p15670423
/
monkey
1
0
Fork 5
Code Issues Pull Requests 3 Projects Releases Wiki Activity

Update changelog for v1.11.0

This commit is contained in:
Mike Salvatore 2021-08-05 11:23:14 -04:00
parent 420e77ec78
commit f8d8f11429
1 changed files with 37 additions and 32 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

69
CHANGELOG.md
View File

@ -1,9 +1,11 @@
# Changelog # Changelog
All notable changes to this project will be documented in this file. All notable changes to this project will be documented in this
file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/). The format is based on [Keep a
Changelog](https://keepachangelog.com/en/1.0.0/).
## [Unreleased] ## [1.11.0] - 2021-08-XX
### Added ### Added
- PostgreSQL fingerprinter. #892 - PostgreSQL fingerprinter. #892
- A runtime-configurable option to specify a data directory where runtime - A runtime-configurable option to specify a data directory where runtime
@ -13,53 +15,56 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
- A ransomware simulation payload. #1238 - A ransomware simulation payload. #1238
- The capability for a user to specify their own SSL certificate. #1208 - The capability for a user to specify their own SSL certificate. #1208
- API endpoint for ransomware report. #1297 - API endpoint for ransomware report. #1297
- Add ransomware report. #1240 - A ransomware report. #1240
- A script to build a docker image locally. #1140 - A script to build a docker image locally. #1140
### Changed ### Changed
- server_config.json can be selected at runtime. #963 - Select server_config.json at runtime. #963
- Logger configuration can be selected at runtime. #971 - Select Logger configuration at runtime. #971
- `mongo_key.bin` file location can be selected at runtime. #994 - Select `mongo_key.bin` file location at runtime. #994
- Monkey agents are stored in the configurable data_dir when monkey is "run - Store Monkey agents in the configurable data_dir when monkey is "run from the
from the island". #997 island". #997
- Reformated all code using black. #1070 - Reformat all code using black. #1070
- Sorted all imports usind isort. #1081 - Sort all imports usind isort. #1081
- Addressed all flake8 issues. #1071 - Address all flake8 issues. #1071
- Use pipenv for python dependency management. #1091 - Use pipenv for python dependency management. #1091
- Moved unit tests to a dedicated `tests/` directory to improve pytest - Mov unit tests to a dedicated `tests/` directory to improve pytest collection
collection time. #1102 time. #1102
- Default BB test suite behavior: if `--run-performance-tests` flag is not - Skip BB performance tests by default. Run them if `--run-performance-tests`
specified, performance tests are skipped. flag is specified.
- Zerologon exploiter writes runtime artifacts to a secure temporary directory - Write Zerologon exploiter's runtime artifacts to a secure temporary directory
instead of $HOME. #1143 instead of $HOME. #1143
- Authentication mechanism to use bcrypt on server side. #1139 - Put environment config options in `server_config.json` into a separate
- `server_config.json` puts environment config options in a separate section section named "environment". #1161
named "environment". #1161 - Automatically register if BlackBox tests are run on a fresh installation.
- BlackBox tests can now register if they are ran on a fresh installation. #1180 #1180
- Limit the ports used for scanning in blackbox tests. #1368 - Limit the ports used for scanning in blackbox tests. #1368
- Limit the propagation depth of most blackbox tests. #1400 - Limit the propagation depth of most blackbox tests. #1400
- Blackbox tests wait less time for monkeys to die. #1400 - Wait less time for monkeys to die when running BlackBox tests. #1400
- Improved the structure of unit tests by scoping fixtures only to relevant modules - Improve the structure of unit tests by scoping fixtures only to relevant
instead of having a one huge fixture file, improved and renamed the directory modules instead of having a one huge fixture file. #1178
structure of unit tests and unit test infrastructure. #1178 - Improve and rename the directory structure of unit tests and unit test
- MongoDb now gets launched by the Island via python. #1148 infrastructure. #1178
- Create/check data directory on Island init. #1170 - Launch MongoDB when the Island starts via python. #1148
- The formatting of some log messages to make them more readable. #1283 - Create/check data directory on Island initialization. #1170
- Some unit tests to run faster. #1125 - Format some log messages to make them more readable. #1283
- Improve runtime of some unit tests. #1125
### Removed ### Removed
- Relevant dead code as reported by Vulture. #1149 - Relevant dead code as reported by Vulture. #1149
- Island logger config and --logger-config CLI option. #1151 - Island logger config and --logger-config CLI option. #1151
### Fixed ### Fixed
- Attempted to delete a directory when monkey config reset was called. #1054 - Attempt to delete a directory when monkey config reset was called. #1054
- An errant space in the windows commands to run monkey manually. #1153 - An errant space in the windows commands to run monkey manually. #1153
- gevent tracebacks in console output. #859 - Gevent tracebacks in console output. #859
- Crash and failure to run PBAs if max depth reached. #1374 - Crash and failure to run PBAs if max depth reached. #1374
### Security ### Security
- Address minor issues discovered by Dlint. #1075 - Address minor issues discovered by Dlint. #1075
- Generate random passwords when creating a new user (create user PBA, ms08_67 exploit). #1174 - Hash passwords on server-side instead of client side. #1139
- Generate random passwords when creating a new user (create user PBA, ms08_67
exploit). #1174
- Implemented configuration encryption/decryption. #1189, #1204 - Implemented configuration encryption/decryption. #1189, #1204
- Create local custom PBA directory with secure permissions. #1270 - Create local custom PBA directory with secure permissions. #1270
- Create encryption key file for MongoDB with secure permissions. #1232 - Create encryption key file for MongoDB with secure permissions. #1232