Skip to content

Instantly share code, notes, and snippets.

@D4stiny

D4stiny/cyberpatriot-2016-ubuntu.xml Secret

Created March 3, 2019 03:55
Show Gist options
  • Star 2 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save D4stiny/4ef8fe2ea744b9f149ac34c144bd6a3d to your computer and use it in GitHub Desktop.
Save D4stiny/4ef8fe2ea744b9f149ac34c144bd6a3d to your computer and use it in GitHub Desktop.
Download ZIP
Raw
cyberpatriot-2016-ubuntu.xml
<?xml version="1.0" encoding="utf-8"?>
<CyberPatriotResource>
<ResourceID>Ubuntu14_state_p_hs</ResourceID>
<Tier/>
<Branding>CyberPatriot</Branding>
<Title>CP-IX HS State Platinum Ubuntu 14</Title>
<TeamKey>CyberPatriot9</TeamKey>
<ScoringUrl>http://54.243.182.228/ccs/upload</ScoringUrl>
<ScoreboardUrl>http://54.243.195.23</ScoreboardUrl>
<HideScoreboard>false</HideScoreboard>
<ReadmeUrl>http://www.uscyberpatriot.org/Pages/Readme/readme_hs_platinum_ndfd629mqd.aspx</ReadmeUrl>
<SupportUrl>https://fedgov.webex.com/fedgov/onstage/g.php?PRID=5632977f96b90348071a216c69912878</SupportUrl>
<TimeServers>
<Primary>http://54.243.195.23/message.php</Primary>
<Secondary>http://time.is/UTC</Secondary>
<Secondary>http://nist.time.gov/</Secondary>
<Secondary>http://www.zulutime.net/</Secondary>
<Secondary>http://time1.ucla.edu/home.php</Secondary>
<Secondary>http://viv.ebay.com/ws/eBayISAPI.dll?EbayTime</Secondary>
<Secondary>http://worldtime.io/current/utc_netherlands/8554</Secondary>
<Secondary>http://www.timeanddate.com/worldclock/timezone/utc</Secondary>
<Secondary>http://www.thetimenow.com/utc/coordinated_universal_time</Secondary>
<Secondary>http://www.worldtimeserver.com/current_time_in_UTC.aspx</Secondary>
</TimeServers>
<DestructImage>
<Before>2016-12-10 05:00</Before>
<After>2017-01-17 08:00</After>
<Uptime>07:00</Uptime>
<Playtime/>
<InvalidClient>true</InvalidClient>
<InvalidTeam>00:30</InvalidTeam>
</DestructImage>
<DisableFeedback>
<Before>2016-12-10 05:00</Before>
<After>2017-01-17 08:00</After>
<Uptime>06:30</Uptime>
<Playtime/>
<NoConnection>true</NoConnection>
<InvalidClient>true</InvalidClient>
<InvalidTeam>true</InvalidTeam>
</DisableFeedback>
<WarnAfter>05:30</WarnAfter>
<StopImageAfter>06:00</StopImageAfter>
<StopTeamAfter/>
<StartupTime>60</StartupTime>
<IntervalTime>60</IntervalTime>
<UploadTimeout>24</UploadTimeout>
<OnPointsGained>
<Execute>/usr/bin/play -q /opt/CyberPatriot/gain.wav</Execute>
<Execute>DISPLAY=:0 su jglenn -c &quot;notify-send -i /opt/CyberPatriot/Icon.png &apos;CCS Client&apos; &apos;You Gained Points&apos;&quot;</Execute>
</OnPointsGained>
<OnPointsLost>
<Execute>/usr/bin/play -q /opt/CyberPatriot/alarm.wav</Execute>
<Execute>DISPLAY=:0 su jglenn -c &quot;notify-send -i /opt/CyberPatriot/Icon.png &apos;CCS Client&apos; &apos;You Lost Points&apos;&quot;</Execute>
</OnPointsLost>
<OnInvalidTeam>
<Execute>/usr/bin/play -q /opt/CyberPatriot/alarm.wav</Execute>
<Execute>DISPLAY=:0 su jglenn -c &quot;notify-send -i /opt/CyberPatriot/Icon.png &apos;CCS Client&apos; &apos;WARNING: Invalid Unique Identifier&apos;&quot;</Execute>
</OnInvalidTeam>
<AutoDisplayPoints>true</AutoDisplayPoints>
<InstallPath>/opt/CyberPatriot</InstallPath>
<TeamConfig>ScoringConfig</TeamConfig>
<HtmlReport>ScoringReport</HtmlReport>
<HtmlReportTemplate>ScoringReportTemplate</HtmlReportTemplate>
<XmlReport>ScoringData/ScoringReport</XmlReport>
<RedShirt>tempfile</RedShirt>
<OnInstall>
<Execute>echo Running installation commands</Execute>
<Execute>rm -f /home/*/.local/share/recently-used.xbel</Execute>
<Execute>rm -f /home/*/Desktop/*~</Execute>
<Execute>rm -f /var/crash/*.crash</Execute>
<Execute>rm -f /var/VMwareDnD/*</Execute>
</OnInstall>
<ValidClient>
<ResourcePath>/opt/CyberPatriot/ScoringResource.dat</ResourcePath>
<ClientPath>/opt/CyberPatriot/CCSClient</ClientPath>
<ClientHash>B34B13165BC26EE8192DB9FC4C9B7632C4E77C2507661A2BC188C8EB68514979</ClientHash>
<ProductID>Linux i686</ProductID>
<DiskID>0002BE19</DiskID>
<InstallDate>2016-10-11 09:54:56</InstallDate>
</ValidClient>
<Check>
<CheckID>FOR_Q1</CheckID>
<Description>E7818618BEEB07AB77C0413AA73C7A56DCBC5C18D737A099C649D148440A7A49A009346A8FFAA6CBAA9172EC55FC87E72975E31643C5E7C7133FE4420B48426B</Description>
<Points>6</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/home/jglenn/Desktop/Forensics Question 1.txt</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)ANSWER:\s*116</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*2</NotEquals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*110</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>FOR_Q2</CheckID>
<Description>36D9B453C7697A107A4E8E31A97D01A7369CC6C1BBED5DDA7701F2E7D67AA1D4672E996A599E9EFF85D0846E45C53E9166633BA4D07061B037509E71BB678643</Description>
<Points>6</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/home/jglenn/Desktop/Forensics Question 2.txt</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)ANSWER:\s*48a428e9-?4868-?43f4-?8e03-?4aa16ee19a1a</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*5d28e87c-?ee33-?4e32-?ac2c-?d50948125009</NotEquals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*34c26eaf-?de4b-?4707-?91ab-?6a5dafcc53cb</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>FOR_Q3</CheckID>
<Description>9BD49208575454EAC8DCDB86AD424B772956E2A3525D003AEE8EFB9C5AFBD9FA327CA5D4BA0E3D90060E07EF34FCF0A0B2F7C50493AC65E3B1C483641488F248</Description>
<Points>6</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/home/jglenn/Desktop/Forensics Question 3.txt</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)ANSWER:\s*A98ChHbfvK</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*qpahk6ug7y</NotEquals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*4j6tank88h</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>FOR_Q4</CheckID>
<Description>96862DE97FC31B33B19D69CC94D7B576F097DCC5BAC4931945E0C1412D6AE5B848779FC11825240B508B1F1FA9DEE3397A6B472517B9B0ADF05B45ECC6A2401E</Description>
<Points>6</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/home/jglenn/Desktop/Forensics Question 4.txt</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)ANSWER:\s*iasimov</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*rheinlein</NotEquals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)ANSWER:\s*pdick</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>USR_GST</CheckID>
<Description>67D9356AAFDB2298BA5CD336EE34E511B60A82D935C35B16151E29D04B59CE2D25B43885383D77305133B5C33C96E66D8FC47485CFF558F62E79F2194E</Description>
<Points>1</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/etc/lightdm/lightdm.conf</FilePath>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<SearchPath>/usr/share/lightdm/lightdm.conf.d/</SearchPath>
<Filter>^/usr/share/lightdm/lightdm\.conf\.d/.*\.conf$</Filter>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*allow-guest\s*=\s*false</Equals>
</T1>
</PassIf>
<PassIf>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
<T2>
<Condition>Contains</Condition>
<Equals>(?i)^\s*allow-guest\s*=\s*false</Equals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>USR_CDAV</CheckID>
<Description>E468775BC75524E03204C0D066D336CF4D8EE0D22E138EEFB573A7AF8FA6C702D83DDB5B5D4ACBB249B50671D61ED72AC0BC749D71AE346BC53E53F7C0F55FC8414E</Description>
<Points>1</Points>
<Test>
<Name>T1</Name>
<Type>user</Type>
<UserName>cdavila</UserName>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>USR_RDAY</CheckID>
<Description>25C0CAF581F54C510782CBCE3D6465B19F82300026FBA39307950923882A81E82FA2E5B1509007B09B279F8E873823BE1490E18EC7D26707144C6F4C6BC767B80B26C967</Description>
<Points>1</Points>
<Test>
<Name>T1</Name>
<Type>user</Type>
<UserName>rdaystrom</UserName>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>USR_DBOWI</CheckID>
<Description>5789F368E1DC867F01A6C8E138A1FBD8B0F78E760A6C194093E143E00FEEAC6388AB36E253A161C29EA1825EF8F15E09DA402D0D66F0EA5D69DF7CA6ECCE</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>user</Type>
<UserName>dbowie</UserName>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>USR_SCAR</CheckID>
<Description>06D5C0642D320E16CDABD253A0C3DA97A7006F29799FF0E7CF30805C1D6D69596827473FA64AAA52487129F9225C03EB96DC39C7272EDE1A82F781CC3F76F190B81C8BBB8AAE111960</Description>
<Points>1</Points>
<Test>
<Name>T1</Name>
<Type>user</Type>
<UserName>scarpenter</UserName>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/etc/group</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
<T2>
<Condition>Contains</Condition>
<NotEquals>(?i)^sudo:\S+,scarpenter</NotEquals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>USR_DSLAY</CheckID>
<Description>6A86B668515BF87608D80ACB0FF3F0FE223706DD9AF9EF66BDAED943266D4D06A5373EBD60659983611CCEA731687232950B153AF3689CD27B47629CBDFE4CA5EB598E9E778D4334F2</Description>
<Points>1</Points>
<Test>
<Name>T1</Name>
<Type>user</Type>
<UserName>dslayton</UserName>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/etc/group</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
<T2>
<Condition>Contains</Condition>
<NotEquals>(?i)^sudo:\S+,dslayton</NotEquals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>USR_ASHEP</CheckID>
<Description>4D700BD6B545B5CA289389C60C15B6BA4C15F87E5F77F28D3B7F6EBCF12F626881C081A50D1362871F250CEC20FCFFBDD9AFB95DD8DEDECAAED01B7DB8298A7E328E10E364178028B9570CB0B04155</Description>
<Points>1</Points>
<Test>
<Name>T1</Name>
<Type>user</Type>
<UserName>ashepard</UserName>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Password</Condition>
<NotEquals>password</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>ACT_PWHST</CheckID>
<Description>08D403ED1FF54984E2E68119759827F69EE966C9FAC75198AE85CA927D0313B0A1186757D3030288BBDF11ED8ED6ADCD226FEE04906F302655902E7DA699D721D0BCD36857</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/etc/pam.d/common-password</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*password[^\n]*pam_unix.so[^\n]*remember=[0-9]+</Equals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*password[^\n]*pam_pwhistory.so</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>ACT_PWMINA</CheckID>
<Description>3CE7965AEBD1F2678D510ABF69D914FB611D992B20DCFFEAFDF676E03F6B744FAB69DB065BFF40BCF24F5601C8C6D482F7592949EC8F3781C960D6B141E662039BB400215C6FDA7841</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/etc/login.defs</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*PASS_MIN_DAYS\s*[0-9]{1,3}[\s\n]</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>(?i)^\s*PASS_MIN_DAYS\s*0[\s\n]</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>POL_SYSRQ</CheckID>
<Description>40808AC4BEF60F02A9E830A15F08C1A1A02A3F185628181F77D58355776618761147AC3CEDDB764CDBB73A35C0E555E7683AC6EB40A0079895574FD2619E1AF4D9A144635C6B9B121E194FE6</Description>
<Points>4</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/proc/sys/kernel/sysrq</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>0</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>POL_SYNC</CheckID>
<Description>AE562DA886466D06CE7E51BD57D7BDE6FBF5904F1021CF729F6C6A1102EAA381A2853F7DC7644652A9673F4BAB6D73980508A05A0A9822B6CE8910EE84344C9C1A5378B1B7E584CFB047</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/proc/sys/net/ipv4/tcp_syncookies</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>1</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>POL_TIMEWT</CheckID>
<Description>3AF14C84144EB7E5915F6F5284C380367190259451102168797162F16452314F2703AD47CA97233EC4276B3A71DAD766B41C638BD2E43C873959C0DA0BDB59E6234D3517BECEDA971BE8847ABCEC</Description>
<Points>4</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/proc/sys/net/ipv4/tcp_rfc1337</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>1</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>POL_SUDO1</CheckID>
<Description>A577272EE8C16AF42AC6899F330BB3206212045BB8649D042E2AE149CCAEF490DECB0FC2D822932630D3189029FEC36BFF696DC91EA068A678171ACB980320EF59521F523A</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/etc/sudoers.d/apollo</FilePath>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/etc/sudoers.d</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<NotEquals>^ALL\s+ALL\s*=\s*NOPASSWD\s*:\s*ALL</NotEquals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>DEF_FWALL</CheckID>
<Description>670EB3C824CD3842D409CC1547D2FBF9B1C4FC09A3EC56113FED45AF363CFB546C3655A44AEF93FC4071864375D2CCABA09E38EF9E84008C364489B4993C8A9C2C44F5EB99A0D13B</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/proc/net/ip_tables_names</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>SYS_SHMEM</CheckID>
<Description>C41BAA44B0DE14FD7FCFDB9126D755BF5400BC6691A37F9551FA69DF0C88CC5D03AC1E2AB6AA64867365B917F64DE51F64D62B093A934DA46DF0E39D75ACA5839C687074A2978AE702B766C96572EB333D60D07005170A</Description>
<Points>4</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/proc/mounts</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)shm\s+tmpfs\s+ro</Equals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)shm\s+tmpfs\s+\S*noexec</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>SRV_SMBD</CheckID>
<Description>8137BDAA85C154B5E4D78345EC4A653050ABDC592EE4FFBE4C6298540EA2A8CDD5C3A8240E671923B1B7FBA0C744E414A0C47C145D9AEB3A12C45FEBC78F9CA04706A29B1227AC790AEF0058A5C4</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>process</Type>
<ProcessName>/smbd</ProcessName>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/usr/sbin/smbd</FilePath>
</Test>
<Test>
<Name>T3</Name>
<Type>file</Type>
<FilePath>/etc/init/smbd.conf</FilePath>
</Test>
<Test>
<Name>T4</Name>
<Type>file</Type>
<FilePath>/etc/init/smbd.override</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T2>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T3>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T3>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T4>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T4>
<T4>
<Condition>Contains</Condition>
<Equals>manual</Equals>
</T4>
</PassIf>
</Check>
<Check>
<CheckID>SRV_POSTG</CheckID>
<Description>28E18182217A0386EEE68449511E1B9ABA3C8B5B6955D618724960E195ABB542C59B9E0F2C7273D7A1954548DABCEFBC5C218B0CDA39F256C0E7D7A83C4162363DC59BB097D8436EE468CD</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>process</Type>
<ProcessName>/postgres</ProcessName>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/usr/lib/postgresql/9.1/bin/postgres</FilePath>
</Test>
<Test>
<Name>T3</Name>
<Type>file</Type>
<FilePath>/etc/init.d/postgresql</FilePath>
</Test>
<Test>
<Name>T4</Name>
<Type>file</Type>
<FilePath>/etc/rc2.d/S19postgresql</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T2>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T3>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T3>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T4>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T4>
</PassIf>
</Check>
<Check>
<CheckID>OUP_SEC</CheckID>
<Description>DD94D9CA160F92A43B4CEB7625D6A4501D256744BF4724793ED6AEFF54A4CD376A7622011FF31A01A971734E3BF82C393190AA4AFAD40E10FC3374D8581A0C5F6204ECB3649873FA9B03159F9F</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/etc/apt/sources.list</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>^\s*deb\s+http://security.ubuntu.com/ubuntu/\s+</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>AUP_APACH</CheckID>
<Description>714C56AA2946FA45860326DF05F147A6E557DDF50AF6A284093FE80E24526B89454A4CF3A1621C817D080DE37F4B7DCC4842C8BF7BDB31A6013B95</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/usr/sbin/apache2</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>SHA256</Condition>
<NotEquals>5cdbe886ca45732799d876a921d2029431e123f2011fd21c21610b99748e09e4</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>AUP_MYSQL</CheckID>
<Description>7A8149AACFF46A055A7F1C09735D32F610220E69F4CE6B6337F56F7D7FBFE8544AC0680A9534CF64494A6C929C51F9695BFE27254725A7DAB01D</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/usr/sbin/mysqld</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>SHA256</Condition>
<NotEquals>af58e5d672f9a0934b36f8746dd92122955c7e451276c284ac21ed4c6aebb85e</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>AUP_OFFICE</CheckID>
<Description>ED4659C3ED39A6EBD671094DEC855BA9C7012DAEDB39D3B357B5F01477AA5A96AB45539A283484226FCF9FF6AFD214173CF10CE19C48754E60B9D6A556E040B702</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/usr/lib/libreoffice/program/oosplash</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>SHA256</Condition>
<NotEquals>6ba58f67d81b92bf7ce18b02c89e02a943a25f14a4734cf77d1b68494b4efbd1</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>AUP_PHP</CheckID>
<Description>AFB0027B6D3E5AC07A9BD0767032D1FAA2D2886A47C280375490EACBBAB1ECDC77899169E5E7A2A1C6C752076579CFA6040B27811B37EBD6</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/usr/bin/php</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>SHA256</Condition>
<NotEquals>e5163ec716ea7bdf6ad85d8c451571b825d3949f70918b7082c2c1d689519e7b</NotEquals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>AUP_WPRESS</CheckID>
<Description>6A78DA2302B3F5754D9B9B735E594B0A49429FDFB50F65A628E4B42B338D821D53C2505C959DC37BA001034C20C652278090E210D4BA7E3B07E757ABB3BB</Description>
<Points>4</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/var/www/html/wp-includes/version.php</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>^\s*\$wp_version\s*=\s*&apos;4\.</Equals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>^\s*\$wp_version\s*=\s*&apos;5\.</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>FIL_MP3</CheckID>
<Description>7A7DC28B43A57258FBD8F08E166052574EB80D42667436F793E6D898561B5FE7B43A1A8417160E945749FA2FEF7F76A1D66C294EB735F18777F3620E93CB07BD6DCCB2E9</Description>
<Points>2</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/home/narmstrong/Music/Allegro Classical Fall 2011 Sampler/01-02- Huahine - Under the Moonlight.mp3</FilePath>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/home/narmstrong/Music/Allegro Classical Fall 2011 Sampler/01-07- Bach Cello Suite 2 VI Gigue.mp3</FilePath>
</Test>
<Test>
<Name>T3</Name>
<Type>file</Type>
<FilePath>/home/narmstrong/Music/Allegro Classical Fall 2011 Sampler/01-10- Chopin Fantaisie - Impromptu Op post in C sharp minor.mp3</FilePath>
</Test>
<Test>
<Name>T4</Name>
<Type>file</Type>
<FilePath>/home/narmstrong</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T2>
<T3>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T3>
<T4>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T4>
</PassIf>
</Check>
<Check>
<CheckID>FIL_PHPI</CheckID>
<Description>4E9B2749642A196E8DD6EE7E42484D6723FA39815C916523BD30B5A73A1EDB50FBAFC0F6C2D181244DCBCC7DF30111E7AEC2D7B03E70E3F5372D7F</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/var/www/html/info.php</FilePath>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/var/www/html/wp-login.php</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>SFT_JOHN</CheckID>
<Description>6A8313B2F02666077DA5DE0C27B5B52CFB68D61DA54214FE40924AF9FDCBEE8B9139D989301EE9B4F3B7F2185231C6277B1C5BE070E334CCECDC6F8601C1C71977EC3274C4D4504B72DBA21A5CBDC6</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/usr/sbin/john</FilePath>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/usr/sbin</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>SFT_NIKTO</CheckID>
<Description>02B32C31C0376E3F6FA125CF11A94CF94872045B2206AE221A06CD978DE171E7AB372B030C7B5838688645EA2BD6B3B7E833B3B0B7DEE6886D8797BF9EE1BC6137BA03E3B0</Description>
<Points>3</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/usr/bin/nikto/nikto.pl</FilePath>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/usr/bin</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>MAL_PHP</CheckID>
<Description>0DC16B6D9A5C8A177F6E4466B2700D343060ECFFCCF1A100337A8110F099E88DC04535AA51A40A03A2BD55161858A1ED979DA4EC4184E01F</Description>
<Points>4</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/var/www/html/r57.php</FilePath>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/var/www/html/wp-login.php</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
<T2>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T2>
</PassIf>
</Check>
<Check>
<CheckID>APP_MYSQLRM</CheckID>
<Description>84DFC50052DF8B5FC1652F57F7C8C07A12C5978D5C8BA6CF799CED064AD75D0CE6528DC7FA06329CC6718D01B1C11938C21636FCB5A817DA2CC8FA9E6C577BEEE0582D</Description>
<Points>4</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/etc/mysql/my.cnf</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*bind-address\s*=\s*localhost</Equals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*bind-address\s*=\s*127\.</Equals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*skip-networking</Equals>
</T1>
</PassIf>
</Check>
<Check>
<CheckID>APP_EXPHP</CheckID>
<Description>73F76704C6E5E1A22530F0F7D1E39FA768080142004DD8A13176480E82148FC2876955288D22AE9DAC505D01F5A8AEB9495E439CBF</Description>
<Points>4</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/etc/php5/apache2/php.ini</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*expose_php\s*=\s*Off</Equals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*expose_php\s*=\s*False</Equals>
</T1>
</PassIf>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>true</Equals>
</T1>
<T1>
<Condition>Contains</Condition>
<Equals>(?i)^\s*expose_php\s*=\s*0</Equals>
</T1>
</PassIf>
</Check>
<Penalty>
<CheckID>PEN_USRACT</CheckID>
<Description>C6477875FC0F119682187037673AEB76CE7262F0798349AF409D7423262963A1B9104C710C2C31DAC00C9BE2D4ECB262C88FD2474CB05553217C8EE8B34A278E662F33F6EE55BC726C</Description>
<Points>5</Points>
<Test>
<Name>T1</Name>
<Type>user</Type>
<UserName>root</UserName>
</Test>
<Test>
<Name>T2</Name>
<Type>user</Type>
<UserName>ashepard</UserName>
</Test>
<Test>
<Name>T3</Name>
<Type>user</Type>
<UserName>ygagarin</UserName>
</Test>
<Test>
<Name>T4</Name>
<Type>user</Type>
<UserName>vkomarov</UserName>
</Test>
<Test>
<Name>T5</Name>
<Type>user</Type>
<UserName>jglenn</UserName>
</Test>
<Test>
<Name>T6</Name>
<Type>user</Type>
<UserName>vtereshkova</UserName>
</Test>
<Test>
<Name>T7</Name>
<Type>user</Type>
<UserName>gcooper</UserName>
</Test>
<Test>
<Name>T8</Name>
<Type>user</Type>
<UserName>fborman</UserName>
</Test>
<Test>
<Name>T9</Name>
<Type>user</Type>
<UserName>jlovell</UserName>
</Test>
<Test>
<Name>T10</Name>
<Type>user</Type>
<UserName>wanders</UserName>
</Test>
<Test>
<Name>T11</Name>
<Type>user</Type>
<UserName>narmstrong</UserName>
</Test>
<Test>
<Name>T12</Name>
<Type>user</Type>
<UserName>baldrin</UserName>
</Test>
<Test>
<Name>T13</Name>
<Type>user</Type>
<UserName>mcollins</UserName>
</Test>
<Test>
<Name>T14</Name>
<Type>user</Type>
<UserName>jswigert</UserName>
</Test>
<Test>
<Name>T15</Name>
<Type>user</Type>
<UserName>fhaise</UserName>
</Test>
<Test>
<Name>T16</Name>
<Type>user</Type>
<UserName>dslayton</UserName>
</Test>
<Test>
<Name>T17</Name>
<Type>user</Type>
<UserName>scarpenter</UserName>
</Test>
<Test>
<Name>T18</Name>
<Type>user</Type>
<UserName>wschirra</UserName>
</Test>
<Test>
<Name>T19</Name>
<Type>user</Type>
<UserName>ggrissom</UserName>
</Test>
<Test>
<Name>T20</Name>
<Type>user</Type>
<UserName>vremek</UserName>
</Test>
<Test>
<Name>T21</Name>
<Type>user</Type>
<UserName>mhermaszewki</UserName>
</Test>
<Test>
<Name>T22</Name>
<Type>user</Type>
<UserName>sjahn</UserName>
</Test>
<Test>
<Name>T23</Name>
<Type>user</Type>
<UserName>givanov</UserName>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
<PassIf>
<T2>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T2>
</PassIf>
<PassIf>
<T3>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T3>
</PassIf>
<PassIf>
<T4>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T4>
</PassIf>
<PassIf>
<T5>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T5>
</PassIf>
<PassIf>
<T6>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T6>
</PassIf>
<PassIf>
<T7>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T7>
</PassIf>
<PassIf>
<T8>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T8>
</PassIf>
<PassIf>
<T9>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T9>
</PassIf>
<PassIf>
<T10>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T10>
</PassIf>
<PassIf>
<T11>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T11>
</PassIf>
<PassIf>
<T12>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T12>
</PassIf>
<PassIf>
<T13>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T13>
</PassIf>
<PassIf>
<T14>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T14>
</PassIf>
<PassIf>
<T15>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T15>
</PassIf>
<PassIf>
<T16>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T16>
</PassIf>
<PassIf>
<T17>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T17>
</PassIf>
<PassIf>
<T18>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T18>
</PassIf>
<PassIf>
<T19>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T19>
</PassIf>
<PassIf>
<T20>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T20>
</PassIf>
<PassIf>
<T21>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T21>
</PassIf>
<PassIf>
<T22>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T22>
</PassIf>
<PassIf>
<T23>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T23>
</PassIf>
</Penalty>
<Penalty>
<CheckID>PEN_USRDIR</CheckID>
<Description>E7FA9B1CD152F83F939244C304790D162F2D32BE3A557EA8CB863687FC249202BE983BFAF1F4120BBF48155076C7279887D4CE0565B6AC1E86DEA241C3E2991114BE741A6E3F19D81E6B77E6</Description>
<Points>5</Points>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/home/ashepard</FilePath>
</Test>
<Test>
<Name>T3</Name>
<Type>file</Type>
<FilePath>/home/ygagarin</FilePath>
</Test>
<Test>
<Name>T4</Name>
<Type>file</Type>
<FilePath>/home/vkomarov</FilePath>
</Test>
<Test>
<Name>T5</Name>
<Type>file</Type>
<FilePath>/home/jglenn</FilePath>
</Test>
<Test>
<Name>T6</Name>
<Type>file</Type>
<FilePath>/home/vtereshkova</FilePath>
</Test>
<Test>
<Name>T7</Name>
<Type>file</Type>
<FilePath>/home/gcooper</FilePath>
</Test>
<Test>
<Name>T8</Name>
<Type>file</Type>
<FilePath>/home/fborman</FilePath>
</Test>
<Test>
<Name>T9</Name>
<Type>file</Type>
<FilePath>/home/jlovell</FilePath>
</Test>
<Test>
<Name>T10</Name>
<Type>file</Type>
<FilePath>/home/wanders</FilePath>
</Test>
<Test>
<Name>T11</Name>
<Type>file</Type>
<FilePath>/home/narmstrong</FilePath>
</Test>
<Test>
<Name>T12</Name>
<Type>file</Type>
<FilePath>/home/baldrin</FilePath>
</Test>
<Test>
<Name>T13</Name>
<Type>file</Type>
<FilePath>/home/mcollins</FilePath>
</Test>
<Test>
<Name>T14</Name>
<Type>file</Type>
<FilePath>/home/jswigert</FilePath>
</Test>
<Test>
<Name>T15</Name>
<Type>file</Type>
<FilePath>/home/fhaise</FilePath>
</Test>
<Test>
<Name>T16</Name>
<Type>file</Type>
<FilePath>/home/dslayton</FilePath>
</Test>
<Test>
<Name>T17</Name>
<Type>file</Type>
<FilePath>/home/scarpenter</FilePath>
</Test>
<Test>
<Name>T18</Name>
<Type>file</Type>
<FilePath>/home/wschirra</FilePath>
</Test>
<Test>
<Name>T19</Name>
<Type>file</Type>
<FilePath>/home/ggrissom</FilePath>
</Test>
<Test>
<Name>T20</Name>
<Type>file</Type>
<FilePath>/home/vremek</FilePath>
</Test>
<Test>
<Name>T21</Name>
<Type>file</Type>
<FilePath>/home/mhermaszewki</FilePath>
</Test>
<Test>
<Name>T22</Name>
<Type>file</Type>
<FilePath>/home/sjahn</FilePath>
</Test>
<Test>
<Name>T23</Name>
<Type>file</Type>
<FilePath>/home/givanov</FilePath>
</Test>
<PassIf>
<T2>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T2>
</PassIf>
<PassIf>
<T3>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T3>
</PassIf>
<PassIf>
<T4>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T4>
</PassIf>
<PassIf>
<T5>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T5>
</PassIf>
<PassIf>
<T6>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T6>
</PassIf>
<PassIf>
<T7>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T7>
</PassIf>
<PassIf>
<T8>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T8>
</PassIf>
<PassIf>
<T9>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T9>
</PassIf>
<PassIf>
<T10>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T10>
</PassIf>
<PassIf>
<T11>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T11>
</PassIf>
<PassIf>
<T12>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T12>
</PassIf>
<PassIf>
<T13>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T13>
</PassIf>
<PassIf>
<T14>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T14>
</PassIf>
<PassIf>
<T15>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T15>
</PassIf>
<PassIf>
<T16>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T16>
</PassIf>
<PassIf>
<T17>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T17>
</PassIf>
<PassIf>
<T18>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T18>
</PassIf>
<PassIf>
<T19>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T19>
</PassIf>
<PassIf>
<T20>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T20>
</PassIf>
<PassIf>
<T21>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T21>
</PassIf>
<PassIf>
<T22>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T22>
</PassIf>
<PassIf>
<T23>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T23>
</PassIf>
</Penalty>
<Penalty>
<CheckID>PEN_APACH</CheckID>
<Description>21D51AB2BB3AB1E2FD2119FF32A5BD8CEBC145CF2D3D5DEA9ACC85519BA6EA5C91B4BCF0C87C8624BC0EA8835D82BB26F795A76E682F61702593A4BD9A3BACE22220E1AC9D804EF89B7AEB2946E9</Description>
<Points>5</Points>
<Test>
<Name>T1</Name>
<Type>process</Type>
<ProcessName>/apache2</ProcessName>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/usr/sbin/apache2</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
<PassIf>
<T2>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T2>
</PassIf>
</Penalty>
<Penalty>
<CheckID>PEN_MYSQL</CheckID>
<Description>32AD467FB36192569982FCB327D20345B13E222E81892D25B4B5A37B806B3E1FC9481D13DEC23DD9AFADBB5E13232F4F8B8EB0335BE003742A9E82CE8BD4FE28283263B8E710FD094470997497</Description>
<Points>5</Points>
<Test>
<Name>T1</Name>
<Type>process</Type>
<ProcessName>/mysqld</ProcessName>
</Test>
<Test>
<Name>T2</Name>
<Type>file</Type>
<FilePath>/usr/sbin/mysqld</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
<PassIf>
<T2>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T2>
</PassIf>
</Penalty>
<Penalty>
<CheckID>PEN_PHP</CheckID>
<Description>AAFB4A0C5E6936E4C2A885BB033E1FDF7DA62FE2BE35918BC6F5B79737FBB199E3AFEE23CB057BF2A6DA089E6068DEDB181700402723094F</Description>
<Points>5</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/usr/bin/php</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
</Penalty>
<Penalty>
<CheckID>PEN_WPRESS</CheckID>
<Description>D6CA2523FC0820AA24FE18F2C7BAACCFEC05DC5F2F5428FB268A26DD2BAE37703DDE17634BFDA97B8D34A056CAA11BBF1AE7C711FFC74ACDEA29F78C5A9F1C43D79ED0C6061A62B99F8FF142A345807DC963D19DB973EA91</Description>
<Points>5</Points>
<Test>
<Name>T1</Name>
<Type>file</Type>
<FilePath>/var/www/html/wp-login.php</FilePath>
</Test>
<PassIf>
<T1>
<Condition>Exists</Condition>
<Equals>false</Equals>
</T1>
</PassIf>
</Penalty>
<AllFiles>
<FilePath>/etc/</FilePath>
<FilePath>/etc/apt/</FilePath>
<FilePath>/etc/ssh/</FilePath>
<FilePath>/etc/init.d/</FilePath>
<FilePath>/etc/rc2.d/</FilePath>
<FilePath>/etc/xinetd.d/</FilePath>
<FilePath>/bin/</FilePath>
<FilePath>/sbin/</FilePath>
<FilePath>/usr/bin/</FilePath>
<FilePath>/usr/sbin/</FilePath>
<FilePath>/opt/bin/</FilePath>
<FilePath>/opt/sbin/</FilePath>
<FilePath>/root/</FilePath>
<FilePath>/var/log/</FilePath>
</AllFiles>
</CyberPatriotResource>
@WestKleinman
Copy link

Is this the file we drag into the program?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment