scenario.xml

<systems>
	<!-- an example remote storage system, with a remotely exploitable vulnerability that can then be escalated to root -->
	<system id="storageserver" os="linux" basebox="debian-puppet-64" url="" >
		<vulnerabilities>
			<vulnerability privilege="" access="" type="misc" cve=""></vulnerability>
		</vulnerabilities>
		<!-- secure services will be provided, if matching insecure ones have not been selected -->
		<services>

		</services>-->
		<networks>
			<network name="homeonly"></network>
		</networks>
	</system>

	<!-- an example remote web server, with a remotely exploitable root vulnerability -->
	<!-- This never worked.-->
	<!--<system id="webserver" os="linux" basebox="puppettest" url="" >
		<vulnerabilities>
			<vulnerability privilege="root" access="remote" type="www" cve=""></vulnerability>
		</vulnerabilities>
		<networks>
			<misc name="homeonly"></misc>
		</networks>
	</system> -->

</systems>