61344f9861
Merge pull request #1792 from guardicore/1741-add-smb-to-puppet
...
1741 add smb to puppet
2022-03-21 08:16:24 -04:00
753f00de65
Agent: Put timestamp before random string in log names
...
Putting the timestamp before the random string in the agent and dropper
log names allows them to be sorted by time.
2022-03-20 20:40:35 -04:00
415f3e6468
Agent: Remove smb_service_name configuration option
...
This option is never changed and can be more easily stored as a
constant.
2022-03-18 13:38:02 -04:00
8b4d1d084e
Changelog: Improve message for removing log path config options
2022-03-10 09:11:06 -05:00
0947e41ea9
Changelog: Add entry for changing log file name
2022-03-10 12:39:50 +01:00
03145a1392
Changelog: Add changelog entry for human-readable thread names
2022-03-09 10:04:45 -05:00
145078839d
Merge branch '1675-remove-32-bit-agents' into agent-refactor
...
PR #1758
2022-03-02 08:49:52 -05:00
46eb8a4484
CHANGELOG: Add changelog entries for removing 32-bit agents.
2022-03-02 06:50:15 -05:00
458b2121cd
Changelog: added entry for removed T1082 attack technique report
2022-03-01 16:16:06 +02:00
caa6405315
Agent: Change agent permissions to 700 in SSH exploiter
...
Changing the permissions to 777 introduces a security risk into the
target host. A malicious attacker with local access can potentially
modify the binary, resulting in code execution and privilege escalation
when the attacking agent launches the agent on the victim.
Issue #1750
2022-02-28 13:18:07 -05:00
7e362283fa
Changelog: Add entry for removing the Elastic Search exploiter
2022-02-24 19:14:20 +05:30
55c3236d8e
Changelog: Remove ShellShock exploiter
2022-02-23 10:24:23 -05:00
095572f919
Merge branch '1606-run-credential-collectors' into agent-refactor
...
PR #1719
2022-02-17 09:30:01 -05:00
cc27dc9710
Changelog: Add changelog entry for SSHCollector
2022-02-16 15:17:13 -05:00
123f0aab16
Changelog: Add entry for process list collection PBA
2022-02-16 17:09:13 +05:30
fb8847b5c5
Agent: Remove sambacry binaries from monkey spec
...
PR #1698
2022-02-09 08:25:20 -05:00
9a88ac3ed8
Changelog: Add entry for ScoutSuite removal
2022-02-09 14:28:00 +05:30
e224470161
Changelog: Add entry for removal of agent's bootloader
2022-02-01 18:27:51 +01:00
d257276f30
Changelog: Add entry for removal of MS08-067 exploiter
2022-01-31 08:15:43 -05:00
8371a268ba
Island: Change the order of log messages on startup to improve UX
...
Some users were confused when the Island started up and thought it had
frozen. I hope to alleviate this confusion by changing the order of the
log messages. If the last message displayed after initialization
gives the user instructions on accessing the island, hopefully users
will no longer be confused.
PR #1684
2022-01-26 12:09:43 -05:00
e1cf4fa9c2
Merge branch 'release/1.13.0' into agent-refactor
2022-01-25 13:35:49 -05:00
fed7d050be
Changelog: Update version and release date for v1.13.0
2022-01-25 09:54:12 -05:00
75ed119c00
Changelog: Add changelog entries for Log4Shell exploiter
2022-01-21 07:40:42 -05:00
654ff38ea0
Changelog: Add entry for removing unneeded options in internal config.
2021-12-14 16:01:25 +01:00
e73b4af026
Changelog: Add entry for removing MySQL fingerprinter
2021-12-14 14:54:45 +01:00
6a1b6c784e
Merge pull request #1643 from guardicore/1538-propagation-credentials-endpoint
...
Implement propagation credentials endpoint
2021-12-08 06:42:49 -05:00
5052e21d97
Island: Remove /api/monkey_control/check_remote_port/<string:port>
2021-12-07 13:26:37 -05:00
91a8376df6
Changelog: Add propagation-credentials endpoint entry
2021-12-07 11:59:40 -05:00
30afe3cc85
Island: Strip credentials out of config before sending to agent
...
The credentials for credential reuse attacks will now be retrieved by
the agent via a new endpoint that returns only credentials in order to
reduce unnecessary network traffic (issue #1538 ).
2021-12-03 09:13:08 -05:00
1d7c80bfec
Changelog: Add changelog entry for #1576
2021-12-01 07:40:30 -05:00
a41cad6291
Changelog: Add entry for removing ATT&CK configuration screen
2021-11-22 11:27:46 +01:00
828d152203
Changelog: Add entry for removing max iters and timeout between iters config options
2021-11-19 08:07:33 -05:00
ee285b6fbd
Merge pull request #1617 from guardicore/1535-hostname-collector-removal
...
1535 hostname collector removal
2021-11-19 07:14:10 -05:00
c3424b46bc
Changelog: Add credentials.json to the changelog
2021-11-18 14:27:43 -05:00
bab54e8976
Changelog: add an entry about removed hostname system info collector
2021-11-17 12:00:55 +02:00
0b8af5e78f
Changelog: add entry about removed environment system info collector
2021-11-16 17:50:00 +02:00
729de3ae9e
Changelog: Add entry for removing custom monkey dir name option
2021-11-16 11:08:50 +01:00
c6e180bd73
Changelog: add entry about removed azure credential collector
2021-11-16 09:46:22 +02:00
f90434d38d
Chaneglog: Add entry for removing custom singleton mutex name config option
2021-11-16 11:34:14 +05:30
de0fff9fbb
Changelog: Remove checkbox to try move the dropper
2021-11-15 14:17:32 +01:00
cb06f408d4
Changelog: Remove serialize config
2021-11-15 13:36:21 +01:00
5073d1fe2b
Changelog: Remove checkbox for file logging
2021-11-15 12:43:13 +01:00
0f2a86d672
Changelog: Remove checkbox for self deleting a monkey on cleanup
2021-11-15 12:13:16 +01:00
bbe01778cf
Changelog: Removed checkbox to send log to server
2021-11-12 15:56:11 +01:00
6ee1949d46
Merge pull request #1582 from guardicore/1535-netstat-info-collector-removal
...
1535 netstat info collector removal
2021-11-12 17:05:44 +02:00
59e7ac34f7
Agent: Don't download exe on Linux during signed script PBA execution
2021-11-12 07:58:04 -05:00
435f52a658
Changelog: add entry about removed netstat collector
2021-11-12 14:09:07 +02:00
9ee6049636
Changelog: Add entry for backdoor uer PBA's HTTP request modifications
2021-11-11 19:26:47 +05:30
e618f0613d
Changelog: add entry about the removed sambacry exploiter
2021-11-10 15:44:01 +02:00
124e9efe91
Changelog: Add entry for removing 'kill file'
2021-11-10 18:49:41 +05:30
Mike Salvatore
Ilija Lazoroski
vakarisz
Shreya Malviya
VakarisZ