p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Don't show actual password on stolen creds table

This commit is contained in:
Itay Mizeretz 2017-11-28 14:22:11 +02:00
parent 2aadb12815
commit 046b18e71c
2 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
monkey_island/cc/services/report.py
View File

@ -88,7 +88,7 @@ class ReportService:
@staticmethod
def get_stolen_creds():
PASS_TYPE_DICT = {'password': 'Password', 'lm_hash': 'LM', 'ntlm_hash': 'NTLM'}
PASS_TYPE_DICT = {'password': 'Clear Password', 'lm_hash': 'LM', 'ntlm_hash': 'NTLM'}
creds = []
for telem in mongo.db.telemetry.find(
{'telem_type': 'system_info_collection', 'data.credentials': {'$exists': True}},
@ -103,7 +103,6 @@ class ReportService:
creds.append(
{
'username': user,
'password': monkey_creds[user][pass_type],
'type': PASS_TYPE_DICT[pass_type],
'origin': origin
}

1
monkey_island/cc/ui/src/components/report-components/StolenPasswords.js
View File

@ -6,7 +6,6 @@ const columns = [
Header: 'Stolen Credentials',
columns: [
{ Header: 'Username', accessor: 'username'},
{ Header: 'Password/Hash', accessor: 'password'},
{ Header: 'Type', accessor: 'type'},
{ Header: 'Origin', accessor: 'origin'}
]