b005946d88
BB: Remove VSFTPD exploiter from BB performance test's config template
2021-10-29 18:17:33 +05:30
ee79ea0a9d
Project: Remove variable 'VSFTPD' from Vulture's allowlist
2021-10-29 18:15:38 +05:30
3f19c0bb3c
Island: Remove config and reporting stuff related to the VSFTPD exploiter
2021-10-29 18:12:40 +05:30
97c50c3caa
UI: Remove components related to the VSFTPD exploiter
2021-10-29 18:12:06 +05:30
40b9b5b730
Agent: Remove VSFTPD exploiter
2021-10-29 17:57:12 +05:30
8ee918b5a2
Merge pull request #1561 from guardicore/1554-authentication-service-refactor
...
Authentication service refactor
2021-10-28 14:47:01 -04:00
28df604d7b
Island: Raise exception instead of returning bool in authenticate()
2021-10-28 14:45:44 -04:00
35509b2671
Merge pull request #1562 from guardicore/1545-telemetry-brief-loading
...
Bugfix: telemetry brief loading
2021-10-28 17:58:38 +03:00
5cfe6de927
Changelog: add entry for fixed #1545
2021-10-28 10:49:25 -04:00
730565c2aa
Island: Add missing typehints to AuthenticationService
2021-10-28 09:28:02 -04:00
5e7a252a6b
Island: Rename KEY_FILE_DIRECTORY -> DATA_DIR
...
Neither the AuthenticationService, nor the function that initializes it
needs to know what the data_dir is for. AuthenticationService only needs
to know that datastore_encryptor needs it, but not why.
2021-10-28 09:28:02 -04:00
c3412ac58f
Tests: Add unit tests for Authentication resource
2021-10-28 09:28:02 -04:00
d51f331453
Tests: Add unit tests for Registration resource
2021-10-28 09:28:02 -04:00
6e5b4cc793
Island: Move password_matches_hash() to AuthenticationService
2021-10-28 09:28:02 -04:00
1be7232983
Island: Rename and relocate methods in AuthenticationService
2021-10-28 09:28:02 -04:00
8a2bae7e14
Island: Move authentication logic into AuthenticationService
2021-10-28 09:28:02 -04:00
17f7e22584
Island: Add needs_registration() to AuthenticationService
2021-10-28 09:28:02 -04:00
252c1d940a
Island: Remove "auth user"
2021-10-28 09:28:02 -04:00
6bdba71b69
Island: Remove _is_credentials_set_up() from Environment
2021-10-28 09:28:02 -04:00
caa62c6272
Island: Remove _credentials_required property from Environment
...
Since #1418 , credentials are always required, rendering the
_credentials_required property of the Environment class obsolete.
2021-10-28 09:28:02 -04:00
6736699cf4
Island: Remove disused TestingEnvironment
2021-10-28 09:28:02 -04:00
bfad0256f8
Island: Remove UserStore
2021-10-28 09:28:02 -04:00
bb806522a1
Island: Rename get_users() -> get_user()
...
This function only ever returns one user. The plural name "get_users()"
is misleading. Returning a list is also misleading.
2021-10-28 09:28:02 -04:00
a5d3c218b4
Island: Move registration logic into AuthenticationService
...
Resoures should be kept relatively thin and serve as the layer between
the API and the backend.
2021-10-28 09:28:02 -04:00
063286e899
UI: fix long telemetry log loading bug
2021-10-28 16:22:24 +03:00
97327f08a2
UI: add loading icon to TelemetryLog.tsx
2021-10-28 16:21:26 +03:00
7425bf1bbd
UI: refactor TelemetryLog component out of MapPage and migrate it to hook with typescript
2021-10-28 14:39:30 +03:00
7f903efb07
Project: open correct web address when starting UI in development mode (npm start)
...
When UI is started in development mode, browser window is opened to 0.0.0.0:8000, instead it should be local-ip:8000. This commit fixes this problem
2021-10-28 11:36:37 +03:00
953816b536
Docs: Add v1.12.0 checksums
2021-10-27 10:21:53 -04:00
8554ab6fd5
Merge branch 'release/1.12.0' into develop
2021-10-27 10:15:02 -04:00
d5e12725a9
Changelog: Release v1.12.0
2021-10-27 10:14:36 -04:00
bc5ca5b613
Docs: Add --tty and --interactive to docker commands
...
These options allow the monkey-island docker container to be killed with
<CTRL-C>
2021-10-27 07:58:39 -04:00
a55f86ceea
Docs: Update Zerologon documentation to mention that brute force exploiters use its stolen creds
2021-10-26 19:58:11 +05:30
ea31d27bf1
Island: Update Zerologon's description in the configuration
2021-10-26 19:58:11 +05:30
1ad74a4bff
BB: fix zerologon test to check propagation via SMB as well
...
ZeroLogon doesn't propagate to the machine it only steals the credentials. It's best to make sure that propagation is also possible by running SMB exploiter
2021-10-26 10:21:36 -04:00
820d47c9cc
Agent: Change logic for generating random password
2021-10-26 19:39:34 +05:30
b8ed464909
Merge pull request #1550 from guardicore/config_import_fix
...
Config import fix
2021-10-26 09:57:48 -04:00
aa6f202a8f
Island: change the log message level of wrong password in password_based_bytes_encryptor.py to debug
...
Wrong password is in some cases expected behavior, not an error of an application
2021-10-26 15:47:33 +03:00
8e6a2d8e7d
UI: bugfix the need to double click on the import when importing an encrypted configuration
...
When back-end sends the schema for ui to validate that no unsafe options are selected, UI didn't automatically send a response back in case there were no unsafe options selected
2021-10-26 15:23:07 +03:00
2df588ca59
Changelog: Add missing period
2021-10-25 14:56:29 -04:00
bc3b1b274f
Changelog: Formatting changes and other small fixes
2021-10-25 14:40:28 -04:00
1b74119812
Merge pull request #1548 from guardicore/update-docker-docs
...
Docs: Update docker Upgrading section
2021-10-25 13:03:08 -04:00
c91d922277
Docs: Clarify "upgrade proceedure" for docker
2021-10-25 12:58:30 -04:00
d14e4dee31
Docs: Reword Docker upgrading section
2021-10-25 18:54:28 +02:00
b91120a677
Merge pull request #1549 from guardicore/docker_data_dir_fix
...
Docker data dir fix
2021-10-25 12:26:14 -04:00
01f8488b07
UT's: assert correct behavior on docker if empty data directory is present and if no version file, but other files are present in the data directory
2021-10-25 18:30:53 +03:00
9ef9ba0024
Island: improve and fix data directory exception handling/logging
2021-10-25 18:29:44 +03:00
a399e8a0ea
Docs: reverted the numbering to use 1. instead of manual numeration in docker.md
2021-10-25 17:30:25 +03:00
cebd41b264
Build: change docker container to set MONKEY_DOCKER_CONTAINER env var. This variable is needed because we can't prompt for data dir removal on docker like we do on other deployments
...
Due to the fact that docker is not running interactively and user might be running on an old data dir if he uses volumes, we need special case for docker
2021-10-25 17:11:31 +03:00
9f9744a77f
Docs: Update docker Upgrading section
2021-10-25 15:21:04 +02:00
Shreya Malviya
Mike Salvatore
VakarisZ
VakarisZ
Ilija Lazoroski