p15670423
73a326a3e3
no-ff
...
no-ff方式。。。。。。。。。。。
2022-10-11 13:30:17 +08:00
p15670423
4188bb507c
Update test_dumps03.py
2022-10-11 13:30:17 +08:00
p34709852
7985a6b07f
Add requirements.txt
2022-10-11 13:30:17 +08:00
p34709852
c8859701c8
ADD file via upload
2022-10-11 13:30:17 +08:00
p34709852
880a2d68e8
Delete 'test_dumps01.py'
2022-10-11 13:28:20 +08:00
p34709852
a47ca4dac8
ADD file via upload
2022-10-11 11:36:11 +08:00
p15670423
f803f88afc
确认合并
...
测试,,,,,,,,,,,,,,,,,,
2022-10-11 09:55:06 +08:00
p34709852
09b3b42dc5
ADD file via upload
2022-10-10 14:48:05 +08:00
p31829507
de18b55417
Add test_dumps.py
2022-10-10 14:39:32 +08:00
p31829507
9071fc90aa
Add test_dumps
2022-10-10 14:38:31 +08:00
wutao
4505399049
测试:重复提交代码
2022-10-10 13:40:54 +08:00
wutao
f5bfdc430c
测试:提交代码
2022-10-10 13:36:32 +08:00
wutao
0382831701
测试:提交代码
2022-10-10 13:34:44 +08:00
Mike Salvatore
04fec93c39
Merge branch '2269-publish-events-from-hadoop-exploiter' into develop
...
PR #2396
2022-10-07 09:37:37 -04:00
Ilija Lazoroski
7a664218bd
Agent: Check all potential urls in Hadoop
2022-10-07 15:13:04 +02:00
Mike Salvatore
6d60e33c1e
Merge branch '2269-publish-events-for-mssql-exploiter' into develop
...
PR #2401
2022-10-07 08:46:40 -04:00
Mike Salvatore
a558948c5d
Agent: Remove unnecessary `pass` from MSSQLExploiter
2022-10-07 08:43:05 -04:00
Mike Salvatore
66f5d7a86a
Agent: Remove errant exploitation event from hadoop
...
If no potential URLs are found, then no exploit is attempted, so there's
no reason to publish an ExploitationEvent.
2022-10-07 08:35:24 -04:00
Shreya Malviya
3b225a9c7d
Merge pull request #2376 from guardicore/dependabot/npm_and_yarn/monkey/monkey_island/cc/ui/d3-color-and-d3-3.1.0
...
Bump d3-color and d3 in /monkey/monkey_island/cc/ui
2022-10-07 18:01:53 +05:30
Mike Salvatore
79e8ce5f79
Island: Pass tuple, not set to upsert_tcp_connections()
...
pydantic can probably handle the set -> tuple conversion itself, but
mypy complains.
2022-10-07 07:44:49 -04:00
Mike Salvatore
0965b97d45
Island: Use ScanEvent for typehint in ScanEventHandler
...
`event` gets passed to `_get_source_machine()`, which expects
`ScanEvent`, not `AbstractAgentEvent`
2022-10-07 07:43:50 -04:00
Mike Salvatore
4c026241ea
Island: Change method order in ScanEventHandler
2022-10-07 07:41:50 -04:00
Ilija Lazoroski
25073be9f3
Agent: Remove adding vulnerable urls in Hadoop
...
Adding vulnerable ulrs causes check to see if the target is exploitable
which calls self.exploit
2022-10-07 11:46:35 +02:00
Ilija Lazoroski
c02d43556a
Agent: Make Hadoop tags uppercase
2022-10-07 11:46:35 +02:00
Ilija Lazoroski
8bdb30dcfb
Agent: Rename stamp to timestamp in Hadoop
2022-10-07 11:46:35 +02:00
Ilija Lazoroski
8f6df12d9c
Agent: Modify HadoopExploiter tags to be properties
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
76a3cb0ba0
Agent: Stamp time before exploit executes
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
de5d365bb0
Agent: Publish events sooner
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
3e592cfa69
Agent: Use exploiter tag properties
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
4a0a24dde2
Agent: Update hadoop exploiter tags T1570 -> T1105
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
76ae57281d
Agent: Use EXPLOIT_TAGS for exploitation event
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
54b551b728
Agent: Update tags for hadoop events
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
c31aed94ea
Agent: Move successful explotiation event publish
2022-10-07 11:46:35 +02:00
Kekoa Kaaikala
bee1047024
Agent: Update hadoop failed event publishing
2022-10-07 11:46:34 +02:00
Kekoa Kaaikala
57af640317
Agent: Use correct publish method names
2022-10-07 11:46:34 +02:00
Ilija Lazoroski
9c185a3a78
Agent: Add tags and error messages in Hadoop
2022-10-07 11:46:34 +02:00
Ilija Lazoroski
fe864792f3
Agent: Publish Propagation and Exploitation events from Hadoop
2022-10-07 11:46:34 +02:00
VakarisZ
4709ae771b
Merge pull request #2400 from guardicore/2267-add-tcp-connections
...
2267 add tcp connections
2022-10-07 12:15:39 +03:00
vakarisz
be4ecccdcd
Island: Refactor get_node_by_id to raise UnknownRecordError
2022-10-07 10:05:06 +03:00
Mike Salvatore
77d37bdb21
Merge branch '2269-publish-events-from-log4shell-exploiter' into develop
...
PR #2397
2022-10-06 17:26:06 -04:00
Mike Salvatore
9c2cdf15e2
Agent: Add TODO in Log4ShellExploiter
2022-10-06 17:01:06 -04:00
Mike Salvatore
ead979c6ca
Agent: Add T1110 to Log4Shell exploiter tags
2022-10-06 16:54:02 -04:00
Mike Salvatore
03c6c5ea4b
Agent: Remove unnecessary Path -> str in Log4ShellExploiter
2022-10-06 16:51:14 -04:00
Mike Salvatore
eac3076828
Agent: Change typehint for build_monkey_commandline's location
...
The function can handle str, PurePath, or None. This typehint change
reflects that capability
2022-10-06 16:50:41 -04:00
Mike Salvatore
7bc9993c6f
Agent: Reduce VICTIM_WAIT_SLEEP_TIME_SEC to 0.050 seconds
...
1 second is a long time to wait, and we want our event timestamps to be
more accurate. 0.050 is 10 x sys.getswitchinterval(). It's reasonably
accurate but will also share the CPU nicely.
2022-10-06 16:46:41 -04:00
Mike Salvatore
6bd7042444
Agent: Add VICTIM_WAIT_SLEEP_TIME_SEC constant in log4shell exlpoiter
2022-10-06 16:42:33 -04:00
Mike Salvatore
d8fca72f28
Agent: Publish all prop/exploit events from _wait_for_victim()
2022-10-06 16:41:20 -04:00
Mike Salvatore
b2c5b22128
Merge branch '2269-publish-events-from-powershell-exploiter' into develop
...
PR #2402
2022-10-06 12:45:13 -04:00
Mike Salvatore
8e3bf96589
Agent: Convert plaintext to str()
...
get_plaintext() can return bytes. Convert the output to a str in
PowershellClient to avoid potential issues.
2022-10-06 12:40:50 -04:00
Mike Salvatore
65dd386603
Agent: Collect timestamp before powershell connect
2022-10-06 12:39:37 -04:00