p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Techniques' unscanned messages' phrasing changes

This commit is contained in:
Shreya 2020-07-26 20:16:58 +05:30
parent 92ab1ad2f2
commit 877b08fa6b
11 changed files with 11 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
monkey/monkey_island/cc/services/attack/technique_reports/T1035.py
View File

@ -6,7 +6,7 @@ __author__ = "VakarisZ"
class T1035(UsageTechnique):
tech_id = "T1035"
unscanned_msg = "Monkey didn't try to interact with Windows services since it found no Windows machines."
unscanned_msg = "Monkey didn't try to interact with Windows services since it didn't run on any Windows machines."
scanned_msg = "Monkey tried to interact with Windows services, but failed."
used_msg = "Monkey successfully interacted with Windows services."

2
monkey/monkey_island/cc/services/attack/technique_reports/T1053.py
View File

@ -7,7 +7,7 @@ __author__ = "shreyamalviya"
class T1053(PostBreachTechnique):
tech_id = "T1053"
unscanned_msg = "Monkey didn't try scheduling a job on Windows since it found no Windows machines."
unscanned_msg = "Monkey didn't try scheduling a job on Windows since it didn't run on any Windows machines."
scanned_msg = "Monkey tried scheduling a job on the Windows system but failed."
used_msg = "Monkey scheduled a job on the Windows system."
pba_names = [POST_BREACH_JOB_SCHEDULING]

2
monkey/monkey_island/cc/services/attack/technique_reports/T1075.py
View File

@ -7,7 +7,7 @@ __author__ = "VakarisZ"
class T1075(AttackTechnique):
tech_id = "T1075"
unscanned_msg = "Monkey didn't try to use pass the hash attack since it found no Windows machines."
unscanned_msg = "Monkey didn't try to use pass the hash attack since it didn't run on any Windows machines."
scanned_msg = "Monkey tried to use hashes while logging in but didn't succeed."
used_msg = "Monkey successfully used hashed credentials."

2
monkey/monkey_island/cc/services/attack/technique_reports/T1086.py
View File

@ -7,7 +7,7 @@ __author__ = "VakarisZ"
class T1086(AttackTechnique):
tech_id = "T1086"
unscanned_msg = "Monkey didn't run powershell since it found no Windows machines."
unscanned_msg = "Monkey didn't run powershell since it didn't run on any Windows machines."
scanned_msg = ""
used_msg = "Monkey successfully ran powershell commands on exploited machines in the network."

2
monkey/monkey_island/cc/services/attack/technique_reports/T1129.py
View File

@ -6,7 +6,7 @@ __author__ = "VakarisZ"
class T1129(UsageTechnique):
tech_id = "T1129"
unscanned_msg = "Monkey didn't try to load any DLLs since it found no Windows machines."
unscanned_msg = "Monkey didn't try to load any DLLs since it didn't run on any Windows machines."
scanned_msg = "Monkey tried to load DLLs, but failed."
used_msg = "Monkey successfully loaded DLLs using Windows module loader."

2
monkey/monkey_island/cc/services/attack/technique_reports/T1154.py
View File

@ -7,7 +7,7 @@ __author__ = "shreyamalviya"
class T1154(PostBreachTechnique):
tech_id = "T1154"
unscanned_msg = "Monkey didn't use the trap command since it found no Linux machines."
unscanned_msg = "Monkey didn't use the trap command since it didn't run on any Linux machines."
scanned_msg = "Monkey tried using the trap command but failed."
used_msg = "Monkey used the trap command successfully."
pba_names = [POST_BREACH_TRAP_COMMAND]

2
monkey/monkey_island/cc/services/attack/technique_reports/T1156.py
View File

@ -8,7 +8,7 @@ __author__ = "shreyamalviya"
class T1156(PostBreachTechnique):
tech_id = "T1156"
unscanned_msg = "Monkey didn't try modifying bash startup files since it found no Linux machines."
unscanned_msg = "Monkey didn't try modifying bash startup files since it didn't run on any Linux machines."
scanned_msg = "Monkey tried modifying bash startup files but failed."
used_msg = "Monkey successfully modified bash startup files."
pba_names = [POST_BREACH_SHELL_STARTUP_FILE_MODIFICATION]

2
monkey/monkey_island/cc/services/attack/technique_reports/T1166.py
View File

@ -7,7 +7,7 @@ __author__ = "shreyamalviya"
class T1166(PostBreachTechnique):
tech_id = "T1166"
unscanned_msg = "Monkey didn't try setting the setuid or setgid bits since it found no Linux machines."
unscanned_msg = "Monkey didn't try setting the setuid or setgid bits since it didn't run on any Linux machines."
scanned_msg = "Monkey tried setting the setuid or setgid bits but failed."
used_msg = "Monkey successfully set the setuid or setgid bits."
pba_names = [POST_BREACH_SETUID_SETGID]

2
monkey/monkey_island/cc/services/attack/technique_reports/T1168.py
View File

@ -7,7 +7,7 @@ __author__ = "shreyamalviya"
class T1168(PostBreachTechnique):
tech_id = "T1168"
unscanned_msg = "Monkey didn't try scheduling a job on Linux since it found no Linux machines."
unscanned_msg = "Monkey didn't try scheduling a job on Linux since it didn't run on any Linux machines."
scanned_msg = "Monkey tried scheduling a job on the Linux system but failed."
used_msg = "Monkey scheduled a job on the Linux system."
pba_names = [POST_BREACH_JOB_SCHEDULING]

2
monkey/monkey_island/cc/services/attack/technique_reports/T1197.py
View File

@ -6,7 +6,7 @@ __author__ = "VakarisZ"
class T1197(AttackTechnique):
tech_id = "T1197"
unscanned_msg = "Monkey didn't try to use any bits jobs since it found no Windows machines."
unscanned_msg = "Monkey didn't try to use any bits jobs since it didn't run on any Windows machines."
scanned_msg = "Monkey tried to use bits jobs but failed."
used_msg = "Monkey successfully used bits jobs at least once in the network."

2
monkey/monkey_island/cc/services/attack/technique_reports/T1504.py
View File

@ -8,7 +8,7 @@ __author__ = "shreyamalviya"
class T1504(PostBreachTechnique):
tech_id = "T1504"
unscanned_msg = "Monkey didn't try modifying powershell startup files since it found no Windows machines."
unscanned_msg = "Monkey didn't try modifying powershell startup files since it didn't run on any Windows machines."
scanned_msg = "Monkey tried modifying powershell startup files but failed."
used_msg = "Monkey successfully modified powershell startup files."
pba_names = [POST_BREACH_SHELL_STARTUP_FILE_MODIFICATION]