_plugin_installed {
Write-Verbose '[check_vmware_vagrant_plugin_installed] Running..'
if (!(vagrant plugin list | Select-String 'vagrant-vmware-workstation')) {
Write-Output 'VMWare Workstation is installed, but the Vagrant plugin is not.'
Write-Output 'Visit https://www.vagrantup.com/vmware/index.html#buy-now for more information on how to purchase and install it'
@@ -82,6 +117,7 @@ function check_vmware_vagrant_plugin_installed {
return $false
}
else {
Write-Verbose '[check_vmware_vagrant_plugin_installed] VMware vagrant plugin found.'
return $true
}
}
@@ -95,38 +131,43 @@ function list_providers {
Write-Output '[*] vmware_workstation'
}
if ((-Not (check_virtualbox_installed)) -and (-Not (check_vmware_workstation_installed))) {
Write-Output 'You need to install a provider such as VirtualBox or VMware Workstation to continue.'
Write-Error 'You need to install a provider such as VirtualBox or VMware Workstation to continue.'
break
}
$ProviderName = Read-Host 'Which provider would you like to use?'
if ($ProviderName -ne 'virtualbox' -or $ProviderName -ne 'vmware_workstation') {
Write-Output "Please choose a valid provider. $ProviderName is not a valid option"
Write-Error "Please choose a valid provider. $ProviderName is not a valid option"
break
}
return $ProviderName
}
function preflight_checks {
$DL_DIR = $MyInvocation.MyCommand.Path
Write-Verbose '[preflight_checks] Running..'
# Check to see that no boxes exist
Write-Verbose '[preflight_checks] Checking for pre-existing boxes..'
if ((Get-ChildItem "$DL_DIR\Boxes\*.box").Count -gt 0) {
Write-Output 'You appear to have already built at least one box using Packer. This script does not support pre-built boxes. Please either delete the existing boxes or follow the build steps in the README to continue.'
Write-Error 'You appear to have already built at least one box using Packer. This script does not support pre-built boxes. Please either delete the existing boxes or follow the build steps in the README to continue.'
break
}
# Check to see that no vagrant instances exist
Write-Verbose '[preflight_checks] Checking for vagrant instances..'
$CurrentDir = Get-Location
Set-Location "$DL_DIR\Vagrant"
if (($(vagrant status) | Select-String 'not created').Count -ne 4) {
Write-Output 'You appear to have already created at least one Vagrant instance. This script does not support already created instances. Please either destroy the existing instances or follow the build steps in the README to continue.'
Write-Error 'You appear to have already created at least one Vagrant instance. This script does not support already created instances. Please either destroy the existing instances or follow the build steps in the README to continue.'
break
}
Set-Location $CurrentDir
# Check available disk space. Recommend 80GB free, warn if less
$Drives = Get-PSDrive | Where-Object {$_.Provider -like '*FileSystem*'}
$DrivesList = @()
Write-Verbose '[preflight_checks] Checking disk space..'
$drives = Get-PSDrive | Where-Object {$_.Provider -like '*FileSystem*'}
$drivesList = @()
forEach ($drive in $drives) {
if ($drive.free -lt 80000000) {
if ($drive.free -lt 80GB) {
$DrivesList = $DrivesList + $drive
}
}
@@ -140,29 +181,170 @@ function preflight_checks {
}
# Check Packer Version against known bad
Write-Verbose '[preflight_checks] Checking for bad packer version..'
[System.Version]$PackerVersion = $(& $PackerPath "--version")
[System.Version]$PackerKnownBad = 1.1.2
if ($PackerVersion -eq $PackerKnownBad) {
Write-Output 'Packer 1.1.2 is not supported. Please upgrade to a newer version and see https://github.com/hashicorp/packer/issues/5622 for more information.'
Write-Error 'Packer 1.1.2 is not supported. Please upgrade to a newer version and see https://github.com/hashicorp/packer/issues/5622 for more information.'
break
}
# Ensure the vagrant-reload plugin is installed
if (-Not (if (!(vagrant plugin list | Select-String 'vagrant-reload')))) {
Write-Verbose '[preflight_checks] Checking if vagrant-reload is installed..'
if (-Not (vagrant plugin list | Select-String 'vagrant-reload')) {
Write-Output 'The vagrant-reload plugin is required and not currently installed. This script will attempt to install it now.'
(vagrant plugin install 'vagrant-reload')
if ($LASTEXITCODE -ne 0) {
Write-Output 'Unable to install the vagrant-reload plugin. Please try to do so manually and re-run this script.'
Write-Error 'Unable to install the vagrant-reload plugin. Please try to do so manually and re-run this script.'
break
}
}
Write-Verbose '[preflight_checks] Finished.'
}
function packer_build_box {
param(
[string]$Box
)
Write-Verbose "[packer_build_box] Running for $Box"
$CurrentDir = Get-Location
Set-Location "$DL_DIR\Packer"
Write-Output "Using Packer to build the $BOX Box. This can take 90-180 minutes depending on bandwidth and hardware."
&$PackerPath @('build', "--only=$Provider-iso", "$box.json")
Write-Verbose "[packer_build_box] Finished for $Box. Got exit code: $LASTEXITCODE"
if ($LASTEXITCODE -ne 0) {
Write-Error "Something went wrong while attempting to build the $BOX box."
Write-Output "To file an issue, please visit https://github.com/clong/DetectionLab/issues/"
break
}
Set-Location $CurrentDir
}
function move_boxes {
Write-Verbose "[move_boxes] Running.."
Move-Item -Path $DL_DIR\Packer\*.box -Destination $DL_DIR\Boxes
if (-Not (Test-Path "$DL_DIR\Boxes\windows_10_$Provider.box")) {
Write-Error "Windows 10 box is missing from the Boxes directory. Qutting."
break
}
if (-Not (Test-Path "$DL_DIR\Boxes\windows_2016_$Provider.box")) {
Write-Error "Windows 2016 box is missing from the Boxes directory. Qutting."
break
}
Write-Verbose "[move_boxes] Finished."
}
function vagrant_up_host {
param(
[string]$VagrantHost
)
Write-Verbose "[vagrant_up_host] Running for $VagrantHost"
Write-Host "Attempting to bring up the $VagrantHost host using Vagrant"
$CurrentDir = Get-Location
Set-Location "$DL_DIR\Vagrant"
&vagrant.exe @('up', $VagrantHost, '--provider', "$Provider")
Set-Location $CurrentDir
Write-Verbose "[vagrant_up_host] Finished for $VagrantHost. Got exit code: $LASTEXITCODE"
return $LASTEXITCODE
}
function vagrant_reload_host {
param(
[string]$VagrantHost
)
Write-Verbose "[vagrant_reload_host] Running for $VagrantHost"
$CurrentDir = Get-Location
Set-Location "$DL_DIR\Vagrant"
&vagrant.exe @('reload', $VagrantHost, '--provision') | Out-Null
Set-Location $CurrentDir
Write-Verbose "[vagrant_reload_host] Finished for $VagrantHost. Got exit code: $LASTEXITCODE"
return $LASTEXITCODE
}
function download {
param(
[string]$URL,
[string]$PatternToMatch
)
Write-Verbose "[download] Running for $URL, looking for $PatternToMatch"
[Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls"
$wc = New-Object System.Net.WebClient
$result = $wc.DownloadString($URL)
if ($result -like "*$PatternToMatch*") {
Write-Verbose "[download] Found $PatternToMatch at $URL"
return $true
}
else {
Write-Verbose "[download] Could not find $PatternToMatch at $URL"
return $false
}
}
function post_build_checks {
Write-Verbose '[post_build_checks] Running Caldera Check.'
$CALDERA_CHECK = download -URL 'https://192.168.38.5:8888' -PatternToMatch '<title>CALDERA</title>'
Write-Verbose "[post_build_checks] Cladera Result: $CALDERA_CHECK"
Write-Verbose '[post_build_checks] Running Splunk Check.'
$SPLUNK_CHECK = download -URL 'https://192.168.38.5:8000/en-US/account/login?return_to=%2Fen-US%2F' -PatternToMatch 'This browser is not supported by Splunk'
Write-Verbose "[post_build_checks] Splunk Result: $SPLUNK_CHECK"
Write-Verbose '[post_build_checks] Running Fleet Check.'
$FLEET_CHECK = download -URL 'https://192.168.38.5:8412' -PatternToMatch 'Kolide Fleet'
Write-Verbose "[post_build_checks] Fleet Result: $FLEET_CHECK"
if ($CALDERA_CHECK -eq $false) {
Write-Warning 'Caldera failed post-build tests and may not be functioning correctly.'
}
if ($SPLUNK_CHECK -eq $false) {
Write-Warning 'Splunk failed post-build tests and may not be functioning correctly.'
}
if ($FLEET_CHECK -eq $false) {
Write-Warning 'Fleet failed post-build tests and may not be functioning correctly.'
}
}
$DL_DIR = $MyInvocation.MyCommand.Path
$LAB_HOSTS = ('logger', 'dc', 'wef', 'win10')
# If no ProviderName was provided, get a provider
if ($ProviderName -eq $Null) {
$ProviderName = list_providers
}
}
# Run check functions
preflight_checks
# Build Packer Boxes
packer_build_box -Box 'windows_2016'
packer_build_box -Box 'windows_10'
# Move Packer Boxes
move_boxes
# Vagrant up each box and attempt to reload one time if it fails
forEach ($VAGRANT_HOST in $LAB_HOSTS) {
Write-Verbose "[main] Running vagrant_up_host for: $VAGRANT_HOST"
$result = vagrant_up_host -VagrantHost $VAGRANT_HOST
if ($result -eq 0) {
Write-Output "Good news! $VAGRANT_HOST was built successfully!"
}
else {
Write-Warning "Something went wrong while attempting to build the $VAGRANT_HOST box."
Write-Output "Attempting to reload and reprovision the host..."
Write-Verbose "[main] Running vagrant_reload_host for: $VAGRANT_HOST"
$retryResult = vagrant_reload_host -VagrantHost $VAGRANT_HOST
if ($retryResult -ne 0) {
Write-Error "Failed to bring up $VAGRANT_HOST after a reload. Exiting"
break
}
}
Write-Verbose "[main] Finished for: $VAGRANT_HOST"
}
Write-Verbose "[main] Running post_build_checks"
post_build_checks
Write-Verbose "[main] Finished post_build_checks"