p15693087
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity
9,431 Commits 31 Branches 0 Tags 47 MiB
Commit Graph

371 Commits

Author SHA1 Message Date
Mike Salvatore 9bff20e92f BB: Add depth_2_a_test_configuration 2022-07-19 13:25:07 -04:00
Mike Salvatore 3480b18e39 BB: Remove zerologon exploiter from depth_1_a_test_configuration 2022-07-19 09:00:51 -04:00
Mike Salvatore 4cd1c6bf3c BB: Reorder some things in depth_1_a.py 2022-07-19 08:59:10 -04:00
Mike Salvatore 87363d3096 BB: Rename credentials -> CREDENTIALS 2022-07-19 08:57:19 -04:00
Mike Salvatore 707aa97a65 BB: Add TCP ports to depth_1_a_test_configuration 2022-07-19 08:47:57 -04:00
Mike Salvatore 189e2ad3d1 BB: Add HTTP ports to depth_1_a_test_configuration 2022-07-19 08:13:09 -04:00
Mike Salvatore 0c6764daf5 BB: Add add_http_ports() 2022-07-19 08:12:46 -04:00
Mike Salvatore f1d9ea64e5 BB: Add tcp ports to depth_1_a_test_configuration 2022-07-18 15:17:33 -04:00
Mike Salvatore 0a0cb5de19 BB: Set maximum depth in depth_1_a_test_configuration 2022-07-18 15:17:33 -04:00
Mike Salvatore 365b4098e4 BB: Set maximum depth in zerologon_test_configuration 2022-07-18 15:17:32 -04:00
Mike Salvatore 5a1a40a515 BB: Add set_maximum_depth() 2022-07-18 15:17:30 -04:00
Mike Salvatore c2028f15a4 BB: Add depth_1_a_test_configuration 2022-07-18 15:00:06 -04:00
Mike Salvatore 138ce81f1b BB: Add add_credential_collectors() 2022-07-18 14:52:31 -04:00
Mike Salvatore dbc138d263 BB: Add replace_propagation_credentials() 2022-07-18 14:52:05 -04:00
Mike Salvatore d11fbe92e8 BB: Add missing type hints to add_exploiters() 2022-07-18 14:49:25 -04:00
Mike Salvatore 37e79f41e8 BB: Rename noop_test_configuration.py -> noop.py 2022-07-18 14:43:18 -04:00
Mike Salvatore 68c6625445 BB: Add a zerologon test configuration 2022-07-18 14:43:18 -04:00
Mike Salvatore ed6b766cd1 BB: Add test_configurations/utils.py 2022-07-18 14:43:16 -04:00
Mike Salvatore c42cfe3110 BB: Add noop_configuration 2022-07-18 14:26:43 -04:00
Mike Salvatore b3499074b5 BB: Add TestConfiguration 2022-07-18 13:36:37 -04:00
Mike Salvatore ea1dc930a1 BB: Remove "single_tests" subpackage 2022-07-18 13:08:29 -04:00
Mike Salvatore cf45ae4c3e BB: Remove "grouped" subpackage 2022-07-18 13:07:18 -04:00
Mike Salvatore c1073bd1ea BB: Remove unused "single_tests" 2022-07-18 13:06:00 -04:00
Mike Salvatore 70f3506317 BB: Remove test_blackbox_in_depth.py 2022-07-18 13:02:19 -04:00
Shreya Malviya f7315b25f5 Zoo: Change agent binary download endpoint 2022-06-02 17:31:55 +05:30
Mike Salvatore 61793d56cf BB: Add a note about clearing tomcat sessions 2022-05-04 10:32:23 -04:00
Mike Salvatore 2f3c08cb77 BB: Add a note about setting java.security.egd for tomcat 2022-05-04 10:32:21 -04:00
Ilija Lazoroski 30e27b4e9a Zoo: Add timeout to zerologon bb test 
* Fix log message in smb tools
 2022-04-26 11:40:48 -04:00
Ilija Lazoroski a740e92784 Envs: Rename api/monkey endpoint to api/agent 
* Remove 32-bitness
* Fix api/agent/download endpoint
 2022-04-18 13:53:15 +02:00
Ilija Lazoroski d2cc056a55 Island, BB: Rename api/monkey_control to api/monkey-control 2022-04-15 13:16:56 +02:00
Ilija Lazoroski 1535832279 Island, BB: Rename clear_caches endpoint to clear-caches 2022-04-15 12:36:12 +02:00
Mike Salvatore 6df2c38b0f BB: Remove tests for drupal, struts, and weblogic exploiters 2022-04-14 14:02:43 -04:00
Mike Salvatore c74f0ed472 BB: Change scan list order in test_depth_3_a() to decrease runtime 2022-04-14 13:53:04 -04:00
Mike Salvatore a2c3b74d09 BB: Change test order 2022-04-14 13:52:41 -04:00
Mike Salvatore 16e887a94a Merge pull request #1887 from guardicore/agent-refactor 2022-04-14 12:20:43 -04:00
vakarisz 3ebab643bc BB: Small typo fix 2022-04-14 15:12:18 +03:00
Mike Salvatore 03433a8d75 BB: Format depth_3_a.py with Black 2022-04-13 11:48:32 -04:00
vakaris_zilius 43d38d90e0 BB: Extract powershell cred re-use into a separate test 
Credential re-use only applies to windows island, that's why it's separate
 2022-04-13 14:21:23 +00:00
vakaris_zilius b20de39ce0 BB: Split depth_1_b into separate tests, add SMB_PTH 2022-04-13 16:45:14 +03:00
vakaris_zilius 76ba33a750 BB: Fix a WMI bug in configuration 
Depth 3 a should test PTH, because mimikatz is already being tested in depth 1 a.
 2022-04-13 16:45:14 +03:00
vakaris_zilius c498b22610 BB: Improve configuration documentation with IP's 2022-04-13 16:45:14 +03:00
vakaris_zilius 2dee5698f2 BB: Remove performance test template from test_blackbox.py 2022-04-13 16:45:14 +03:00
vakaris_zilius 1d647a0c6b BB: Move ssh keys test to a separate test suite 2022-04-13 16:45:14 +03:00
vakaris_zilius 03e23778dd BB: Add explanation to how 46 powershell machine can be exploited 2022-04-13 16:45:14 +03:00
vakaris_zilius 4df72d08eb BB: Reduce the time for agents to die to 2 minutes 2022-04-13 16:45:14 +03:00
vakaris_zilius 0b4f98c675 BB: Increase default test timeout to 150s 
Timeout needed an increase because one log4shell machine was slow to communicate back
 2022-04-13 16:45:14 +03:00
vakaris_zilius 549eebd55c BB: Rename depth_4_a to depth_3_a 2022-04-13 16:45:14 +03:00
vakarisz 91a431517a BB: Use grouped tests 
Grouping tests will allow us to run more tests at once
 2022-04-13 16:45:14 +03:00
vakarisz 7a3ec16d16 BB: Add powershell empty credential login test to depth_1_a test 2022-04-13 16:45:14 +03:00
vakarisz ceabb99e7c BB: Add time log for monkey killing time 2022-04-13 16:45:14 +03:00
vakarisz 9ca061e23c BB: Add config templates for grouped tests 2022-04-13 16:45:14 +03:00
vakarisz 48469a59a6 BB: Move single test templates into a dedicated folder 2022-04-13 16:45:12 +03:00
Ilija Lazoroski d9c295bed4 BB: Remove WebLogic exploiter 2022-04-11 11:58:24 +02:00
Mike Salvatore 1f5bb7efaf Merge pull request #1876 from guardicore/1869-remove-drupal 
Remove Drupal exploiter
 2022-04-10 09:45:24 -04:00
Shreya Malviya 378b5178c5 BB: Relate references to the Drupal machine in the Zoo 2022-04-08 20:59:38 +05:30
Ilija Lazoroski d3c60af960 BB: Remove Struts2 exploiter 2022-04-08 12:14:38 +02:00
Shreya Malviya 0789869316 BB: Remove Drupal BB test and related code 2022-04-08 14:27:48 +05:30
Mike Salvatore 394088e39d BB: Reduce DELAY_BETWEEN_ANALYSIS 2022-03-29 16:10:20 -04:00
Mike Salvatore 4e489ad62b
Merge pull request #1814 from guardicore/1801-fix-blackbox-tests 
1801 fix blackbox tests
 2022-03-25 07:18:22 -04:00
Mike Salvatore 35923c1eb1 BB: Reduce the timeouts for tunneling tests 2022-03-24 13:43:04 -04:00
vakarisz a92a8af96b BB: Remove smb-20 machine 2022-03-24 13:08:30 -04:00
Shreya Malviya cb51394439 BB: Add relevant TCP ports to PowerShell config template 2022-03-24 18:43:52 +05:30
Mike Salvatore f8b3b378d6 BB: Skip tests for deprecated exploiters 2022-03-23 14:50:38 -04:00
Mike Salvatore 5835a87d3c BB: Reduce the time that tunnels are held open in tunneling test 2022-03-23 14:50:38 -04:00
Mike Salvatore 123606f23d BB: Reduce time to wait for agents to finish 
Since the agents stop and start so much more quickly now, these delays
can be reduced.
 2022-03-23 14:50:38 -04:00
Mike Salvatore ef9c3f4f32 BB: Add ports 5985 and 5986 to PowerShell tests 2022-03-23 14:50:38 -04:00
Mike Salvatore 88422f9764 BB: Fix API call to kill all monkeys 2022-03-23 14:50:38 -04:00
Shreya Malviya ad61236ed0 BB: Fix password for powershell-46 in Zoo machines' docs 2022-03-21 14:10:16 +05:30
Ilija Lazoroski c000ab6cf8 BB: Update documentation for PowerShell machines 2022-03-21 14:06:54 +05:30
Ilija Lazoroski 747365818f BB: Update documentation for PowerShell machines 2022-03-16 14:20:42 +01:00
Mike Salvatore c075fed2da BB: Remove 'PingScanner' from fingerprinters in config templates 2022-02-28 13:18:07 -05:00
Shreya Malviya 7d76d94959 Zoo: Remove Elastic machines from terraform scripts and docs 2022-02-24 15:16:19 +05:30
Shreya Malviya 6c7e630465 BB: Remove ElasticGroovyExploiter references 2022-02-24 15:14:32 +05:30
Ilija Lazoroski ddc77e6d6a Zoo: Remove ShellShock Exploiter 2022-02-23 13:50:12 +01:00
Shreya Malviya 7787984f4a BB: Remove ProcessListCollector from BB config templates 2022-02-16 17:31:40 +05:30
Mike Salvatore e1cf4fa9c2 Merge branch 'release/1.13.0' into agent-refactor 2022-01-25 13:35:49 -05:00
Mike Salvatore 4a7c8fe411 Merge branch 'release/1.13.0' into develop 2022-01-25 13:23:17 -05:00
vakarisz 28cf8b55cf BB: modified performance config template to contain log4shell machines 2022-01-25 15:16:32 +02:00
Shreya Malviya ce8c178297 BB: Add Log4Shell zoo machines to table of contents, grammar fixes 2022-01-20 17:24:11 +05:30
vakarisz 212fb3a653 BB: black format config_generation_script.py 2022-01-18 15:23:59 +02:00
vakarisz e3f9312ff9 BB: change log4j exploit depth to 1 (default) 
This change is necessary to make sure that exploitation is successfull from a particular machine being tested.
 2022-01-18 11:44:47 +02:00
Ilija Lazoroski 311a721880 BB: Fix IP address for Tomcat machines 2022-01-17 16:34:56 +01:00
vakarisz 77eb3ce004 BB: Added log4j configs to the list of manually generatable configs 2022-01-17 11:40:31 +02:00
vakarisz be79f2bcdb BB: add log4j machines to gcp machine list 2022-01-14 14:51:18 +02:00
vakarisz a7b31dd9e4 BB: add log4shell BB tests 2022-01-13 16:11:10 +02:00
vakarisz aef7beedb3 Zoo: add logstash machines that test log4shell 2022-01-13 12:42:03 +02:00
Ilija Lazoroski dcc68914bd BB: Add log4j machines to monkey zoo 2022-01-10 14:17:48 +01:00
vakarisz 6782f806eb Zoo: add log4j solr machines to terraform scripts and docs 2022-01-07 15:27:50 +02:00
Mike Salvatore 3d56d88512 BB: Remove stale TODO from poweshell test 2021-11-30 13:40:13 -05:00
VakarisZ 86f2a0dc78 BB: remove deleted system info collectors from config templates 2021-11-17 12:59:34 +02:00
VakarisZ f5c8db979f Project: remove remaining sambacry exploiter references in performance.py config template, vulture_allowlist.py and monkey_config_standard.json unit test data file 2021-11-10 15:44:05 +02:00
VakarisZ 136a105e56 BB: remove sambacry machines from BB infrastructure and docs 2021-11-10 15:43:51 +02:00
Shreya Malviya b005946d88 BB: Remove VSFTPD exploiter from BB performance test's config template 2021-10-29 18:17:33 +05:30
VakarisZ 1ad74a4bff BB: fix zerologon test to check propagation via SMB as well 
ZeroLogon doesn't propagate to the machine it only steals the credentials. It's best to make sure that propagation is also possible by running SMB exploiter
 2021-10-26 10:21:36 -04:00
Mike Salvatore 8d7a5a410c BB: Remove ".\\m0nk3y" user from Powershell user list 
This user was added to work around issue #1486. Since d4a1c2bda resolves
that issue, this user can be removed from the config for this test.
 2021-10-19 08:23:07 -04:00
Ilija Lazoroski 6787cce1d0 Zoo: Change API registration parameter 2021-10-14 14:52:13 +02:00
VakarisZ 2d28c4e800 Zoo: fix the fullDocs.md by removing the outdated section about monkey configurations, add a sections about what to do with the island if you're a simple user 2021-10-07 16:56:10 +03:00
VakarisZ f7e0b4fef1 Zoo: add missing tunneling-12 image definition to terraform scripts 2021-10-07 13:55:48 +03:00
Ilija Lazoroski a438f3afb0 Zoo: Replace --os with --skip-powershell-reuse 
With this logic the powershell cached will run
if we don't provide the cli param --skip-powershell-reuse.
 2021-09-28 17:31:20 +02:00
Ilija Lazoroski 07c08ac0b6 Zoo: Reformat powershell cached credentials test 2021-09-27 19:02:13 +02:00