671452243d
Fixed some bugs and more notes
2018-06-25 18:26:34 +03:00
81712ddbf0
Merge branch 'struts2RCE' of https://github.com/VakarisZ/monkey into struts2RCE
2018-06-22 14:57:04 +03:00
7ce790affa
Some notes fixed
2018-06-22 14:55:52 +03:00
d510476658
Merge branch 'develop' into struts2RCE
2018-06-21 13:23:12 +03:00
f55133e8c1
Merge pull request #142 from guardicore/feature/MSSQL_fingerprint
...
Feature/mssql fingerprint
2018-06-21 11:46:21 +03:00
2ddae99687
Merge pull request #144 from guardicore/bugfix/fix-bad-default-config
...
Fix default config values
2018-06-21 11:40:44 +03:00
385cf13636
Merge pull request #143 from guardicore/hotfix/update-growl
...
Update mocha
2018-06-21 11:40:07 +03:00
208411d6fc
Cosmetic changes
2018-06-21 00:10:56 +03:00
ef6c512ea9
Finished up exploitation and added reporting
2018-06-20 22:35:18 +03:00
2d27972e7e
Struts exploitation working, and tested with win-64 and ubuntu
2018-06-20 16:58:20 +03:00
413bdd9254
Not yet functioning and tested, but most functions are done
2018-06-19 18:08:52 +03:00
9a8a6c6e28
Now exploiting both win and linux. Also, added check if monkey is not already present
2018-06-19 18:05:09 +03:00
ddaeb7dbf8
more fixes to deb
2018-06-13 20:48:04 +03:00
79d8012bb2
Merge branch 'develop' into feature/support-common-folder
...
# Conflicts:
# monkey/infection_monkey/exploit/shellshock.py
# monkey/infection_monkey/test/config__test.py
2018-06-13 18:03:43 +03:00
0173aaf3f6
Update mocha
...
Change color structure for edge - required by update
2018-06-13 17:36:17 +03:00
20d4b3a642
Fix default config values
2018-06-13 16:05:12 +03:00
36230fa25c
monkey island can now be run from both monkey_island.py and run_cc.bat
2018-06-13 15:40:13 +03:00
4e207256dd
infection monkey works via infection_monkey.py or monkey.exe
2018-06-13 14:38:58 +03:00
db6f44109b
* Responding to the PR comments with the logs and usage changes.
2018-06-12 16:29:27 +03:00
d312a3a771
* Changed name from MSSQLFingerprint to MSSQLFinger to match convention.
...
* Added UI support for the new fingerprint in Monkey Island.
* UI supports includes writing up MSSQL as a service under node's
services list.
2018-06-12 13:26:28 +03:00
fe1f6d67e5
Merge branch 'develop' into feature/MSSQL_fingerprint
2018-06-11 20:19:12 +03:00
1272700fe5
* Added an author mark and updated docs
...
* Changed the module to use the VictimHost object as host
* added True\False return statements.
2018-06-09 20:02:18 +03:00
fadafdbd3a
Updated the config files to default include the mssql fingerfrint class: MSSQLFingerprinter, in the monkey's configuration.
2018-06-09 18:23:54 +03:00
d4c1871f87
Implemented the first draft of the mssql fingerprint class
...
Every line of code is documented and straight forward.
2018-06-09 18:23:08 +03:00
8b22a52006
Added the mssql finger class to the main network init file so it will be usable.
2018-06-09 18:16:39 +03:00
293c204ddd
Created the MSSQL_fingerprinter branch,
...
added the fingerprint class WIP.
2018-06-09 17:51:46 +03:00
de832780b6
Removed overly verbose logging line, triggered every 2 seconds
2018-06-06 13:54:21 +03:00
5e7a218b44
Merge pull request #138 from VakarisZ/SSH_key_stealing
...
SSH key stealing
2018-06-05 16:59:54 +03:00
ecdd2e8762
Merge branch 'develop' into SSH_key_stealing
2018-06-05 16:59:28 +03:00
d77704b3e2
Merge pull request #139 from guardicore/feature/Adding_logs_to_monkey_island
...
Feature/adding logs to monkey island
2018-06-05 14:06:23 +03:00
0503f90168
Notes fixed
2018-06-04 12:07:10 +03:00
f37fabaf75
I've added logs to cover these situations and modules:
...
Configuration reset
Configuration Insert
Configuration Update
Report steps
Monkey downloads
Env startup logs
Also I've changed the logging init position so it covers every functions from main, some functions and vars are being called and init from import level, in order to log those situations I had to init the log system right on the beginning of the module.
2018-05-31 19:27:26 +03:00
ad0d9f4567
Added more log lines
2018-05-31 18:35:33 +03:00
9fa92d0c88
Fix typo in warning
2018-05-31 15:39:36 +03:00
c7ed02b98e
Bugfix, run Shellshock attack as dropper rather than monkey
2018-05-31 15:38:54 +03:00
509558fbb2
Changed the log formatting a bit, added file and function name and line
...
numbers to the log string.
2018-05-31 13:18:33 +03:00
05c4bb7ac7
Integrated an option to download the monkey island log files from the Log page in the web app.
2018-05-31 10:44:47 +03:00
6aeaf0f857
Integrated an option to download the monkey island log files from the Log page in the web app.
2018-05-30 18:30:56 +03:00
30a3bbf9a0
Exploitation of machines using ssh keys added. Also, added shh keys exploitation to report
2018-05-29 01:02:49 +03:00
3be4f07c75
Remove Monkey testing code, dead code as it is. ( #137 )
...
Remove the current UT code, it's not useful as it is.
2018-05-27 17:20:10 +03:00
f45cebfd5e
Does not store encrypted or already present ssh keys, shows all users from whom SSH private key were stolen under "stolen credentials" in report
2018-05-25 01:34:24 +03:00
5f194b70f2
Unecessary import fixed
2018-05-24 17:11:45 +03:00
4197ab12a3
SSH keys are now encrypted and added to database
2018-05-24 16:59:22 +03:00
8a56144a09
Various required fixes
2018-05-23 20:29:32 +03:00
d30f2cf8dc
Update scripts
2018-05-23 20:26:33 +03:00
d831769d1f
Fix CR
2018-05-23 18:06:30 +03:00
a594bd11c2
Update gitignore, another relative file fix
2018-05-23 16:09:35 +03:00
0c6f9cb7c2
Move everything under monkey
2018-05-23 16:05:41 +03:00
f3742c67d0
make monkey_island work with common folder
2018-05-23 15:56:08 +03:00
ee835d51b0
Remove Monkey testing code, dead code as it is.
2018-05-23 15:22:27 +03:00
Vakaris
Daniel Goldberg
Itay Mizeretz
maor.rayzin