p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Content fixes

This commit is contained in:
Itay Mizeretz 2018-01-16 10:50:05 +02:00
parent fb5f1f8302
commit 4ef0a53026
1 changed files with 14 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
monkey_island/cc/ui/src/components/pages/ReportPage.js
View File

@ -334,8 +334,7 @@ class ReportPageComponent extends React.Component {
<li>Weak segmentation - Machines from different segments are able to <li>Weak segmentation - Machines from different segments are able to
communicate.</li> : null} communicate.</li> : null}
{this.state.report.overview.warnings[this.Warning.TUNNEL] ? {this.state.report.overview.warnings[this.Warning.TUNNEL] ?
<li>Lack of machine hardening, machines successfully tunneled monkey traffic using unused <li>Weak segmentation - machines were able to communicate over unused ports.</li> : null}
ports.</li> : null}
</ul> </ul>
</div> </div>
: :
@ -441,7 +440,7 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">SMB</span> attack. className="label label-danger">SMB</span> attack.
<br/> <br/>
The attack succeeded by authenticating over SMB protocol with user <span The Monkey authenticated over the SMB protocol with user <span
className="label label-success">{issue.username}</span> and its password. className="label label-success">{issue.username}</span> and its password.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -458,7 +457,7 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">SMB</span> attack. className="label label-danger">SMB</span> attack.
<br/> <br/>
The attack succeeded by using a pass-the-hash attack over SMB protocol with user <span The Monkey used a pass-the-hash attack over SMB protocol with user <span
className="label label-success">{issue.username}</span>. className="label label-success">{issue.username}</span>.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -475,7 +474,7 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">WMI</span> attack. className="label label-danger">WMI</span> attack.
<br/> <br/>
The attack succeeded by authenticating over WMI protocol with user <span The Monkey authenticated over the WMI protocol with user <span
className="label label-success">{issue.username}</span> and its password. className="label label-success">{issue.username}</span> and its password.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -492,7 +491,7 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">WMI</span> attack. className="label label-danger">WMI</span> attack.
<br/> <br/>
The attack succeeded by using a pass-the-hash attack over WMI protocol with user <span The Monkey used a pass-the-hash attack over WMI protocol with user <span
className="label label-success">{issue.username}</span>. className="label label-success">{issue.username}</span>.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -509,7 +508,7 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">SSH</span> attack. className="label label-danger">SSH</span> attack.
<br/> <br/>
The attack succeeded by authenticating over SSH protocol with user <span The Monkey authenticated over the SSH protocol with user <span
className="label label-success">{issue.username}</span> and its password. className="label label-success">{issue.username}</span> and its password.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -526,7 +525,7 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">RDP</span> attack. className="label label-danger">RDP</span> attack.
<br/> <br/>
The attack succeeded by authenticating over RDP protocol with user <span The Monkey authenticated over the RDP protocol with user <span
className="label label-success">{issue.username}</span> and its password. className="label label-success">{issue.username}</span> and its password.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -545,8 +544,8 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">SambaCry</span> attack. className="label label-danger">SambaCry</span> attack.
<br/> <br/>
The attack succeeded by authenticating over SMB protocol with user <span The Monkey authenticated over the SMB protocol with user <span
className="label label-success">{issue.username}</span> and its password, and by using the SambaCry className="label label-success">{issue.username}</span> and its password, and used the SambaCry
vulnerability. vulnerability.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -562,7 +561,7 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to an <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to an <span
className="label label-danger">Elastic Groovy</span> attack. className="label label-danger">Elastic Groovy</span> attack.
<br/> <br/>
The attack succeeded because the Elastic Search server is not patched against CVE-2015-1427. The attack was made possible because the Elastic Search server was not patched against CVE-2015-1427.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
); );
@ -577,8 +576,8 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">ShellShock</span> attack. className="label label-danger">ShellShock</span> attack.
<br/> <br/>
The attack succeeded because the HTTP server running on TCP port <span The attack was made possible because the HTTP server running on TCP port <span
className="label label-info">{issue.port}</span> is vulnerable to a shell injection attack on the className="label label-info">{issue.port}</span> was vulnerable to a shell injection attack on the
paths: {this.generateShellshockPathListBadges(issue.paths)}. paths: {this.generateShellshockPathListBadges(issue.paths)}.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
@ -594,8 +593,8 @@ class ReportPageComponent extends React.Component {
className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span className="label label-info" style={{margin: '2px'}}>{issue.ip_address}</span>) is vulnerable to a <span
className="label label-danger">Conficker</span> attack. className="label label-danger">Conficker</span> attack.
<br/> <br/>
The attack succeeded because the target machine uses an outdated and unpatched operating system vulnerable to The attack was made possible because the target machine used an outdated and unpatched operating system
Conficker. vulnerable to Conficker.
</CollapsibleWellComponent> </CollapsibleWellComponent>
</li> </li>
); );