p15693087
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity
8,067 Commits 31 Branches 0 Tags 47 MiB
Commit Graph

175 Commits

Author SHA1 Message Date
Shreya Malviya 94c151bc56 Changelog: Add entry for telemetry overview line number bugfix 2022-04-21 16:15:03 +05:30
Ilija Lazoroski 2568a46790 Changelog: Add entry for fixing windows self deleting executable 2022-04-20 12:27:06 -04:00
Shreya Malviya 9f78e0d567 Changelog: Add entry for bugfix for fake users' addition to the config because of Mimikatz 2022-04-20 18:44:14 +05:30
Mike Salvatore 587331dbdb
Merge pull request #1893 from guardicore/1888-rename-monkey-endpoint 
1888 rename monkey endpoint
 2022-04-19 07:37:31 -04:00
Mike Salvatore 841cd308ff Changelog: Add entry for #1771 2022-04-19 07:30:34 -04:00
Ilija Lazoroski 38714bb178 Changelog: Add entry for removal of "/api/client-monkey" endpoint 2022-04-18 14:50:57 +02:00
Ilija Lazoroski 743efe37dc Changelog: Add entry for renaming api/monkey endpoint to api/agent 2022-04-18 13:54:34 +02:00
Mike Salvatore f3d55c423f CHANGELOG: Add changelog entries for endpoint renaming 2022-04-15 09:54:42 -04:00
Mike Salvatore 16e887a94a Merge pull request #1887 from guardicore/agent-refactor 2022-04-14 12:20:43 -04:00
Mike Salvatore b1c125f420 Island: Remove disused T1216 file download endpoint 2022-04-11 06:36:25 -04:00
Mike Salvatore ad0cb20e35 Agent: Package T1216_random_executable.exe with the agent 
Packaging the T1216_random_executable.exe binary with the agent removes
coupling between the island's API and a specific post-breach action.
 2022-04-11 06:35:56 -04:00
Ilija Lazoroski 5228af2a69 Changelog: Add entry for removal of WebLogic exploiter 2022-04-11 11:58:24 +02:00
Mike Salvatore 2b33aaa50c
Merge pull request #1862 from EliaOnceAgain/1552/setup_service 
Deploy: Script to install appimage sysd service that runs on boot
 2022-04-10 14:58:11 -04:00
Mike Salvatore 420e99a902 Changelog: Add a changelog entry for install-infection-monkey-service.sh 2022-04-10 14:55:42 -04:00
Mike Salvatore 1f5bb7efaf Merge pull request #1876 from guardicore/1869-remove-drupal 
Remove Drupal exploiter
 2022-04-10 09:45:24 -04:00
Shreya Malviya 533a1b7d98 Changelog: Add entry for removing Drupal exploiter 2022-04-08 21:02:13 +05:30
Ilija Lazoroski 4793e81831 Changelog: Add entry for removal of Struts2 exploiter 2022-04-08 12:19:34 +02:00
Mike Salvatore 61344f9861
Merge pull request #1792 from guardicore/1741-add-smb-to-puppet 
1741 add smb to puppet
 2022-03-21 08:16:24 -04:00
Mike Salvatore 753f00de65 Agent: Put timestamp before random string in log names 
Putting the timestamp before the random string in the agent and dropper
log names allows them to be sorted by time.
 2022-03-20 20:40:35 -04:00
Mike Salvatore 415f3e6468 Agent: Remove smb_service_name configuration option 
This option is never changed and can be more easily stored as a
constant.
 2022-03-18 13:38:02 -04:00
Mike Salvatore 8b4d1d084e Changelog: Improve message for removing log path config options 2022-03-10 09:11:06 -05:00
Ilija Lazoroski 0947e41ea9 Changelog: Add entry for changing log file name 2022-03-10 12:39:50 +01:00
Mike Salvatore 03145a1392 Changelog: Add changelog entry for human-readable thread names 2022-03-09 10:04:45 -05:00
Mike Salvatore 145078839d Merge branch '1675-remove-32-bit-agents' into agent-refactor 
PR #1758
 2022-03-02 08:49:52 -05:00
Mike Salvatore 46eb8a4484 CHANGELOG: Add changelog entries for removing 32-bit agents. 2022-03-02 06:50:15 -05:00
vakarisz 458b2121cd Changelog: added entry for removed T1082 attack technique report 2022-03-01 16:16:06 +02:00
Mike Salvatore caa6405315 Agent: Change agent permissions to 700 in SSH exploiter 
Changing the permissions to 777 introduces a security risk into the
target host. A malicious attacker with local access can potentially
modify the binary, resulting in code execution and privilege escalation
when the attacking agent launches the agent on the victim.

Issue #1750
 2022-02-28 13:18:07 -05:00
Shreya Malviya 7e362283fa Changelog: Add entry for removing the Elastic Search exploiter 2022-02-24 19:14:20 +05:30
Mike Salvatore 55c3236d8e Changelog: Remove ShellShock exploiter 2022-02-23 10:24:23 -05:00
Mike Salvatore 095572f919 Merge branch '1606-run-credential-collectors' into agent-refactor 
PR #1719
 2022-02-17 09:30:01 -05:00
Mike Salvatore cc27dc9710 Changelog: Add changelog entry for SSHCollector 2022-02-16 15:17:13 -05:00
Shreya Malviya 123f0aab16 Changelog: Add entry for process list collection PBA 2022-02-16 17:09:13 +05:30
Ilija Lazoroski fb8847b5c5 Agent: Remove sambacry binaries from monkey spec 
PR #1698
 2022-02-09 08:25:20 -05:00
Mike Salvatore 9a88ac3ed8 Changelog: Add entry for ScoutSuite removal 2022-02-09 14:28:00 +05:30
Ilija Lazoroski 88d4e9b11f Agent: Remove sambacry binaries from monkey spec 
PR #1698
 2022-02-04 13:25:16 -05:00
Ilija Lazoroski e224470161 Changelog: Add entry for removal of agent's bootloader 2022-02-01 18:27:51 +01:00
vakarisz d953755fd2 Changelog: fixup changelog entries for "1640 simplify log download" 2022-01-31 15:50:24 +02:00
Mike Salvatore d257276f30 Changelog: Add entry for removal of MS08-067 exploiter 2022-01-31 08:15:43 -05:00
vakarisz 3e5c1c8044 Changelog: add log download from map entry 2022-01-31 11:54:40 +02:00
Mike Salvatore 8371a268ba Island: Change the order of log messages on startup to improve UX 
Some users were confused when the Island started up and thought it had
frozen. I hope to alleviate this confusion by changing the order of the
log messages. If the last message displayed after initialization
gives the user instructions on accessing the island, hopefully users
will no longer be confused.

PR #1684
 2022-01-26 12:09:43 -05:00
Mike Salvatore e1cf4fa9c2 Merge branch 'release/1.13.0' into agent-refactor 2022-01-25 13:35:49 -05:00
Mike Salvatore 4a7c8fe411 Merge branch 'release/1.13.0' into develop 2022-01-25 13:23:17 -05:00
Mike Salvatore fed7d050be Changelog: Update version and release date for v1.13.0 2022-01-25 09:54:12 -05:00
Mike Salvatore 75ed119c00 Changelog: Add changelog entries for Log4Shell exploiter 2022-01-21 07:40:42 -05:00
Ilija Lazoroski 654ff38ea0 Changelog: Add entry for removing unneeded options in internal config. 2021-12-14 16:01:25 +01:00
Ilija Lazoroski e73b4af026 Changelog: Add entry for removing MySQL fingerprinter 2021-12-14 14:54:45 +01:00
Mike Salvatore 6a1b6c784e
Merge pull request #1643 from guardicore/1538-propagation-credentials-endpoint 
Implement propagation credentials endpoint
 2021-12-08 06:42:49 -05:00
Mike Salvatore 5052e21d97 Island: Remove /api/monkey_control/check_remote_port/<string:port> 2021-12-07 13:26:37 -05:00
Mike Salvatore 91a8376df6 Changelog: Add propagation-credentials endpoint entry 2021-12-07 11:59:40 -05:00
Mike Salvatore 30afe3cc85 Island: Strip credentials out of config before sending to agent 
The credentials for credential reuse attacks will now be retrieved by
the agent via a new endpoint that returns only credentials in order to
reduce unnecessary network traffic (issue #1538).
 2021-12-03 09:13:08 -05:00