Merge pull request #9 from teamssix/main

docs: transfer to HuoCorp organization, update readme and code
HXSecurity · May 6, 2022 · 60f1c03 · 60f1c03
2 parents 2405b57 + 4fd2775
commit 60f1c03
Show file tree

Hide file tree

Showing 5 changed files with 45 additions and 45 deletions.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -32,7 +32,7 @@ git commit -m "your-commit-message"
 # Push your new feature branch
 git push my_feature_branch
 
-# Create a new pull request to https://github.com/HXSecurity/TerraformGoat.git
+# Create a new pull request to https://github.com/HuoCorp/TerraformGoat.git
 ```
 
 ### Update your pull request with latest changes

diff --git a/Dockerfile b/Dockerfile
@@ -1,5 +1,5 @@
 FROM ubuntu:20.04
-LABEL maintainer="HuoXian Research Team <https://github.com/HXSecurity>"
+LABEL maintainer="HuoXian Research Team <https://github.com/HuoCorp>"
 
 RUN apt-get update -y && \
     apt-get install -qy gnupg2 && \  

diff --git a/README.md b/README.md
@@ -11,33 +11,33 @@ Currently supported cloud vendors include Alibaba Cloud, Tencent Cloud, Huawei C
 
 |  ID  | Cloud Service Company  |  Types Of Cloud Services  |                    Vulnerable Environment                    |
 | :--: | :--------------------: | :-----------------------: | :----------------------------------------------------------: |
-|  1   |     Tencent Cloud      |      Object Storage       | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
-|  2   |     Tencent Cloud      |      Object Storage       | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
-|  3   |     Alibaba Cloud      |      Object Storage       | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
-|  4   |     Alibaba Cloud      |      Object Storage       | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
-|  5   |     Alibaba Cloud      |      Object Storage       | [Special Bucket Policy](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
-|  6   |     Alibaba Cloud      |      Object Storage       | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
-|  7   |      Huawei Cloud      |      Object Storage       | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
-|  8   |      Huawei Cloud      |      Object Storage       | [Special Bucket Policy](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
-|  9   |      Huawei Cloud      |      Object Storage       | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
-|  10  |      Huawei Cloud      |      Object Storage       | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
-|  11  |  Amazon  Web Services  |      Object Storage       | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
-|  12  |  Amazon  Web Services  |      Object Storage       | [Special Bucket Policy](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
-|  13  |  Amazon  Web Services  |      Object Storage       | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
-|  14  |  Amazon  Web Services  |      Object Storage       | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
-|  15  |  Amazon  Web Services  | Elastic Computing Service | [EC2 SSRF](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
-|  16  | Google  Cloud Platform |      Object Storage       | [Bucket Object Traversal](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
-|  17  | Google  Cloud Platform |      Object Storage       | [Object ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
-|  18  | Google  Cloud Platform |      Object Storage       | [Bucket ACL Writable](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
-|  19  | Google  Cloud Platform |      Object Storage       | [Unrestricted File Upload](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
-|  20  |    Microsoft  Azure    |      Object Storage       | [Blob  Public Access](https://github.com/HXSecurity/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
+|  1   |     Tencent Cloud      |      Object Storage       | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
+|  2   |     Tencent Cloud      |      Object Storage       | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
+|  3   |     Alibaba Cloud      |      Object Storage       | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
+|  4   |     Alibaba Cloud      |      Object Storage       | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
+|  5   |     Alibaba Cloud      |      Object Storage       | [Special Bucket Policy](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
+|  6   |     Alibaba Cloud      |      Object Storage       | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
+|  7   |      Huawei Cloud      |      Object Storage       | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
+|  8   |      Huawei Cloud      |      Object Storage       | [Special Bucket Policy](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
+|  9   |      Huawei Cloud      |      Object Storage       | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
+|  10  |      Huawei Cloud      |      Object Storage       | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
+|  11  |  Amazon  Web Services  |      Object Storage       | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
+|  12  |  Amazon  Web Services  |      Object Storage       | [Special Bucket Policy](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
+|  13  |  Amazon  Web Services  |      Object Storage       | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
+|  14  |  Amazon  Web Services  |      Object Storage       | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
+|  15  |  Amazon  Web Services  | Elastic Computing Service | [EC2 SSRF](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
+|  16  | Google  Cloud Platform |      Object Storage       | [Bucket Object Traversal](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
+|  17  | Google  Cloud Platform |      Object Storage       | [Object ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
+|  18  | Google  Cloud Platform |      Object Storage       | [Bucket ACL Writable](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
+|  19  | Google  Cloud Platform |      Object Storage       | [Unrestricted File Upload](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
+|  20  |    Microsoft  Azure    |      Object Storage       | [Blob  Public Access](https://github.com/HuoCorp/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
 
 ## Install
 
 Terraform Goat is built using Dockerfile, so you need to install the Docker environment first. For the Docker installation method, please refer to: [https://docs.docker.com/get-docker/](https://docs.docker.com/get-docker/)
 
 ```shell
-git clone https://github.com/HXSecurity/TerraformGoat.git
+git clone https://github.com/HuoCorp/TerraformGoat.git
 cd terraformgoat
 docker build -t terraformgoat:v0.1 .
 ```

diff --git a/README_CN.md b/README_CN.md
@@ -10,33 +10,33 @@ Cloud Platform、Microsoft Azure 六个云厂商的云场景漏洞搭建。
 
 | 序号 |         云厂商         |  云服务类型  |                           漏洞环境                           |
 | :--: | :--------------------: | :----------: | :----------------------------------------------------------: |
-|  1   |         腾讯云         |   对象存储   | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
-|  2   |         腾讯云         |   对象存储   | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
-|  3   |         阿里云         |   对象存储   | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
-|  4   |         阿里云         |   对象存储   | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
-|  5   |         阿里云         |   对象存储   | [特殊的 Bucket 策略](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
-|  6   |         阿里云         |   对象存储   | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
-|  7   |         华为云         |   对象存储   | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
-|  8   |         华为云         |   对象存储   | [特殊的 Bucket 策略](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
-|  9   |         华为云         |   对象存储   | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
-|  10  |         华为云         |   对象存储   | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
-|  11  |  Amazon  Web Services  |   对象存储   | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
-|  12  |  Amazon  Web Services  |   对象存储   | [特殊的 Bucket 策略](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
-|  13  |  Amazon  Web Services  |   对象存储   | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
-|  14  |  Amazon  Web Services  |   对象存储   | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
-|  15  |  Amazon  Web Services  | 弹性计算服务 | [EC2 SSRF 漏洞环境](https://github.com/HXSecurity/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
-|  16  | Google  Cloud Platform |   对象存储   | [Bucket 对象遍历](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
-|  17  | Google  Cloud Platform |   对象存储   | [Object ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
-|  18  | Google  Cloud Platform |   对象存储   | [Bucket ACL 可写](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
-|  19  | Google  Cloud Platform |   对象存储   | [任意文件上传](https://github.com/HXSecurity/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
-|  20  |    Microsoft  Azure    |   对象存储   | [Blob 公开访问](https://github.com/HXSecurity/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
+|  1   |         腾讯云         |   对象存储   | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/bucket_object_traversal) |
+|  2   |         腾讯云         |   对象存储   | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/tencentcloud/object_storage_service/unrestricted_file_upload) |
+|  3   |         阿里云         |   对象存储   | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/bucket_object_traversal) |
+|  4   |         阿里云         |   对象存储   | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/object_acl_writable) |
+|  5   |         阿里云         |   对象存储   | [特殊的 Bucket 策略](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/special_bucket_policy) |
+|  6   |         阿里云         |   对象存储   | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/aliyun/object_storage_service/unrestricted_file_upload) |
+|  7   |         华为云         |   对象存储   | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/object_acl_writable) |
+|  8   |         华为云         |   对象存储   | [特殊的 Bucket 策略](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/special_bucket_policy) |
+|  9   |         华为云         |   对象存储   | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/unrestricted_file_upload) |
+|  10  |         华为云         |   对象存储   | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/huaweicloud/object_storage_service/bucket_object_traversal) |
+|  11  |  Amazon  Web Services  |   对象存储   | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/bucket_object_traversal) |
+|  12  |  Amazon  Web Services  |   对象存储   | [特殊的 Bucket 策略](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/special_bucket_policy) |
+|  13  |  Amazon  Web Services  |   对象存储   | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/unrestricted_file_upload) |
+|  14  |  Amazon  Web Services  |   对象存储   | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/object_storage_service/object_acl_writable) |
+|  15  |  Amazon  Web Services  | 弹性计算服务 | [EC2 SSRF 漏洞环境](https://github.com/HuoCorp/TerraformGoat/tree/main/aws/elastic_computing_service/ec2_ssrf) |
+|  16  | Google  Cloud Platform |   对象存储   | [Bucket 对象遍历](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_object_traversal) |
+|  17  | Google  Cloud Platform |   对象存储   | [Object ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/object_acl_writable) |
+|  18  | Google  Cloud Platform |   对象存储   | [Bucket ACL 可写](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/bucket_acl_writable) |
+|  19  | Google  Cloud Platform |   对象存储   | [任意文件上传](https://github.com/HuoCorp/TerraformGoat/tree/main/gcp/object_storage_service/unrestricted_file_upload) |
+|  20  |    Microsoft  Azure    |   对象存储   | [Blob 公开访问](https://github.com/HuoCorp/TerraformGoat/tree/main/azure/object_storage_service/blob_public_access/) |
 
 ## 安装
 
 Terraform Goat 使用 Dockerfile 构建，因此需要先安装 Docker 环境，Docker 安装方法可以参考：[https://docs.docker.com/get-docker/](https://docs.docker.com/get-docker/)
 
 ```shell
-git clone https://github.com/HXSecurity/TerraformGoat.git
+git clone https://github.com/HuoCorp/TerraformGoat.git
 cd terraformgoat
 docker build -t terraformgoat:v0.1 .
 ```

diff --git a/aws/elastic_computing_service/ec2_ssrf/main.tf b/aws/elastic_computing_service/ec2_ssrf/main.tf
@@ -20,7 +20,7 @@ sudo sed -i 's/Listen 80/Listen 8080/' /etc/apache2/ports.conf
 sudo /etc/init.d/apache2 restart
 cd /var/www/html
 sudo apt-get -y install wget
-sudo wget https://raw.githubusercontent.com/HXSecurity/TerraformGoat/main/aws/elastic_computing_service/ec2_ssrf/ssrf-lab.zip
+sudo wget https://raw.githubusercontent.com/HuoCorp/TerraformGoat/main/aws/elastic_computing_service/ec2_ssrf/ssrf-lab.zip
 sudo apt-get -y install unzip
 sudo unzip ssrf-lab.zip
 sudo mv ./ssrf-lab/static/flag69152201.txt /