Commit Graph

329 Commits

Author SHA1 Message Date
Itay Mizeretz b7f147921e Merge remote-tracking branch 'origin/master' into develop
# Conflicts:
#	monkey_island/cc/main.py
#	monkey_island/cc/ui/src/components/Main.js
2018-02-25 19:15:09 +02:00
Itay Mizeretz ddc93a67fa Fix CR 2018-02-25 18:23:52 +02:00
Itay Mizeretz 38cf36e165 append options to existsing ones 2018-02-25 17:06:40 +02:00
Itay Mizeretz 6f827e5aa9 Add json-loader to package.json 2018-02-25 14:16:57 +02:00
Itay Mizeretz 4364156416 Add server config file and use in frontend+backend 2018-02-22 20:33:40 +02:00
Itay Mizeretz 9bb7148f50 Secure all endpoints 2018-02-22 16:21:03 +02:00
Itay Mizeretz 9e169980e3 Don't query completed steps if not logged in 2018-02-22 16:18:14 +02:00
Itay Mizeretz 28ef2d8708 return 401 on invalid token 2018-02-22 15:43:51 +02:00
Itay Mizeretz c9d644f88a Add login page, and auto redirection to/from login page 2018-02-22 15:23:47 +02:00
Itay Mizeretz 52d75de864 Fix AuthService 2018-02-22 15:22:35 +02:00
Daniel Goldberg f675bed851 CR fixes 2018-02-22 10:59:04 +02:00
Itay Mizeretz df95cc73c5 Make all components with server interaction AuthComponents 2018-02-22 10:36:10 +02:00
Itay Mizeretz e02d282c03 Add AuthService 2018-02-22 10:35:31 +02:00
Itay Mizeretz 4bb569dd89 Add JWT authentication to backend 2018-02-22 10:33:37 +02:00
Itay Mizeretz ee1a321416 Send log to island is configurable 2018-02-19 18:32:05 +02:00
Itay Mizeretz aa02d8945d Replace base64 with string escaping 2018-02-19 17:22:48 +02:00
Daniel Goldberg 3ea4609975 Remove C&C from all textual and code mentions 2018-02-15 15:36:19 +02:00
Itay Mizeretz 70766e7358 Save some space 2018-02-14 16:58:58 +02:00
Itay Mizeretz 86a0e47d15 Add log downloading from map 2018-02-14 15:51:22 +02:00
Itay Mizeretz dbe7a6a378 Add log sending logic to monkey
Add log processing logic to monkey island backend
2018-02-14 15:50:53 +02:00
Itay Mizeretz 06a2e4f18d encrypt credentials in config+telemetry 2018-02-13 16:34:37 +02:00
Itay Mizeretz 29e85100d2 Add global encryptor 2018-02-13 16:29:24 +02:00
Itay Mizeretz 0ed2f74824 Add encryptor 2018-02-13 12:05:01 +02:00
Itay Mizeretz 74deebb280 Fix bug in telemetry 2018-01-19 13:00:38 +02:00
Itay Mizeretz a76cf7e3f8 Always sort telemetry feed 2018-01-19 11:19:49 +02:00
Itay Mizeretz a5eaea8796 Hotfix: live telemetry feed sorted by timestamp 2018-01-19 10:58:24 +02:00
Itay Mizeretz 0a62abe450 Change report title font + resize sub-titles 2018-01-18 21:44:12 +02:00
Itay Mizeretz 56035df461 Most theme updates 2018-01-18 18:33:02 +02:00
Itay Mizeretz e1803a7ff9 Fixed CR 2018-01-16 17:23:17 +02:00
itaymmguardicore 7e77e2d33b
Merge branch 'develop' into feature/report-backend 2018-01-16 16:24:44 +02:00
Itay Mizeretz 4ef0a53026 Content fixes 2018-01-16 10:50:05 +02:00
Itay Mizeretz 1935d2d6a1 Fix temporary hack 2018-01-09 19:25:18 +02:00
Itay Mizeretz 50c674a2af Add telemetry console frontend 2018-01-09 19:19:16 +02:00
Itay Mizeretz 1ab1dbedb1 Add TelemetryFeed entrypoint + all logic 2018-01-09 19:16:18 +02:00
Itay Mizeretz fb5f1f8302 Monkey icon moved to top left 2018-01-02 19:09:41 +02:00
Itay Mizeretz 59203e29a4 Split main function to smaller functions 2018-01-02 12:55:27 +02:00
Itay Mizeretz d76386e8d3 More content fixing 2018-01-02 12:40:31 +02:00
Itay Mizeretz d16f3fee9b Replace monkey logo with new one 2018-01-02 12:37:20 +02:00
Itay Mizeretz 109a9a5cbb Improve printed badge style 2018-01-02 12:34:59 +02:00
Itay Mizeretz 5649fa7043 Content improvements 2017-12-24 18:34:18 +02:00
Itay Mizeretz 6150c6fcc0 Fix bug where machine was popped out 2017-12-24 18:28:01 +02:00
Itay Mizeretz bb27444c35 use quotation marks on linux as well 2017-12-24 14:43:29 +02:00
Itay Mizeretz 6ee26297ef Add contact us at end of report 2017-12-24 12:11:22 +02:00
Itay Mizeretz 15b4a8778b Add V after generating report 2017-12-24 11:23:57 +02:00
Itay Mizeretz e2a622d117 Remove unecessary paragraph 2017-12-19 20:35:06 +02:00
Itay Mizeretz 0c286a3419 Remove statement if there were no infections 2017-12-19 19:02:10 +02:00
Itay Mizeretz c4f9f774af Fix bug running from path with spaces 2017-12-19 18:43:20 +02:00
Itay Mizeretz 6ddb117723 Minor content fix 2017-12-19 17:58:21 +02:00
Itay Mizeretz b0547c4f7a Add legend to report map 2017-12-19 17:58:07 +02:00
Itay Mizeretz 80914716b7 Show minimal info on services.
Make optimization for machine label on report
2017-12-12 17:05:57 +02:00
Itay Mizeretz 8ed439e24e Remove irrelevant sentence+link 2017-12-12 16:39:38 +02:00
Itay Mizeretz 434c72f69f Implemented issues and warnings on overview 2017-12-12 16:33:16 +02:00
Itay Mizeretz f2b631745d Fix bug where stolen credentials had '.' in username 2017-12-12 15:45:32 +02:00
Itay Mizeretz 483394d7f5 Report shows message if no monkeys have been run before 2017-12-12 15:44:38 +02:00
Itay Mizeretz 09e04a3763 Fixed condition for showing suggestion to improve monkey success rate 2017-12-12 15:43:47 +02:00
Itay Mizeretz f2e464f2a6 Report now uses initial config when makes sense 2017-12-12 15:42:24 +02:00
Itay Mizeretz d8aff72da0 Exploits in breached servers are now readable 2017-12-12 13:42:08 +02:00
Itay Mizeretz 2c8b510b0c Exploits used are listed only if they're not the default configuration.
Suggestion to improve monkey success rate appears only if no critical issues were found
2017-12-12 12:45:53 +02:00
Itay Mizeretz c8e553721f Report content fix 2017-12-12 12:07:37 +02:00
Itay Mizeretz 8bc9e3a65f Add warning message if watching report while monkeys are running 2017-12-05 17:01:47 +02:00
Itay Mizeretz f14dc8e2fb Add run info under overview section including zero-patients, interesting config values, and config recommendations. 2017-12-05 16:29:18 +02:00
Itay Mizeretz 013e29b76b Improved style of recommendations 2017-11-28 18:46:39 +02:00
Itay Mizeretz 5690ddc5d7 Add print button, improve printability 2017-11-28 18:34:57 +02:00
Itay Mizeretz e3bd980a12 Replace pie-chart with progress bar 2017-11-28 17:55:38 +02:00
Itay Mizeretz 88ea57dc88 Fix most printing format issues
Improve CSS
Shorten lines
2017-11-28 17:16:58 +02:00
Itay Mizeretz 881cf5e793 Collapsible-Collapsable 2017-11-28 17:12:48 +02:00
Itay Mizeretz da55b0b26b Group recommendations by machine.
Show recommendation with collapsible incident
2017-11-28 17:11:00 +02:00
Itay Mizeretz 96972aeac9 Micro segmentation, not port level segmentation 2017-11-28 14:47:54 +02:00
Itay Mizeretz dff90ab534 Remove duplicate exploits on breached servers 2017-11-28 14:37:11 +02:00
Itay Mizeretz 10375c093e Sort recommendations by machine 2017-11-28 14:33:41 +02:00
Itay Mizeretz 046b18e71c Don't show actual password on stolen creds table 2017-11-28 14:22:11 +02:00
Itay Mizeretz 2aadb12815 Change page structure 2017-11-28 14:16:16 +02:00
Itay Mizeretz 4f6ed95501 Fix bug with exploited nodes 2017-11-28 13:40:51 +02:00
Itay Mizeretz f72b32bb67 Removed duplicate issues 2017-11-27 15:51:56 +02:00
Itay Mizeretz ce10ef00e4 Everything implemented on backend 2017-11-27 15:20:59 +02:00
Itay Mizeretz 82e30040eb Add spaces in time string 2017-11-21 17:39:42 +02:00
Itay Mizeretz 133bd7d80a Following fields use real data now: First monkey time, monkey duration, scanned servers, breached servers, stolen passwords 2017-11-21 17:37:13 +02:00
Itay Mizeretz 35bbd38d2e Report uses data from server now 2017-11-21 16:40:26 +02:00
Itay Mizeretz 83c7c3d13c Report now uses dynamic data 2017-11-21 16:25:39 +02:00
Itay Mizeretz 8632f4d5ca Change machine name to be hostname when possible, and os['version'] otherwise 2017-11-21 13:50:29 +02:00
Itay Mizeretz 4a96c46f3e Some content and cosmetic changes 2017-11-21 11:42:15 +02:00
Itay Mizeretz ebeeabee71 remove , 2017-11-14 16:12:50 +02:00
Itay Mizeretz f787801ab7 Add recommendations to security issues 2017-11-14 16:10:22 +02:00
Itay Mizeretz 13d8d4cfc1 Add scanned-exploited pie chart
Merged stolen passwords section
Styled tables' header
2017-11-14 15:49:14 +02:00
Itay Mizeretz f2e6600d88 Add Stolen Passwords section
Add example of every security issue (both overview and recommendation sections)
Add 'Generating Report' waiting text
2017-11-14 14:48:36 +02:00
Itay Mizeretz c9e6d890e7 Add map to report 2017-11-14 10:59:18 +02:00
Itay Mizeretz 0f2c58b0aa Add skeleton and more of report 2017-11-12 20:52:01 +02:00
Itay Mizeretz 3b30cb9f2d Merge remote-tracking branch 'origin/develop' into feature/report-backend
# Conflicts:
#	monkey_island/cc/resources/monkey.py
2017-11-12 16:22:09 +02:00
Itay Mizeretz 545b49919d Remove mimikatz's stolen credentials from machine's list of stolen creds 2017-11-12 16:20:15 +02:00
Itay Mizeretz 80b709b2ac Add reused passwords 2017-11-12 16:13:40 +02:00
Itay Mizeretz be8feeb3ee Add get config value function 2017-11-12 16:11:12 +02:00
Itay Mizeretz be8d20b2f5 Change creds format in monkey document 2017-11-07 17:02:45 +02:00
Itay Mizeretz b284467fbc Add scanned and exploited to report 2017-11-07 16:33:26 +02:00
Itay Mizeretz 1ad37b1dad Fix bug where 'dead' property of monkey wasn't defined 2017-11-07 14:54:11 +02:00
Itay Mizeretz 8d9068fe40 Add known credentials to monkey documents 2017-11-07 14:52:13 +02:00
Itay Mizeretz e9b6b39a21 Add tunnel info to report 2017-11-07 13:17:02 +02:00
Itay Mizeretz a0dc706a1e Merge branch 'develop' into feature/report-backend
# Conflicts:
#	monkey_island/cc/main.py
2017-11-07 09:53:52 +02:00
Daniel Goldberg 05ddc592ec
Merge pull request #69 from guardicore/feature/add-config-import-export
Feature/add config import export
2017-11-02 19:56:09 +02:00
Itay Mizeretz 2b55258e2e Add current page changes to exported config 2017-10-31 17:09:28 +02:00
Itay Mizeretz 5a2eb9dda4 Implemented import/export buttons 2017-10-31 17:05:16 +02:00