p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity
monkey/infection_monkey/example.conf

96 lines
2.8 KiB
Plaintext
Raw Normal View History

added example configuration
2015-12-07 16:15:56 +08:00
{
"command_servers": [
Removed hard coded debug address and replaced with non routable IP
2018-07-08 17:14:25 +08:00
"192.0.2.0:5000"
Change order of config file to be easier to modify. Added internet servers to config file
2016-07-10 16:41:13 +08:00
],
updated missing fields
2016-08-01 01:40:45 +08:00
"internet_services": [
Fixed the example configuration file, it had a json syntax error.
2018-05-18 00:28:04 +08:00
"monkey.guardicore.com",
"www.google.com"
],
Sleep only *between* life cycles
2017-10-03 20:47:50 +08:00
"keep_tunnel_open_time": 60,
rename and move range_fixed
2018-02-26 22:34:23 +08:00
"subnet_scan_list": [
Fix default config values
2018-06-13 21:05:12 +08:00
Change order of config file to be easier to modify. Added internet servers to config file
2016-07-10 16:41:13 +08:00
],
Fix default config values
2018-06-13 21:05:12 +08:00
"blocked_ips": [],
Removed hard coded debug address and replaced with non routable IP
2018-07-08 17:14:25 +08:00
"current_server": "192.0.2.0:5000",
Change order of config file to be easier to modify. Added internet servers to config file
2016-07-10 16:41:13 +08:00
"alive": true,
"collect_system_info": true,
Adds configuration option to turn Azure collection on and off Merge mimikatz and Azure into system info collection settings.
2018-03-27 15:40:03 +08:00
"extract_azure_creds": true,
updated missing fields
2016-08-01 01:40:45 +08:00
"depth": 2,
Expand config env variables on demand
2017-09-27 16:24:42 +08:00
"dropper_date_reference_path_windows": "%windir%\\system32\\kernel32.dll",
"dropper_date_reference_path_linux": "/bin/sh",
GC-5506 #resolved added different log files for different platforms.
2016-03-02 23:13:36 +08:00
"dropper_log_path_windows": "%temp%\\~df1562.tmp",
"dropper_log_path_linux": "/tmp/user-1562",
added example configuration
2015-12-07 16:15:56 +08:00
"dropper_set_date": true,
Monkey now uses different names for 32,64bit on windows. No need to use dropper or rename moneky
2018-03-04 23:05:43 +08:00
"dropper_target_path_win_32": "C:\\Windows\\monkey32.exe",
"dropper_target_path_win_64": "C:\\Windows\\monkey64.exe",
Changed Monkey SSH file path to /tmp to not require root. Tiny PEP8 changes
2016-08-20 20:28:14 +08:00
"dropper_target_path_linux": "/tmp/monkey",
Removed unused import. Added kill file option.
2016-07-19 04:43:17 +08:00
Merge branch 'master' of https://github.com/guardicore/monkey # Conflicts: # chaos_monkey/example.conf
2016-08-03 14:24:55 +08:00
"kill_file_path_linux": "/var/run/monkey.not",
Issue #18, added ability to attack multiple users in SSH brute force. Also fixed small bug in windows kill path parsing.
2016-08-09 03:25:33 +08:00
"kill_file_path_windows": "%windir%\\monkey.not",
Fix SambaCry not working for non-root user
2017-10-02 22:11:51 +08:00
"dropper_try_move_first": true,
added example configuration
2015-12-07 16:15:56 +08:00
"exploiter_classes": [
"SSHExploiter",
"SmbExploiter",
"WmiExploiter",
Added Elastic attack
2017-09-26 20:43:46 +08:00
"ShellShockExploiter",
"ElasticGroovyExploiter",
"SambaCryExploiter",
Not yet functioning and tested, but most functions are done
2018-06-19 23:08:52 +08:00
"Struts2Exploiter"
added example configuration
2015-12-07 16:15:56 +08:00
],
"finger_classes": [
"SSHFinger",
"PingScanner",
Typo
2016-09-01 18:58:44 +08:00
"HTTPFinger",
Add mysql fingerprinting and improve struct parsing
2017-09-25 17:01:48 +08:00
"SMBFinger",
Fixed the example configuration file, it had a json syntax error.
2018-05-18 00:28:04 +08:00
"MySQLFinger",
Updated the config files to default include the mssql fingerfrint class: MSSQLFingerprinter, in the monkey's configuration.
2018-06-09 23:23:54 +08:00
"MSSQLFingerprint",
Fixed the example configuration file, it had a json syntax error.
2018-05-18 00:28:04 +08:00
"ElasticFinger"
added example configuration
2015-12-07 16:15:56 +08:00
],
"max_iterations": 3,
GC-5506 #resolved added different log files for different platforms.
2016-03-02 23:13:36 +08:00
"monkey_log_path_windows": "%temp%\\~df1563.tmp",
"monkey_log_path_linux": "/tmp/user-1563",
Send log to island is configurable
2018-02-20 00:32:05 +08:00
"send_log_to_server": true,
added example configuration
2015-12-07 16:15:56 +08:00
"ms08_067_exploit_attempts": 5,
Changed MS08-67 user to monkey indicative to help track infections
2016-06-14 22:06:17 +08:00
"ms08_067_remote_user_add": "Monkey_IUSER_SUPPORT",
added example configuration
2015-12-07 16:15:56 +08:00
"ms08_067_remote_user_pass": "Password1!",
"ping_scan_timeout": 10000,
"rdp_use_vbs_download": true,
PEP8 in diff files Add concept of non default timeout for copying SMB files. This is by default 5 minutes. Changed behavior of SMB exploiter if file already exists, we don't assume exploitation is useless and try again. Worse case is we run the monkey after it finished running. Changed behavior if managed to connect to machine to IPC$ over some dialect. If Success, we don't try again.
2016-09-05 22:45:27 +08:00
"smb_download_timeout": 300,
Removed legacy ChaosMonkey from SMB execution.
2016-09-08 00:10:30 +08:00
"smb_service_name": "InfectionMonkey",
added example configuration
2015-12-07 16:15:56 +08:00
"retry_failed_explotation": true,
"scanner_class": "TcpScanner",
updated missing fields
2016-08-01 01:40:45 +08:00
"self_delete_in_cleanup": true,
config bugfix - missing field
2016-07-23 13:59:26 +08:00
"serialize_config": false,
added example configuration
2015-12-07 16:15:56 +08:00
"singleton_mutex_name": "{2384ec59-0df8-4ab9-918c-843740924a28}",
Change skip exploit if monkey exist to false
2017-09-28 19:44:18 +08:00
"skip_exploit_if_file_exist": false,
Add C&C ability to share credentials found from monkeys
2017-08-17 23:04:36 +08:00
"exploit_user_list": [],
Fixed invalid JSON
2017-09-05 22:51:26 +08:00
"exploit_password_list": [],
Implement pass the hash for SMB
2017-09-26 23:11:13 +08:00
"exploit_lm_hash_list": [],
"exploit_ntlm_hash_list": [],
Exploitation of machines using ssh keys added. Also, added shh keys exploitation to report
2018-05-29 06:02:49 +08:00
"exploit_ssh_keys": [],
Fixed invalid JSON
2017-09-05 22:51:26 +08:00
"sambacry_trigger_timeout": 5,
"sambacry_folder_paths_to_guess": ["", "/mnt", "/tmp", "/storage", "/export", "/share", "/shares", "/home"],
"sambacry_shares_not_to_check": ["IPC$", "print$"],
Documented sambacry, moved everything to configuration, minor fixes
2017-09-01 01:03:32 +08:00
"local_network_scan": false,
added example configuration
2015-12-07 16:15:56 +08:00
"tcp_scan_get_banner": true,
"tcp_scan_interval": 200,
"tcp_scan_timeout": 10000,
"tcp_target_ports": [
22,
445,
135,
Added basic HTTP fingering by using banner grabbing
2016-08-24 23:31:16 +08:00
3389,
80,
8080,
443,
Fix CR comments, see https://github.com/guardicore/monkey/pull/47#pullrequestreview-64871377
2017-09-25 22:34:19 +08:00
3306,
Add elasticsearch fingerprinting.
2017-09-25 20:13:36 +08:00
8008,
9200
added example configuration
2015-12-07 16:15:56 +08:00
],
"timeout_between_iterations": 10,
"use_file_logging": true,
"victims_max_exploit": 7,
Change default for victims_max_find Move things around in config
2017-10-04 19:57:56 +08:00
"victims_max_find": 30
Fixed the example configuration file, it had a json syntax error.
2018-05-18 00:28:04 +08:00
}