feat: introduce live scoreboard feature and add new ansible roles

.gitignore

@@ -26,6 +26,9 @@ ansible/roles/vulns_adcs_templates/files/ADCSTemplate.zip
 # Generated merged lab configs (base + overlay)
 ad/GOAD/data/*-config.json
 
+# Variant-specific scoreboard answer key (generated by `dreadgoad scoreboard generate-key`)
+scoreboard/answer_key.json
+
 # Scenario data (keep only tracked environments)
 ad/PURPLE
 ad/REDLAB

.hooks/docsible-hook.sh

@@ -25,6 +25,13 @@ FILES_MODIFIED=0
 for role_dir in ansible/roles/*/; do
     [ -d "$role_dir" ] || continue
 
+    # Skip directories that aren't real roles (e.g. parent dirs like
+    # ansible/roles/linux/ that just group sub-roles). A real role has
+    # tasks/main.yml (or .yaml).
+    if [ ! -f "${role_dir}tasks/main.yml" ] && [ ! -f "${role_dir}tasks/main.yaml" ]; then
+        continue
+    fi
+
     role_name=$(basename "$role_dir")
     readme="${role_dir}README.md"
 

ad/GOAD/data/config.json

@@ -186,6 +186,7 @@
             },
             "scripts" : ["asrep_roasting2.ps1"],
             "vulns" : ["ntlmdowngrade", "disable_firewall",  "adcs_esc7", "adcs_esc13", "adcs_esc15"],
+            "vulns_adcs_templates": ["ESC1", "ESC2", "ESC3", "ESC3-CRA", "ESC4", "ESC9"],
             "vulns_vars" : {
                 "adcs_esc7": {
                     "viserys": {

ansible/roles/keepass/README.md

@@ -0,0 +1,48 @@
+<!-- DOCSIBLE START -->
+# keepass
+
+## Description
+
+Install the KeePass password manager on Windows hosts
+
+## Requirements
+
+- Ansible >= 2.15
+
+## Role Variables
+
+### Default Variables (main.yml)
+
+| Variable | Type | Default | Description |
+| -------- | ---- | ------- | ----------- |
+| `keepass_url_install_package` | str | `https://unlimited.dl.sourceforge.net/project/keepass/KeePass 2.x/2.60/KeePass-2.60-Setup.exe?viasf=1` | No description |
+| `keepass_download_location` | str | `c:\\setup` | No description |
+| `keepass_install_bin` | str | `{{keepass_download_location}}\\KeePass-2.60-Setup.exe` | No description |
+
+## Tasks
+
+### main.yml
+
+- **check keepass already exist** (win_stat)
+- **Create keepass_download_location folder if not exist** (ansible.windows.win_file) - Conditional
+- **Download Keepass to {{keepass_install_bin}}** (ansible.windows.win_get_url) - Conditional
+- **Install Keepass** (win_command) - Conditional
+
+## Example Playbook
+
+```yaml
+- hosts: servers
+  roles:
+    - keepass
+```
+
+## Author Information
+
+- **Author**: Dreadnode
+- **Company**: Dreadnode
+- **License**: GPL-3.0-or-later
+
+## Platforms
+
+- Windows: all
+<!-- DOCSIBLE END -->

ansible/roles/keepass/meta/main.yml

@@ -0,0 +1,19 @@
+---
+galaxy_info:
+  role_name: keepass
+  namespace: dreadnode
+  author: Dreadnode
+  company: Dreadnode
+  description: Install the KeePass password manager on Windows hosts
+  license: GPL-3.0-or-later
+  min_ansible_version: "2.15"
+  platforms:
+    - name: Windows
+      versions:
+        - all
+  galaxy_tags:
+    - windows
+    - keepass
+    - passwords
+
+dependencies: []

ansible/roles/klink/README.md

@@ -0,0 +1,49 @@
+<!-- DOCSIBLE START -->
+# klink
+
+## Description
+
+Install klink (PuTTY's command-line SSH client) on Windows hosts
+
+## Requirements
+
+- Ansible >= 2.15
+
+## Role Variables
+
+### Default Variables (main.yml)
+
+| Variable | Type | Default | Description |
+| -------- | ---- | ------- | ----------- |
+| `putty_dir` | str | `C:\Program Files\PuTTY` | No description |
+| `klink_url` | str | `https://www.9bis.net/kitty/files/klink.exe` | No description |
+| `klink_path` | str | `{{ putty_dir }}\klink.exe` | No description |
+
+## Tasks
+
+### main.yml
+
+- **Create PuTTY directory** (ansible.windows.win_file)
+- **Check if klink.exe is already installed** (ansible.windows.win_stat)
+- **Download klink.exe (only if not present)** (ansible.windows.win_get_url) - Conditional
+- **Check klink version** (ansible.windows.win_command)
+- **Show klink version** (debug)
+
+## Example Playbook
+
+```yaml
+- hosts: servers
+  roles:
+    - klink
+```
+
+## Author Information
+
+- **Author**: Dreadnode
+- **Company**: Dreadnode
+- **License**: GPL-3.0-or-later
+
+## Platforms
+
+- Windows: all
+<!-- DOCSIBLE END -->

ansible/roles/klink/meta/main.yml

@@ -0,0 +1,20 @@
+---
+galaxy_info:
+  role_name: klink
+  namespace: dreadnode
+  author: Dreadnode
+  company: Dreadnode
+  description: Install klink (PuTTY's command-line SSH client) on Windows hosts
+  license: GPL-3.0-or-later
+  min_ansible_version: "2.15"
+  platforms:
+    - name: Windows
+      versions:
+        - all
+  galaxy_tags:
+    - windows
+    - ssh
+    - putty
+    - klink
+
+dependencies: []