DreadGOAD/dev-inventory.example at main · dreadnode/DreadGOAD · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
; GLOBAL CONFIG ----------------------------
[all:vars]
; domain_name : folder inside ad/
domain_name=GOAD-variant-1

; administrator user
admin_user=administrator

; environment
env=dev

; SSM connection (windows)
ansible_become=false
ansible_connection=amazon.aws.aws_ssm
ansible_aws_ssm_bucket_name=example-dreadgoad-dev-us-west-2
ansible_aws_ssm_region=us-west-2
ansible_shell_type=powershell
ansible_aws_ssm_s3_addressing_style=virtual
ansible_remote_tmp=C:\Windows\Temp

; miscellaneous
data_path="{{ playbook_dir }}/../../ad/GOAD-variant-1/data"

; AWS instances have a single network adapter (no NAT adapter)
two_adapters=false

; global settings inventory default value
keyboard_layouts=["en-US", "da-DK", "fr-FR"]

; modify this to add a default route
add_route=no
route_gateway=192.168.56.1
route_network=10.0.0.0/8

; modify this to enable http proxy
enable_http_proxy=no
ad_http_proxy=http://x.x.x.x:xxxx
ad_https_proxy=http://x.x.x.x:xxxx

;force_dns_server
force_dns_server=no
dns_server=1.1.1.1

;dns server forwarder
dns_server_forwarder=1.1.1.1

; Default system settings ----------------------------
[default]
; ------------------------------------------------
; sevenkingdoms.local
; ------------------------------------------------
dc01 ansible_host=PENDING dict_key=dc01 dns_domain=dc01 ansible_user=ansible
; ------------------------------------------------
; north.sevenkingdoms.local
; ------------------------------------------------
dc02 ansible_host=PENDING dict_key=dc02 dns_domain=dc01 ansible_user=ansible
srv02 ansible_host=PENDING dict_key=srv02 dns_domain=dc02 ansible_user=ansible
; ------------------------------------------------
; essos.local
; ------------------------------------------------
dc03 ansible_host=PENDING dict_key=dc03 dns_domain=dc03 ansible_user=ansible
srv03 ansible_host=PENDING dict_key=srv03 dns_domain=dc03 ansible_user=ansible

; LAB SCENARIO CONFIGURATION -----------------------------

; computers inside domain (mandatory)
; usage : build.yml, ad-relations.yml, ad-servers.yml, vulnerabilities.yml
[domain]
dc01
dc02
dc03
srv02
srv03

; domain controller (mandatory)
; usage : ad-acl.yml, ad-data.yml, ad-relations.yml, laps.yml
[dc]
dc01
dc02
dc03

; domain server to enroll (mandatory if you want servers)
; usage : ad-data.yml, ad-servers.yml, laps.yml
[server]
srv02
srv03

; workstation to enroll (mandatory if you want workstation)
; usage : ad-servers.yml, laps.yml
[workstation]

; parent domain controller (mandatory)
; usage : ad-servers.yml
[parent_dc]
dc01
dc03

; child domain controller (need a fqdn child_name.parent_name)
; usage : ad-servers.yml
[child_dc]
dc02

; external trust, need domain trust entry in config (bidirectionnal)
; usage : ad-trusts.yml
[trust]
dc01
dc03

; install adcs
; usage : adcs.yml
[adcs]
dc01
srv03

; install custom template (dc)
; usage : adcs.yml
[adcs_customtemplates]
dc03

; install iis with default website asp upload on 80
; usage : servers.yml
[iis]
srv02

; install mssql
; usage : servers.yml
[mssql]
srv02
srv03

; install mssql gui
; usage : servers.yml
[mssql_ssms]
srv02

; install webdav
[webdav]
srv02
srv03

[laps_dc]
dc03
[laps_server]
srv03
[laps_workstation]

; allow computer update
; usage : update.yml
[update]
srv02

; disable update
; usage : update.yml
[no_update]
dc01
dc02
dc03
srv03

; allow defender
; usage : security.yml
[defender_on]

; disable defender
; usage : security.yml
[defender_off]
dc01
dc02
dc03
srv02
srv03

;stay empty until override
[extensions]