Commit Graph

1221 Commits

Author SHA1 Message Date
maor.rayzin 0486b630aa * Commented out the ldap checkup for bug testing 2018-08-08 16:38:11 +03:00
maor.rayzin 3c40fd7cc3 * Added warnings and threats comments about pth findings 2018-08-08 16:03:16 +03:00
Vakaris 8e684a3fad Bugfix: model.__init__ changed( I forgot to add the file to the branch) and server lock is not a singleton anymore 2018-08-07 17:44:31 +03:00
Itay Mizeretz 83d41df875 Fix another merge fail 2018-08-06 14:30:38 +03:00
Itay Mizeretz 063ecd9313 Add files dropped in merge 2018-08-06 14:18:03 +03:00
Itay Mizeretz 26337e3a7a Merge remote-tracking branch 'origin/develop' into feature/support-common-folder
# Conflicts:
#	infection_monkey/network/__init__.py
#	infection_monkey/transport/__init__.py
#	monkey/infection_monkey/config.py
#	monkey/infection_monkey/dropper.py
#	monkey/infection_monkey/exploit/__init__.py
#	monkey/infection_monkey/transport/ftp.py
2018-08-06 12:17:25 +03:00
Itay Mizeretz 25f0c08528 Fix python dep installation issues 2018-08-05 14:58:19 +03:00
Itay Mizeretz 4017e189ab Another stupid path fix 2018-08-05 14:21:37 +03:00
Itay Mizeretz 4e84c87050 Add missing files 2018-08-05 13:35:48 +03:00
maor.rayzin 4a780d81a8 * removed not needed import
*
2018-08-05 11:48:48 +03:00
maor.rayzin 3a9a92d1b9 * More info in the recommendations section 2018-08-05 11:46:47 +03:00
Vakaris 3f8d63c2d9 Timeout of joining set to 5 seconds. No use of waiting for another thread to stop. We can run our program while the thread stops 2018-08-04 13:01:19 +03:00
maor.rayzin cdfd6284ee * Added information about what info gathered to the report's issues section 2018-08-01 13:07:18 +03:00
maor.rayzin af3b5665ce * some logs and un-commenting for testing. 2018-07-24 20:49:57 +03:00
maor.rayzin 48e1d85eb0 * fixed a lot of safe dict access
* some small fixed and typos
2018-07-24 19:09:19 +03:00
maor.rayzin f97df84da9 Merge branch 'develop' into nadler/pth
# Conflicts:
#	infection_monkey/requirements.txt
#	monkey_island/cc/app.py
#	monkey_island/cc/resources/telemetry.py
#	monkey_island/cc/ui/src/components/pages/ReportPage.js
2018-07-24 15:00:58 +03:00
maor.rayzin dd5b606ef8 * wrong endpoint fix 2018-07-24 14:54:12 +03:00
maor.rayzin fae87bd07b * wrong endpoint fix 2018-07-24 14:52:16 +03:00
maor.rayzin 2a12fefe6d Merge branch 'nadler/pth-map' into nadler/pth 2018-07-24 14:46:32 +03:00
maor.rayzin 2f4a3dc885 * finished map's nodes and edges generation for pth report 2018-07-24 14:43:41 +03:00
Itay Mizeretz eb79499e80 Change report structure
Add tables for shared admins, strong users, shared creds.
2018-07-22 18:49:51 +03:00
maor.rayzin 1b45029c5d * WIP added map edges and nodes generation 2018-07-21 21:13:42 +03:00
maor.rayzin 865bb3489d * WIP Refactoring the report info gathering file
* WIP Refactoring the report map information
2018-07-21 21:00:13 +03:00
Itay Mizeretz 800e337f6f Add credential map to report. currently uses fake static data 2018-07-19 18:35:37 +03:00
Vakaris 40957f865c Struts2 compatability fix 2018-07-19 13:04:52 +03:00
Vakaris 68d949c655 Web RCE framework core files/changes 2018-07-19 12:33:44 +03:00
Daniel Goldberg 3e1edeac61
Merge pull request #156 from VakarisZ/dropper_samefile_fix
Dropper bug fix
2018-07-18 20:53:52 +03:00
Vakaris d78e81db06 Changed to a better file comparison function 2018-07-18 20:48:15 +03:00
Vakaris dfecc6d6ac os.path.samefile does not work on windows. My code checks if files handlers are the same instead 2018-07-18 12:44:19 +03:00
Daniel Goldberg ae4227731c
Merge pull request #155 from guardicore/bugfix/remove_ftp_server
Remove FTP server from infra
2018-07-18 10:50:31 +03:00
Daniel Goldberg d853e02693 Remove FTP server from infra
New FTP server will come from pyftp
2018-07-17 13:08:08 +03:00
Daniel Goldberg 97e5b96637 Opportunistic waiting, make get_tcp_ports O(timeout) rather than timeout. 2018-07-15 16:27:46 +03:00
Daniel Goldberg 977e0a8769
Merge pull request #151 from guardicore/master
Update develop from master
2018-07-09 18:53:57 +03:00
Daniel Goldberg f98a121c51
Merge branch 'develop' into master 2018-07-09 18:53:43 +03:00
Daniel Goldberg 35b535f97a Removed hard coded debug address and replaced with non routable IP 2018-07-08 12:14:45 +03:00
Daniel Goldberg 3118620c8a
Merge pull request #146 from VakarisZ/struts2RCE
Struts2 rce
2018-06-26 18:37:07 +03:00
Vakaris c278b0a29c Small changes 2018-06-26 18:03:31 +03:00
Vakaris 6a37f2b953 removed debugging code 2018-06-25 19:11:58 +03:00
Vakaris 671452243d Fixed some bugs and more notes 2018-06-25 18:26:34 +03:00
Vakaris 81712ddbf0 Merge branch 'struts2RCE' of https://github.com/VakarisZ/monkey into struts2RCE 2018-06-22 14:57:04 +03:00
Vakaris 7ce790affa Some notes fixed 2018-06-22 14:55:52 +03:00
Daniel Goldberg d510476658
Merge branch 'develop' into struts2RCE 2018-06-21 13:23:12 +03:00
Daniel Goldberg f55133e8c1
Merge pull request #142 from guardicore/feature/MSSQL_fingerprint
Feature/mssql fingerprint
2018-06-21 11:46:21 +03:00
Daniel Goldberg 2ddae99687
Merge pull request #144 from guardicore/bugfix/fix-bad-default-config
Fix default config values
2018-06-21 11:40:44 +03:00
Daniel Goldberg 385cf13636
Merge pull request #143 from guardicore/hotfix/update-growl
Update mocha
2018-06-21 11:40:07 +03:00
Vakaris 208411d6fc Cosmetic changes 2018-06-21 00:10:56 +03:00
Vakaris ef6c512ea9 Finished up exploitation and added reporting 2018-06-20 22:35:18 +03:00
Vakaris 2d27972e7e Struts exploitation working, and tested with win-64 and ubuntu 2018-06-20 16:58:20 +03:00
Vakaris 413bdd9254 Not yet functioning and tested, but most functions are done 2018-06-19 18:08:52 +03:00
Vakaris 9a8a6c6e28 Now exploiting both win and linux. Also, added check if monkey is not already present 2018-06-19 18:05:09 +03:00