Skip to content

Commit 60f1c03

Browse files
hardy4yoozhardy4yooz
authored
Merge pull request #9 from teamssix/main
docs: transfer to HuoCorp organization, update readme and code
2 parents 2405b57 + 4fd2775 commit 60f1c03

File tree

5 files changed

+45
-45
lines changed

5 files changed

+45
-45
lines changed

‎CONTRIBUTING.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ git commit -m "your-commit-message"
3232
# Push your new feature branch
3333
git push my_feature_branch
3434

35-
# Create a new pull request to https://github.com/HXSecurity/TerraformGoat.git
35+
# Create a new pull request to https://github.com/HuoCorp/TerraformGoat.git
3636
```
3737

3838
### Update your pull request with latest changes

‎Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
FROM ubuntu:20.04
2-
LABEL maintainer="HuoXian Research Team <https://github.com/HXSecurity>"
2+
LABEL maintainer="HuoXian Research Team <https://github.com/HuoCorp>"
33

44
RUN apt-get update -y && \
55
apt-get install -qy gnupg2 && \

‎README.md‎

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -11,33 +11,33 @@ Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei C
1111

1212
| ID | Cloud Service Company | Types Of Cloud Services | Vulnerable Environment |
1313
| :--: | :--------------------: | :-----------------------: | :----------------------------------------------------------: |
14-
| 1 | Tencent Cloud | Object Storage | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
15-
| 2 | Tencent Cloud | Object Storage | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
16-
| 3 | Alibaba Cloud | Object Storage | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
17-
| 4 | Alibaba Cloud | Object Storage | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
18-
| 5 | Alibaba Cloud | Object Storage | [Special Bucket Policy](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
19-
| 6 | Alibaba Cloud | Object Storage | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
20-
| 7 | Huawei Cloud | Object Storage | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
21-
| 8 | Huawei Cloud | Object Storage | [Special Bucket Policy](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
22-
| 9 | Huawei Cloud | Object Storage | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
23-
| 10 | Huawei Cloud | Object Storage | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
24-
| 11 | Amazon Web Services | Object Storage | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
25-
| 12 | Amazon Web Services | Object Storage | [Special Bucket Policy](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
26-
| 13 | Amazon Web Services | Object Storage | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
27-
| 14 | Amazon Web Services | Object Storage | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
28-
| 15 | Amazon Web Services | Elastic Computing Service | [EC2 SSRF](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
29-
| 16 | Google Cloud Platform | Object Storage | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
30-
| 17 | Google Cloud Platform | Object Storage | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
31-
| 18 | Google Cloud Platform | Object Storage | [Bucket ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
32-
| 19 | Google Cloud Platform | Object Storage | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
33-
| 20 | Microsoft Azure | Object Storage | [Blob Public Access](https://github.com/HXSecurity/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
14+
| 1 | Tencent Cloud | Object Storage | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
15+
| 2 | Tencent Cloud | Object Storage | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
16+
| 3 | Alibaba Cloud | Object Storage | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
17+
| 4 | Alibaba Cloud | Object Storage | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
18+
| 5 | Alibaba Cloud | Object Storage | [Special Bucket Policy](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
19+
| 6 | Alibaba Cloud | Object Storage | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
20+
| 7 | Huawei Cloud | Object Storage | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
21+
| 8 | Huawei Cloud | Object Storage | [Special Bucket Policy](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
22+
| 9 | Huawei Cloud | Object Storage | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
23+
| 10 | Huawei Cloud | Object Storage | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
24+
| 11 | Amazon Web Services | Object Storage | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
25+
| 12 | Amazon Web Services | Object Storage | [Special Bucket Policy](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
26+
| 13 | Amazon Web Services | Object Storage | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
27+
| 14 | Amazon Web Services | Object Storage | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
28+
| 15 | Amazon Web Services | Elastic Computing Service | [EC2 SSRF](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
29+
| 16 | Google Cloud Platform | Object Storage | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
30+
| 17 | Google Cloud Platform | Object Storage | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
31+
| 18 | Google Cloud Platform | Object Storage | [Bucket ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
32+
| 19 | Google Cloud Platform | Object Storage | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
33+
| 20 | Microsoft Azure | Object Storage | [Blob Public Access](https://github.com/HuoCorp/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
3434

3535
## Install
3636

3737
Terraform Goat is built using Dockerfile, so you need to install the Docker environment first. For the Docker installation method, please refer to: [https://docs.docker.com/get-docker/](https://docs.docker.com/get-docker/)
3838

3939
```shell
40-
git clone https://github.com/HXSecurity/TerraformGoat.git
40+
git clone https://github.com/HuoCorp/TerraformGoat.git
4141
cd terraformgoat
4242
docker build -t terraformgoat:v0.1 .
4343
```

‎README_CN.md‎

Lines changed: 21 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -10,33 +10,33 @@ Cloud Platform、Microsoft Azure 六个云厂商的云场景漏洞搭建。
1010

1111
| 序号 | 云厂商 | 云服务类型 | 漏洞环境 |
1212
| :--: | :--------------------: | :----------: | :----------------------------------------------------------: |
13-
| 1 | 腾讯云 | 对象存储 | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
14-
| 2 | 腾讯云 | 对象存储 | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
15-
| 3 | 阿里云 | 对象存储 | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
16-
| 4 | 阿里云 | 对象存储 | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
17-
| 5 | 阿里云 | 对象存储 | [特殊的 Bucket 策略](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
18-
| 6 | 阿里云 | 对象存储 | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
19-
| 7 | 华为云 | 对象存储 | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
20-
| 8 | 华为云 | 对象存储 | [特殊的 Bucket 策略](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
21-
| 9 | 华为云 | 对象存储 | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
22-
| 10 | 华为云 | 对象存储 | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
23-
| 11 | Amazon Web Services | 对象存储 | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
24-
| 12 | Amazon Web Services | 对象存储 | [特殊的 Bucket 策略](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
25-
| 13 | Amazon Web Services | 对象存储 | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
26-
| 14 | Amazon Web Services | 对象存储 | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
27-
| 15 | Amazon Web Services | 弹性计算服务 | [EC2 SSRF 漏洞环境](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
28-
| 16 | Google Cloud Platform | 对象存储 | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
29-
| 17 | Google Cloud Platform | 对象存储 | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
30-
| 18 | Google Cloud Platform | 对象存储 | [Bucket ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
31-
| 19 | Google Cloud Platform | 对象存储 | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
32-
| 20 | Microsoft Azure | 对象存储 | [Blob 公开访问](https://github.com/HXSecurity/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
13+
| 1 | 腾讯云 | 对象存储 | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
14+
| 2 | 腾讯云 | 对象存储 | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
15+
| 3 | 阿里云 | 对象存储 | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
16+
| 4 | 阿里云 | 对象存储 | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
17+
| 5 | 阿里云 | 对象存储 | [特殊的 Bucket 策略](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
18+
| 6 | 阿里云 | 对象存储 | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
19+
| 7 | 华为云 | 对象存储 | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
20+
| 8 | 华为云 | 对象存储 | [特殊的 Bucket 策略](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
21+
| 9 | 华为云 | 对象存储 | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
22+
| 10 | 华为云 | 对象存储 | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
23+
| 11 | Amazon Web Services | 对象存储 | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
24+
| 12 | Amazon Web Services | 对象存储 | [特殊的 Bucket 策略](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
25+
| 13 | Amazon Web Services | 对象存储 | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
26+
| 14 | Amazon Web Services | 对象存储 | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
27+
| 15 | Amazon Web Services | 弹性计算服务 | [EC2 SSRF 漏洞环境](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
28+
| 16 | Google Cloud Platform | 对象存储 | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
29+
| 17 | Google Cloud Platform | 对象存储 | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
30+
| 18 | Google Cloud Platform | 对象存储 | [Bucket ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
31+
| 19 | Google Cloud Platform | 对象存储 | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
32+
| 20 | Microsoft Azure | 对象存储 | [Blob 公开访问](https://github.com/HuoCorp/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
3333

3434
## 安装
3535

3636
Terraform Goat 使用 Dockerfile 构建，因此需要先安装 Docker 环境，Docker 安装方法可以参考：[https://docs.docker.com/get-docker/](https://docs.docker.com/get-docker/)
3737

3838
```shell
39-
git clone https://github.com/HXSecurity/TerraformGoat.git
39+
git clone https://github.com/HuoCorp/TerraformGoat.git
4040
cd terraformgoat
4141
docker build -t terraformgoat:v0.1 .
4242
```

‎aws/elastic_computing_service/ec2_ssrf/main.tf‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ sudo sed -i 's/Listen 80/Listen 8080/' /etc/apache2/ports.conf
2020
sudo /etc/init.d/apache2 restart
2121
cd /var/www/html
2222
sudo apt-get -y install wget
23-
sudo wget https://raw.githubusercontent.com/HXSecurity/TerraformGoat/main/aws/elastic_computing_service/ec2_ssrf/ssrf-lab.zip
23+
sudo wget https://raw.githubusercontent.com/HuoCorp/TerraformGoat/main/aws/elastic_computing_service/ec2_ssrf/ssrf-lab.zip
2424
sudo apt-get -y install unzip
2525
sudo unzip ssrf-lab.zip
2626
sudo mv ./ssrf-lab/static/flag69152201.txt /

0 commit comments

Comments
 (0)