Ilija Lazoroski
94c2587fee
Exploit: Add Apache CouchDB remote code execution exploit
2021-07-22 18:21:04 +02:00
Mike Salvatore
abe8fc268b
Tests: Fix flakey elastic blackbox test
...
Fixes #1117
2021-07-21 08:39:24 -04:00
Mike Salvatore
61c3efdf83
Tests: Speed up blackbox tests by 1 minute each
...
The "keep_tunnel_open_time" option adds an unnecessary 60 second delay
to each test (except the tunneling test, where it is necessary). By
setting the time to 0, each test now runs 60 seconds faster.
2021-07-21 08:23:02 -04:00
Shreya
79be5d5a22
cc: Set island mode in `Main.tsx`'s constructor
...
`Main.tsx`'s `updateStatus()` was being called every 10 seconds,
which meant that `islandMode` was updated every 10 seconds.
If you were on the configuration page, and you refreshed the page
at the right moment (as soon as/just before `updateStatus()`
was being called), the config tabs showed were correct according to
the mode. If you refreshed at the wrong moment, you would get the
default tabs i.e. the tabs shown for the advanced mode (see
`ConfigurePage.js`'s `getSectionsOrder()`).
2021-07-21 08:04:38 -04:00
VakarisZ
64787faf77
Merge pull request #1334 from guardicore/ransomware_mode_at_sidebar
...
Island UI: add island scenario/mode to side navigation
2021-07-21 08:54:09 +03:00
Mike Salvatore
320d7b48d0
Tests: Skip batching telemetry tests on Windows
...
The batching telemetry tests do not function properly on Windows. They
sometimes pass and sometimes fail due to a race condition. I've been
unable to get this race condition to manifest on Linux and I believe
this is likely due to differences in how threads and the GIL are handled
between the two operating systems.
2021-07-20 12:29:47 -04:00
Mike Salvatore
4affb11128
Tests: Ensure cleanup of batching_telemetry_messenger
...
Since an "assert" halts a test, the BatchingTelemetryMessenger may not
be deconstructed. This results in pytest hanging. By adding a finally
clause, we ensure the cleanup of the BatchingTelemetryMessenger.
2021-07-20 12:23:13 -04:00
VakarisZ
e3921ed454
Island UI: improve the side navigation with an icon of the chosen scenario
2021-07-20 17:10:16 +03:00
Mike Salvatore
42dcb697e9
Merge pull request #1340 from guardicore/config_UI_bug_on_submit
...
Island UI: fix config import UI bug
2021-07-20 09:29:14 -04:00
Mike Salvatore
5f3182298c
Merge pull request #1336 from guardicore/speed-up-unit-tests
...
Speed up unit tests
2021-07-20 09:04:51 -04:00
VakarisZ
d9cf28251f
Island UI: fix a bug that caused the config UI to remain the same even on configuration submit
2021-07-20 14:43:53 +03:00
VakarisZ
ff9d649b76
Island UI: rename a method in Main.tsx to be more specific: getSideNavHeader -> getIslandModeTitle
2021-07-20 08:58:21 +03:00
Mike Salvatore
adb1006b57
Update the CHANGELOG
2021-07-19 15:01:40 -04:00
Mike Salvatore
d9a1f22969
Tests: Mark ZeroLogon tests as slow
...
The ZerologonExploiter relies on impacket. Importing impacket is slow
(approximately .72s). By moving the import statement in zerologon tests
and marking them as slow, the import (and tests) can now be skipped by
running `pytest -m 'not slow'`.
2021-07-19 14:26:40 -04:00
Mike Salvatore
2496ed0889
Tests: Use SSHExploiter instead of WmiExploiter in expliot telem tests
...
WmiExploiter relies on impacket. Importing impacket is slow, which has a
negative impact on the speed of pytest collection. SSHExploiter is much
quicker to import.
2021-07-19 14:06:31 -04:00
Mike Salvatore
0000486f20
Agent: Minor changes to ransomware_readme.txt
2021-07-19 13:38:47 -04:00
Mike Salvatore
845c9d9ac3
Tests: Address deprecation warning in config.py
2021-07-19 12:41:35 -04:00
Mike Salvatore
41cf0f07c3
Tests: Address mongomock deprication warnings
2021-07-19 12:38:56 -04:00
Mike Salvatore
ac52c308f3
Tests: Mark slow tests with @pytest.mark.slow
...
This allows you to skip slow tests by running `pytest -m 'not slow'`.
2021-07-19 12:34:12 -04:00
Mike Salvatore
f0033d0c7c
Tests: Convert test_get_all_mitigations() from unittest to pytest
2021-07-19 12:26:32 -04:00
Mike Salvatore
ac9bd8dee7
Tests: Remove two extra calls to encrypt_string()
...
Calls to encrypt_string() result in calls to pyAesCrypt.encryptStream().
These calls are very slow (about .150ms). Modifying these tests to use
static ciphertext instead of encrypting the file each time saves
approximately 300ms when running the unit test suite.
2021-07-19 08:56:48 -04:00
Mike Salvatore
162e375c87
Tests: Make flask_client a session-scoped fixture
2021-07-19 08:14:49 -04:00
Mike Salvatore
5222230487
Tests: Add monkeypatch_session fixture
2021-07-19 08:14:35 -04:00
Mike Salvatore
2897755cae
Tests: Move contents of tests/conftest.py
2021-07-19 08:10:37 -04:00
Mike Salvatore
e12bc7ac28
Tests: Remove unnecessary sleep(1)
2021-07-19 07:46:29 -04:00
Mike Salvatore
81f7de74ab
Merge pull request #1333 from guardicore/ransomware-skip-encrypt-readme
...
Ransomware skip encrypt readme
2021-07-19 06:59:41 -04:00
VakarisZ
b798e67163
Merge pull request #1331 from guardicore/1293/attack-no-change-tabs
...
Fix bug where we can't change tab from attack to another tab in Configure
2021-07-19 13:59:33 +03:00
VakarisZ
8584217e3b
Island UI: add island scenario/mode to the top of the side navigation if it's chosen
2021-07-19 13:53:28 +03:00
Mike Salvatore
52412ab1b7
Tests: Add test_readme.txt to .gitattributes
2021-07-19 06:41:53 -04:00
Mike Salvatore
c451a51b66
Agent: Add ransomware_readme.txt to .gitattributes
2021-07-19 06:41:53 -04:00
Mike Salvatore
1d7476637d
Tests: Remove hash_file() and use get_file_sha256_hash() instead
2021-07-19 06:41:52 -04:00
Mike Salvatore
8879dae276
Agent: Don't encrypt ransomware README.txt
...
Fixes #1304
2021-07-19 06:41:37 -04:00
VakarisZ
491c44a13b
Island UI: remove unnecessary setting of this.currentFormData in ConfigurePage.js because it's a state variable
2021-07-19 12:23:49 +03:00
Ilija Lazoroski
f376c12db1
ui: Fix bug where we can't change tab from attack to another tab in configure
2021-07-19 12:07:04 +03:00
Ilija Lazoroski
f574af4225
ui: Fix bug where we can't change tab from attack to another tab in
...
configure
2021-07-19 12:04:41 +03:00
Mike Salvatore
3912b85d08
Common: Add get_file_sha256_hash()
2021-07-16 10:22:35 -04:00
Mike Salvatore
07937d7238
Agent: Move ransomware readme constants to ransomware/consts.py
2021-07-16 10:05:58 -04:00
VakarisZ
c760e06f03
Merge pull request #1332 from guardicore/ransomware_tab_by_default
...
Sort report tabs according to scenario
2021-07-16 15:47:59 +03:00
VakarisZ
7b695e6574
Merge pull request #1330 from guardicore/1324/submit-config-warning
...
Fix submit config when nothing is changed on Ransomware and Network
2021-07-16 15:47:17 +03:00
VakarisZ
0ee3e7be5e
Island UI: change report UI to sort tabs according to island mode. In ransomware mode, ransomware tab is the first on the right.
2021-07-16 15:00:33 +03:00
VakarisZ
28e14b4c4c
Island UI: change report side nav button to show ransomware report as default report when ransomware scenario is chosen
2021-07-16 15:00:33 +03:00
VakarisZ
5a2bb51789
Merge pull request #1326 from guardicore/ransomware_landing_page
...
Ransomware landing page
2021-07-16 14:58:43 +03:00
VakarisZ
67968459ae
Island UI: fix a bug that causes page refresh to redirect to getting started page
2021-07-16 11:47:13 +03:00
VakarisZ
42936730a6
Island UI: improve Main.tsx readability and finish exporting of hard-coded routes into an enum
2021-07-16 10:39:53 +03:00
Ilija Lazoroski
752ea6af10
ui: Remove title and type from config schema
2021-07-16 09:31:14 +02:00
VakarisZ
63f885e3db
Island UI: merge StandardLayoutComponent.js and DisabledSidebarLayoutComponent.tsx into one component to remove duplication
2021-07-16 08:52:49 +03:00
Ilija Lazoroski
8ee3ab4317
UI: Fix submit config when nothing is changed on Ransomware and Network
...
Tabs
2021-07-15 18:15:15 +02:00
Mike Salvatore
b1fe850624
Travis: Use swimm version 0.5.0, and not "latest" from GitHub API
...
GitHub only allows so many API calls per hour. If this is exceeded, the
travis ci build will fail.
2021-07-15 12:13:16 -04:00
Mike Salvatore
23c298a5f1
Travis: Use hugo version 0.85.0, and not "latest" from GitHub API
...
GitHub only allows so many API calls per hour. If this is exceeded, the
travis ci build will fail.
2021-07-15 12:00:57 -04:00
Mike Salvatore
ed2ebc79c3
Merge pull request #1325 from guardicore/ransomware-payload-refactor
...
Ransomware payload refactor
2021-07-15 11:54:12 -04:00