Added local kill switch to flow, right after loading configuration.

This commit is contained in:
acepace 2016-07-31 14:33:48 +03:00
parent 1c5ec3086f
commit 39a208afc3
3 changed files with 10 additions and 5 deletions

View File

@ -106,8 +106,8 @@ class Configuration(object):
###########################
# Kill file
###########################
kill_file_path_windows = os.path.expandvars("%temp%\~df4150.tmp")
kill_file_path_linux = '/tmp/user-4150'
kill_file_path_windows = os.path.expandvars("%windir%\monkey.not")
kill_file_path_linux = '/var/run/monkey.not'
###########################
# monkey config

View File

@ -36,9 +36,8 @@
"dropper_set_date": true,
"dropper_target_path": "C:\\Windows\\monkey.exe",
"dropper_target_path_linux": "/bin/monkey",
"kill_path_linux": "/tmp/user-4150",
"kill_path_windows": "%temp%\\~df4150.tmp",
"kill_path_linux": "/var/run/monkey.not",
"kill_path_windows": "%windir%\monkey.not",
"dropper_try_move_first": false,
"exploiter_classes": [
"SSHExploiter",

View File

@ -66,6 +66,12 @@ def main():
print "Loaded Configuration: %r" % WormConfiguration.as_dict()
#Make sure we're not in a machine that has the kill file
kill_path = WormConfiguration.kill_file_path_windows if sys.platform == "win32" else WormConfiguration.kill_file_path_linux
if os.path.exists(kill_path):
print "Kill path found, finished run"
return True
try:
if MONKEY_ARG == monkey_mode:
log_path = os.path.expandvars(WormConfiguration.monkey_log_path_windows) if sys.platform == "win32" else WormConfiguration.monkey_log_path_linux