a671b55df3
Add mimikatz collector
...
Combine all users and passwords in config
2017-08-16 15:14:26 +03:00
ab7f731ed5
Removed reliance on grequests. Complicates other code and no real performance improvement in a LAN enviornment.
2016-09-21 14:55:13 +03:00
155a03efad
Small hack to support fast-user switching when RDPing to already loggen-in host
...
Although it doesn't always happen, because there is no easy wasy to know
- trying to press YES on the dialog box (if any) can help the login
process
2016-09-19 22:27:17 +03:00
b3322b2541
improved local interface selection when exploiting
2016-09-08 12:30:40 +03:00
d2203b2220
Removed legacy ChaosMonkey from SMB execution.
2016-09-07 19:10:30 +03:00
ce3eaa9b2e
Fixed grequsts/gevents monkey patching of socket code, which lead to paramiko being unable to function after a shellshock scan.
2016-09-07 10:16:17 +03:00
39eaca300f
RDP: change VBS object to reduce requirements + process is more verbose
2016-09-06 11:05:15 +03:00
32c326bd7b
PEP8 in diff files
...
Add concept of non default timeout for copying SMB files. This is by default 5 minutes.
Changed behavior of SMB exploiter if file already exists, we don't assume exploitation is useless and try again. Worse case is we run the monkey after it finished running.
Changed behavior if managed to connect to machine to IPC$ over some dialect. If Success, we don't try again.
2016-09-05 17:45:27 +03:00
91427eb346
Tiny PEP8 change and changed reporting of vulnerable URLs in shellshock
2016-08-29 18:58:16 +03:00
d80c670392
Fixed bug in HTTPFingering
...
Added support for skip_exploit_if_file_exists in linux exploiters.
Delayed/fixed a race in the monkey patching that gevents does.
2016-08-29 18:58:16 +03:00
cd27438a1e
PEP 8 changes
2016-08-29 18:58:15 +03:00
1806f9bc62
Issue #33 - Added support for skip_exploit_if_file_exist in linux
2016-08-29 13:34:21 +03:00
a322a619cb
Issue 23 - Added shellshock exploit.
2016-08-29 12:09:46 +03:00
88951f920d
Bunch of generic PEP8 improvements
2016-08-20 17:03:49 +03:00
8f1669dd44
Added functionality to report all brute force password attempts even if unsuccessful.
2016-08-09 00:23:18 +03:00
d75ce529ab
Issue #18 , added ability to attack multiple users in SSH brute force.
...
Also fixed small bug in windows kill path parsing.
2016-08-08 22:25:33 +03:00
76e3350fa3
merge duplicate code
2016-07-26 18:52:58 +03:00
e26f849286
RDP module bugfix
2016-07-23 08:41:57 +03:00
ad6b7a9893
missing parent flag
2016-07-21 11:22:01 +03:00
4a42fc540e
fixes and improvements after test-run 1
2016-07-20 00:53:41 +03:00
6a486165e5
Fixed broken imports
2016-03-01 13:19:45 +02:00
a0e87a82f7
GC-5050: better range calculation
2016-01-13 10:27:49 +02:00
0ec19578c3
GC-4599: added depth parameter
2015-12-07 19:08:15 +02:00
3522e6e02d
GC-4600: monkey is propagating current C&C server
2015-12-03 16:38:50 +02:00
d984641f53
code organization #2
2015-11-30 14:11:19 +02:00
048c989b27
code organization
2015-11-30 10:56:20 +02:00
6169f1f42e
added default tunnel is the exploiter
...
added self delete on cleanup
fixed argument parsing
2015-10-14 17:22:05 +03:00
4731df114c
fixed ssh on different port bugs
2015-10-12 17:42:54 +03:00
edc0f5fdf3
add support for c&c tunneling
...
"GC-3595 #resolve"
2015-10-08 13:39:52 +03:00
a19f820ec8
- windows firewall add rules support
...
- exploit with our monkey if suitable
2015-10-08 13:35:52 +03:00
760d267459
minor bug fixes
2015-10-08 13:32:26 +03:00
bc74029c7a
minor bug fix
2015-10-01 10:12:17 +03:00
73f9821ee4
minor bug fix
2015-09-30 15:05:30 +03:00
8dc7b38d56
- c&c
...
- support for virtual files (monkeyfs)
- ssh exploitation
- some linux support issues fixed
2015-09-29 17:58:06 +03:00
01bc17f80c
- rdp exploitation
...
- http file transfer
- ftp server code for future support
2015-09-07 10:25:25 +03:00
120d259b65
first commit
2015-08-30 10:27:35 +03:00
Itay Mizeretz
daniel goldberg
itsikkes
acepace
urihershgc
Barak Hoffer
Itamar Tal