SOCBED v1.3.12

Fixes:

• Pin Selenium version
• Allow unauthenticated keys for NodeJS

SOCBED v1.3.11

Fixes:

• Update Kali signing key (see https://www.kali.org/blog/new-kali-archive-signing-key/)
• Update setuptools due to critical vulnerability (see https://huntr.com/bounties/d6362117-ad57-4e83-951f-b8141c6e7ca5)

SOCBED v1.3.10

Fixes:

• Unpin all package versions installed on the Attacker during the provisioning step.

Note: While we generally aim to pin OS and package versions in SOCBED for better reproducibility, we dismiss this practice for packages on the Attacker since Kali is a rolling release distribution and removes older packages from their default repo after a while, leading to failing SOCBED builds. If reproducibility is of higher importance to you than being able to access up-to-date Kali packages, you might replace its default repo with a point release repo (see https://old.kali.org/).

SOCBED v1.3.9

Fixes:

• Fix missing firewall rule to allow auditbeat logs to reach the log server through the company router

SOCBED v1.3.8

Fixes:

• Change download source for python3-aiosmtpd to Kali archive for longer availability

SOCBED v1.3.7

Fixes:

• Fix DNS configuration on the Internet Router, which occasionally caused internet outages for the entire network
• Fix DNS configuration and expired certificates on the Attacker
• Fix missing requirements on the Attacker preventing the external mail handler from running
• Replace deprecated ssl.wrap_socket() calls in the vmconsole with their modern counterparts
• Assign a unique VRDP port to each client clone upon session creation to enable access via VRDP

SOCBED v1.3.6

Fixes:

• Fix filename of file created by screenshot attack not being displayed correctly in the attackconsole

SOCBED v1.3.5

Fixes:

• Fix incomplete setup of environment in GitHub workflow
• Fix bug in sqlmap_attack test, which could fail due to incorrect terminal size on monitors >27"

Misc:

• Change minimum Python version to 3.9 and support up to 3.12 at least
• Update several package versions
• Replace deprecated package smtpd with aiosmptd

SOCBED v1.3.4

Fixes:

• Update binutils to prevent version conflicts on Attacker VM

SOCBED v1.3.3

Fixes:

• Update deprecating versions for GitHub actions retry and checkout