2e48d9ead9
Agent: Return PostBreachData in PBA's run() instead of sending PostBreachTelem
2022-03-29 14:18:22 +03:00
936b9ead05
Agent: Change post breach telem to use name from data argument
2022-03-29 10:26:00 +00:00
3c853b6625
Agent: Change PostBreachTelemetry to accept post breach data
2022-03-29 10:26:00 +00:00
299a261387
Agent: Refactor puppet and tools to use CONNECTION_TIMEOUT
2022-03-29 06:28:45 +00:00
1ec5be908d
Merge pull request #1819 from guardicore/1612-interruptible-ransomware
...
1612 interruptible ransomware
2022-03-28 09:15:30 -04:00
0877b0a885
Agent: Load PBA's into puppet
2022-03-28 09:29:31 +00:00
f67a455868
Agent: Add comment to Ransomware.encrypt_files()
2022-03-25 13:33:16 -04:00
593095cdcf
Agent: Reword a log message in ransomware payload
2022-03-25 13:33:16 -04:00
7047fa0cd0
Agent: Use interruptible_function decorator in ransomware payload
2022-03-25 13:33:16 -04:00
20e3b20cb5
Agent: Add interruptible_function decorator
2022-03-25 13:33:16 -04:00
7c6ba2e276
Agent: Use iterators instead of lists for ransomware file filtering
2022-03-25 13:33:15 -04:00
703dc315bc
Agent: Remove disused Plugin abstract class
2022-03-25 08:34:45 -04:00
f3773ddbaa
Agent: Remove disused list_object() function
2022-03-25 07:57:54 -04:00
344530281a
Common: Remove disused function get_value_from_dict()
2022-03-25 07:57:54 -04:00
bb854d2daf
Island: Remove disused GROUPTYPE constant
2022-03-25 07:57:54 -04:00
9c64ee592f
Island: Remove disused NodeCreationException
2022-03-25 07:57:54 -04:00
dda922d06f
Agent: Add display_name to PostBreachData
2022-03-25 13:09:10 +05:30
196f814860
Agent: Remove PBA's dependency on Plugin
2022-03-25 12:54:03 +05:30
db03ac3dd9
Agent: Use random binary destination path for Hadoop
2022-03-24 14:59:51 -04:00
b3b5707a45
Agent: Convert dest_path to str before performing comparison
2022-03-24 12:51:07 -04:00
8aad5b16d5
Agent: Fix tunnel address parsing in _close_tunnel()
...
The current proxy schema specifies that tunnels start with "http://",
not "https://". This lead to a bug in the tunnel address parsing which
prevented the tunnel from being quit properly.
2022-03-24 12:27:22 -04:00
ef134be044
Agent: Remove default servers from WormConfiguration.command_servers
...
In my 16 months working on this project, the default server included in
WormConfiguration.command_servers has never had a Monkey Island running
on it. This adds a 30 second delay to each hop in the tunneling test as
the agent attempts to contact this bogus IP. Removing it speeds up
propagation and also avoids unintended consequences if a user has a
different service running on 192.0.2.0:5000.
2022-03-24 11:10:22 -04:00
996f2b3c7a
Agent: Fix unnecessary waiting in MonkeyTunnel
...
The monkey tunnel only needs to wait before closing if propagation was
successful. Previously, it waited before closing if any exploiter was
run.
PR: #1811
2022-03-24 11:05:05 -04:00
2471eb6762
Merge pull request #1810 from guardicore/1782-log4shell
...
1782 log4shell
2022-03-24 10:50:46 -04:00
25c7696300
Agent: Change typehints of agent destination path to PurePath
2022-03-24 14:47:07 +00:00
49d3433ade
Agent: Change to more specific typehint in helpers.py
2022-03-24 14:36:20 +00:00
707c79ab21
Agent: Reduce proxy timeouts from 30 to 10 seconds
...
Stopping the agent is delayed by these timeouts. Reducing them allows
the agent to stop more rapidly on average.
Fixes #1372
2022-03-24 08:37:03 -04:00
087027b20c
Agent: Change WMI exploiter to use random agent name
2022-03-24 07:25:46 -04:00
1436be6428
Agent: Fix propagation success toggle in log4shell
...
Propagation will only be marked successful if the agent got downloaded, not if the java class got downloaded
2022-03-24 10:39:41 +00:00
90b4038c14
Agent: Use random agent name in log4shell exploiter
2022-03-24 10:37:57 +00:00
dc2a63475b
Agent: Fix incorrect monkey destination path bug
...
This bug happened because Path will always cast path to current OS path and if target OS is different the path won't work. By explicitly casting the path to target OS type we get a path for target OS
2022-03-24 10:31:41 +00:00
8ad31593b1
Merge pull request #1803 from guardicore/1788-powershell-ssl-detection
...
PowerShell SSL detection
2022-03-24 13:28:10 +05:30
cbf9544e58
Merge pull request #1805 from guardicore/1782-smb
...
Agent: Convert destination path to string in SMB exploiter
2022-03-24 07:39:48 +00:00
c09428dde9
Agent: Move path to string translation to smb_tools from smbexec
2022-03-24 07:38:43 +00:00
45658b5559
Agent: Skip empty password attempts in PowerShell if HTTP disabled
2022-03-23 19:20:42 -04:00
06899be264
Tests: Fix tests for PowerShellExploiter
2022-03-23 14:47:19 -04:00
c28e200a25
Agent: Remove disused PowerShellRemotingDisabledError
2022-03-23 14:43:59 -04:00
385449101d
Tests: Move host fixtures to conftest.py
2022-03-23 14:43:59 -04:00
3d7586f713
Agent: Fix edge case handling in auth_options._get_ssl()
...
If the host has neither the HTTP or HTTPS port enabled, return False.
2022-03-23 14:43:59 -04:00
4b84ba3fc0
Tests: Fix unit tests for powershell_utils.auth_options
2022-03-23 14:43:59 -04:00
e947f335ff
Agent: Remove unused functions in PowerShell exploiter
2022-03-23 14:43:59 -04:00
4614e2207d
Agent: Decide if SSL is to be used in auth_options.py
2022-03-23 14:43:59 -04:00
6d9e18fdc9
Island: Add 5985 and 5986 to TCP ports
2022-03-23 14:43:59 -04:00
51cfb73ce0
Agent: User random binary destination path for MSSQL Exploit
2022-03-23 14:42:10 -04:00
cad5fa4897
Agent: Use random binary destination path for SSH Exploit
2022-03-23 14:41:06 -04:00
82b6cdbad5
Merge pull request #1804 from guardicore/1782-powershell
...
Agent: Upload binary with random string when using powershell
2022-03-23 14:33:25 -04:00
99b8321271
Tests: Fix broken PowerShellExploiter tests
2022-03-23 14:32:08 -04:00
d3fc833813
Agent: Use Paths in IPowerShellClient.copy_file()
2022-03-23 14:25:28 -04:00
1e28599398
Agent: Make ZeroLogon interruptibale
2022-03-23 14:14:47 -04:00
56bdcbeddd
Agent: Pull paramiko from specific tag
...
Co-authored-by: vakarisz <vakarisz@yahoo.com>
2022-03-23 11:34:13 -04:00
Shreya Malviya
vakarisz
Mike Salvatore
Ilija Lazoroski
VakarisZ