From f8d8f114292bc3810ce30afd33b798cd4fc7caab Mon Sep 17 00:00:00 2001 From: Mike Salvatore Date: Thu, 5 Aug 2021 11:23:14 -0400 Subject: [PATCH] Update changelog for v1.11.0 --- CHANGELOG.md | 69 ++++++++++++++++++++++++++++------------------------ 1 file changed, 37 insertions(+), 32 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 59d20c442..07cff7e79 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,9 +1,11 @@ # Changelog -All notable changes to this project will be documented in this file. +All notable changes to this project will be documented in this +file. -The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). +The format is based on [Keep a +Changelog](https://keepachangelog.com/en/1.0.0/). -## [Unreleased] +## [1.11.0] - 2021-08-XX ### Added - PostgreSQL fingerprinter. #892 - A runtime-configurable option to specify a data directory where runtime @@ -13,53 +15,56 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). - A ransomware simulation payload. #1238 - The capability for a user to specify their own SSL certificate. #1208 - API endpoint for ransomware report. #1297 -- Add ransomware report. #1240 +- A ransomware report. #1240 - A script to build a docker image locally. #1140 ### Changed -- server_config.json can be selected at runtime. #963 -- Logger configuration can be selected at runtime. #971 -- `mongo_key.bin` file location can be selected at runtime. #994 -- Monkey agents are stored in the configurable data_dir when monkey is "run - from the island". #997 -- Reformated all code using black. #1070 -- Sorted all imports usind isort. #1081 -- Addressed all flake8 issues. #1071 +- Select server_config.json at runtime. #963 +- Select Logger configuration at runtime. #971 +- Select `mongo_key.bin` file location at runtime. #994 +- Store Monkey agents in the configurable data_dir when monkey is "run from the + island". #997 +- Reformat all code using black. #1070 +- Sort all imports usind isort. #1081 +- Address all flake8 issues. #1071 - Use pipenv for python dependency management. #1091 -- Moved unit tests to a dedicated `tests/` directory to improve pytest - collection time. #1102 -- Default BB test suite behavior: if `--run-performance-tests` flag is not - specified, performance tests are skipped. -- Zerologon exploiter writes runtime artifacts to a secure temporary directory +- Mov unit tests to a dedicated `tests/` directory to improve pytest collection + time. #1102 +- Skip BB performance tests by default. Run them if `--run-performance-tests` + flag is specified. +- Write Zerologon exploiter's runtime artifacts to a secure temporary directory instead of $HOME. #1143 -- Authentication mechanism to use bcrypt on server side. #1139 -- `server_config.json` puts environment config options in a separate section - named "environment". #1161 -- BlackBox tests can now register if they are ran on a fresh installation. #1180 +- Put environment config options in `server_config.json` into a separate + section named "environment". #1161 +- Automatically register if BlackBox tests are run on a fresh installation. + #1180 - Limit the ports used for scanning in blackbox tests. #1368 - Limit the propagation depth of most blackbox tests. #1400 -- Blackbox tests wait less time for monkeys to die. #1400 -- Improved the structure of unit tests by scoping fixtures only to relevant modules - instead of having a one huge fixture file, improved and renamed the directory - structure of unit tests and unit test infrastructure. #1178 -- MongoDb now gets launched by the Island via python. #1148 -- Create/check data directory on Island init. #1170 -- The formatting of some log messages to make them more readable. #1283 -- Some unit tests to run faster. #1125 +- Wait less time for monkeys to die when running BlackBox tests. #1400 +- Improve the structure of unit tests by scoping fixtures only to relevant + modules instead of having a one huge fixture file. #1178 +- Improve and rename the directory structure of unit tests and unit test + infrastructure. #1178 +- Launch MongoDB when the Island starts via python. #1148 +- Create/check data directory on Island initialization. #1170 +- Format some log messages to make them more readable. #1283 +- Improve runtime of some unit tests. #1125 ### Removed - Relevant dead code as reported by Vulture. #1149 - Island logger config and --logger-config CLI option. #1151 ### Fixed -- Attempted to delete a directory when monkey config reset was called. #1054 +- Attempt to delete a directory when monkey config reset was called. #1054 - An errant space in the windows commands to run monkey manually. #1153 -- gevent tracebacks in console output. #859 +- Gevent tracebacks in console output. #859 - Crash and failure to run PBAs if max depth reached. #1374 ### Security - Address minor issues discovered by Dlint. #1075 -- Generate random passwords when creating a new user (create user PBA, ms08_67 exploit). #1174 +- Hash passwords on server-side instead of client side. #1139 +- Generate random passwords when creating a new user (create user PBA, ms08_67 + exploit). #1174 - Implemented configuration encryption/decryption. #1189, #1204 - Create local custom PBA directory with secure permissions. #1270 - Create encryption key file for MongoDB with secure permissions. #1232