p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Island: Use ICredentialsRepository to get configured passwords

This commit is contained in:
Mike Salvatore 2022-07-13 15:04:49 -04:00
parent e349a78334
commit 4fd5f0a8a5
1 changed files with 15 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
monkey/monkey_island/cc/services/reporting/report.py
View File

@ -4,7 +4,6 @@ import logging
from itertools import chain, product from itertools import chain, product
from typing import List from typing import List
from common.config_value_paths import PASSWORD_LIST_PATH
from common.credentials import CredentialComponentType from common.credentials import CredentialComponentType
from common.network.network_range import NetworkRange from common.network.network_range import NetworkRange
from common.network.segmentation_utils import get_ip_in_src_and_not_in_dst from common.network.segmentation_utils import get_ip_in_src_and_not_in_dst
@ -12,7 +11,6 @@ from monkey_island.cc.database import mongo
from monkey_island.cc.models import Monkey from monkey_island.cc.models import Monkey
from monkey_island.cc.models.report import get_report, save_report from monkey_island.cc.models.report import get_report, save_report
from monkey_island.cc.repository import IAgentConfigurationRepository, ICredentialsRepository from monkey_island.cc.repository import IAgentConfigurationRepository, ICredentialsRepository
from monkey_island.cc.services.config import ConfigService
from monkey_island.cc.services.configuration.utils import ( from monkey_island.cc.services.configuration.utils import (
get_config_network_segments_as_subnet_groups, get_config_network_segments_as_subnet_groups,
) )
@ -401,9 +399,21 @@ class ReportService:
) )
return [u.username for u in usernames] return [u.username for u in usernames]
@staticmethod @classmethod
def get_config_passwords(): def get_config_passwords(cls):
return ConfigService.get_config_value(PASSWORD_LIST_PATH, True) passwords = []
configured_credentials = cls._credentials_repository.get_configured_credentials()
for credentials in configured_credentials:
passwords = chain(
passwords,
(
secret
for secret in credentials.secrets
if secret.credential_type == CredentialComponentType.PASSWORD
),
)
return [p.password for p in passwords]
@classmethod @classmethod
def get_config_exploits(cls): def get_config_exploits(cls):