c075fed2da
BB: Remove 'PingScanner' from fingerprinters in config templates
2022-02-28 13:18:07 -05:00
6c7e630465
BB: Remove ElasticGroovyExploiter references
2022-02-24 15:14:32 +05:30
ddc77e6d6a
Zoo: Remove ShellShock Exploiter
2022-02-23 13:50:12 +01:00
7787984f4a
BB: Remove ProcessListCollector from BB config templates
2022-02-16 17:31:40 +05:30
e1cf4fa9c2
Merge branch 'release/1.13.0' into agent-refactor
2022-01-25 13:35:49 -05:00
28cf8b55cf
BB: modified performance config template to contain log4shell machines
2022-01-25 15:16:32 +02:00
212fb3a653
BB: black format config_generation_script.py
2022-01-18 15:23:59 +02:00
e3f9312ff9
BB: change log4j exploit depth to 1 (default)
...
This change is necessary to make sure that exploitation is successfull from a particular machine being tested.
2022-01-18 11:44:47 +02:00
311a721880
BB: Fix IP address for Tomcat machines
2022-01-17 16:34:56 +01:00
77eb3ce004
BB: Added log4j configs to the list of manually generatable configs
2022-01-17 11:40:31 +02:00
be79f2bcdb
BB: add log4j machines to gcp machine list
2022-01-14 14:51:18 +02:00
a7b31dd9e4
BB: add log4shell BB tests
2022-01-13 16:11:10 +02:00
86f2a0dc78
BB: remove deleted system info collectors from config templates
2021-11-17 12:59:34 +02:00
f5c8db979f
Project: remove remaining sambacry exploiter references in performance.py config template, vulture_allowlist.py and monkey_config_standard.json unit test data file
2021-11-10 15:44:05 +02:00
b005946d88
BB: Remove VSFTPD exploiter from BB performance test's config template
2021-10-29 18:17:33 +05:30
1ad74a4bff
BB: fix zerologon test to check propagation via SMB as well
...
ZeroLogon doesn't propagate to the machine it only steals the credentials. It's best to make sure that propagation is also possible by running SMB exploiter
2021-10-26 10:21:36 -04:00
8d7a5a410c
BB: Remove ".\\m0nk3y" user from Powershell user list
...
This user was added to work around issue #1486 . Since d4a1c2bda resolves
that issue, this user can be removed from the config for this test.
2021-10-19 08:23:07 -04:00
6787cce1d0
Zoo: Change API registration parameter
2021-10-14 14:52:13 +02:00
a438f3afb0
Zoo: Replace --os with --skip-powershell-reuse
...
With this logic the powershell cached will run
if we don't provide the cli param --skip-powershell-reuse.
2021-09-28 17:31:20 +02:00
07c08ac0b6
Zoo: Reformat powershell cached credentials test
2021-09-27 19:02:13 +02:00
689e6ac532
Zoo: Add os specific black box test.
...
Add new --os flag to the blackbox tests.
If not specified it will skip all os marked tests.
2021-09-27 13:08:52 +02:00
b90e9ccf21
Zoo: Add second hop bb test
...
Added new powershell-3-48 machine for second hop test.
Explanation why cached are not working after the first hop.
Documentation for the zoo.
2021-09-24 15:29:11 +02:00
b69916428b
Remove T1129 attack technique from the codebase
2021-09-17 14:19:42 +03:00
dec2fc43c2
Merge pull request #1449 from guardicore/powershell-exploiter-ntlm-hashes
...
Use LM and NT hashes in powershell exploiter
2021-09-09 11:56:02 +03:00
d27194c568
Zoo: Fix powershell bb config for ntlm hash
2021-09-06 13:50:24 +02:00
57908b94eb
Merge pull request #1452 from guardicore/1418/bb-to-use-credentials
...
Zoo: Change island to use credentials
2021-09-06 10:28:39 +03:00
1e5d49024d
Zoo: Change island to use credentials
2021-09-06 09:17:15 +02:00
18c21513af
Zoo: Add new machine for powershell exploiter
2021-09-02 17:06:22 +02:00
d22c7813a5
BB: Switch the scanning order in tunneling tests
...
Because the SMB exploiter deploys the 32-bit agent, which will then
upgrade itself to 64-bit, it takes a long time between when exploitation
is successful and the agent calls home. By switching the order that
hosts are scanned in, this test runs approximately 25 seconds quicker
and allows us to reduce the `keep_tunnel_open_time` setting by 30
seconds.
2021-08-30 13:28:25 -04:00
54f80df1f4
bb: Remove extra line from end of file
2021-08-30 15:12:35 +05:30
9a96e6ed39
Zoo: Refactor start and stop gcp machine functions
2021-08-26 10:35:22 +02:00
e6ca0fd3b6
Zoo: Parallelize start and stop of gcp machines
2021-08-25 10:07:41 +02:00
5cee9443ff
Zoo: Remove GCPHandler class. Powershell-3-47 renamed to
...
Powershell-3-46. Powershell-45 moved to different zone
2021-08-24 15:11:22 +02:00
9f2a4cb7e4
Zoo: Update terraform scripts. Update gcp test machine list with new zone
2021-08-24 11:56:09 +02:00
305b2cf716
Zoo: Add PowerShell config and bb test
2021-08-24 10:32:54 +02:00
087c8f2cf8
BB: Remove internet_services from BaseTemplate
2021-08-19 14:16:44 -04:00
e393374ae6
BB: Increase scope depth for Struts2
2021-08-05 10:36:33 +02:00
f6b52d9031
BB: Don't wait so long for monkeys to die
...
With the propagation depth set to 1 for most tests and the number of
scanned ports limited, we don't need such a large delay when waiting for
monkeys to die.
2021-08-04 15:06:11 -04:00
ee77869357
BB: Limit propagation depth to 1 for most tests
2021-08-04 15:06:03 -04:00
c34a303628
BB: Limit scanned ports for SMB PTH test
2021-08-04 13:54:17 -04:00
8d992f41d3
BB: Update config_values with smb_pth settings
2021-08-04 13:54:17 -04:00
e946b547c7
BB: Limit scanned ports for WMI PTH test
2021-08-04 13:54:13 -04:00
0c23568756
BB: Limit scanned ports for zerologon test
2021-08-04 13:31:39 -04:00
4d9162d168
BB: Limit scanned ports for weblogic test
2021-08-04 13:28:46 -04:00
5143d03915
BB: Fix "Strtuts2" typo
2021-08-04 13:15:49 -04:00
472c54814a
BB: Limit scanned ports for struts exploiter
2021-08-04 13:15:24 -04:00
efd512cbad
BB: Limit scanned ports for wmi and mimikatz
2021-08-04 12:57:08 -04:00
833ebf9fd0
BB: Limit scanned ports for smb and mimikatz
2021-08-04 12:56:42 -04:00
3136921beb
BB: Limit scanned ports for hadoop test
2021-08-04 12:36:23 -04:00
862a64b303
BB: Improve Drupal performance
2021-08-04 15:45:02 +02:00
Mike Salvatore
Shreya Malviya
Ilija Lazoroski
vakarisz
VakarisZ