CALDERA a cyber security platform designed to easily automate adversary
emulation, assist manual red-teams, and automate incident response.
It is built on the MITRE ATT&CK framework and is an active research project
at MITRE.
The framework consists of two components:
- The core system. This is the framework code, consisting of what is available
in this repository. Included is an asynchronous command-and-control (C2)
server with a REST API and a web interface.
- Plugins. These repositories expand the core framework capabilities and
providing additional functionality. Examples include agents, reporting,
collections of TTPs and more.
===> The following configuration options are available for caldera-5.3.0_32:
HAPROXY=on: Support for HTTPS
===> Use 'make config' to modify these settings
security/caldera: change RUN_DEP from net/haproxy24 to net/haproxy to unbreak
index
- Checked code, it's referenced only by a config and will probably work
with every version of haproxy
all: expire direct consumers of www/node20 on 2026-09-30
This happens to be the date when www/qt5-webengine expires, which
is also a node20 consumer (on i386, same for qt6-webengine).
*/*: switch dependency from devel/py-lxml5 to devel/py-lxml
Currently, there are two versions of python XML processing library
which conflict each other in the ports tree, namely:
- devel/py-lxml5 (now at version 5.4.0)
- devel/py-lxml (now at version 6.0.1)
To avoid the situation that some ports depend on py-lxml5 and some
others do on py-lxml (by switching dependencies individually), this
commit switches the dependencies from py-lxml5 to py-lxml at once.
Additional note: There are still two ports (textproc/py-rdflib and
www/py-draftjs-exporter) depending on py-lxml5 since they limit upper
version to less than 6.
PR: 289491
Approved by: Michiel van Baak Jansen <michiel@vanbaak.eu>, arrowd,
crees, madpilot, delphij, marcus, nivit, kai,
skreuzer, fluffy, bofh, thierry, stephen, sunpoet,
0mp, Eric Camachat <eric@camachat.org>
*/*: update dependency on devel/py-lxml to devel/py-lxml5
www/py-beautifulsoup has switched dependency on devel/py-lxml to
devel/py-lxml5.
Ports which directly or indirectly depends on both
www/py-beautifulsoup and devel/py-lxml must also switch their
dependencies on devel/py-lxml to devel/py-lxml5 to avoid conflicts.
PR: 288047
Approved by: portmgr (chase dependency change)
go: Bump go124-dependent ports
Earlier I bumped the default Go to 1.24. Ports that specify a lower
version will still build with those lower version (for now), so they
don't need a bumping. Instead I'm bumping anything that (now) has go124
as a dependency.
security/caldera: Improve port
- Improve rc script. Now it kills some child processes
- Use my new atomic-red-team repository. It include a new entry run_as into yaml
files for identify FreeBSD tests easily because oficial
redcanaryco/atomic-red-team project included new changes and these remove
freebsd entries from yaml files because it was merged into linux tests. Now
identify what are FreeBSD tests is almost imposible.
- Some other minor modifications
- Bump PORTREVISION
*: Replace USES=pycryptography* with USE_PYTHON=cryptography{,_build,_test}
- Introduce USE_PYTHON=cryptography{,_build,_test}
- Switch all 96 ports from USES=pycryptography to with
USE_PYTHON=cryptography{,_build,_test}
- Remove Mk/Uses/pycryptography.mk
PR: 273727
Approved by: tcberner (portmgr)
Exp-run by: antoine
framework: convert tree to use USES=pycryptography
A future commit will update to security/py-cryptography will introduce a
rust dependency.
PR: 254853
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++
-DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable
-Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong
-fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi
-Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings
-Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x
-MT _quickfix_la-QuickfixPython.lo -MD -MP -MF
.deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o
.libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean
'-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>
security/caldera: Fix permission issues with some payload directories
- Fix a problem in ragdoll payload
- Add GOCACHE and GOMODCACHE to caldera_env into caldera rc script. It is
useful for avoid issues when some payloads are compiled
- Some other modifications
- Bump PORTREVISION
security/caldera: Use caldera user and group into port files
- Update caldera rc file
- Update pkg-plist file
- Atomic plugin was patched for download yaml from alonsobsd/atomic-red-team
instead of redcanaryco/atomic-red-team github repository until my pull
request will be approved
- Add/modify entries into pkg-message file
- Bump PORTREVISION
security/caldera: New port: Automated Adversary Emulation Platform
CALDERA a cyber security platform designed to easily automate adversary
emulation, assist manual red-teams, and automate incident response.
It is built on the MITRE ATT&CK framework and is an active research project
at MITRE.
The framework consists of two components:
- The core system. This is the framework code, consisting of what is available
in this repository. Included is an asynchronous command-and-control (C2)
server with a REST API and a web interface.
- Plugins. These repositories expand the core framework capabilities and
providing additional functionality. Examples include agents, reporting,
collections of TTPs and more.
