Mike Salvatore
c74f0ed472
BB: Change scan list order in test_depth_3_a() to decrease runtime
2022-04-14 13:53:04 -04:00
Mike Salvatore
16e887a94a
Merge pull request #1887 from guardicore/agent-refactor
2022-04-14 12:20:43 -04:00
Mike Salvatore
03433a8d75
BB: Format depth_3_a.py with Black
2022-04-13 11:48:32 -04:00
vakaris_zilius
43d38d90e0
BB: Extract powershell cred re-use into a separate test
...
Credential re-use only applies to windows island, that's why it's separate
2022-04-13 14:21:23 +00:00
vakaris_zilius
b20de39ce0
BB: Split depth_1_b into separate tests, add SMB_PTH
2022-04-13 16:45:14 +03:00
vakaris_zilius
76ba33a750
BB: Fix a WMI bug in configuration
...
Depth 3 a should test PTH, because mimikatz is already being tested in depth 1 a.
2022-04-13 16:45:14 +03:00
vakaris_zilius
c498b22610
BB: Improve configuration documentation with IP's
2022-04-13 16:45:14 +03:00
vakaris_zilius
1d647a0c6b
BB: Move ssh keys test to a separate test suite
2022-04-13 16:45:14 +03:00
vakaris_zilius
549eebd55c
BB: Rename depth_4_a to depth_3_a
2022-04-13 16:45:14 +03:00
vakarisz
7a3ec16d16
BB: Add powershell empty credential login test to depth_1_a test
2022-04-13 16:45:14 +03:00
vakarisz
9ca061e23c
BB: Add config templates for grouped tests
2022-04-13 16:45:14 +03:00
vakarisz
48469a59a6
BB: Move single test templates into a dedicated folder
2022-04-13 16:45:12 +03:00
Ilija Lazoroski
d9c295bed4
BB: Remove WebLogic exploiter
2022-04-11 11:58:24 +02:00
Mike Salvatore
1f5bb7efaf
Merge pull request #1876 from guardicore/1869-remove-drupal
...
Remove Drupal exploiter
2022-04-10 09:45:24 -04:00
Ilija Lazoroski
d3c60af960
BB: Remove Struts2 exploiter
2022-04-08 12:14:38 +02:00
Shreya Malviya
0789869316
BB: Remove Drupal BB test and related code
2022-04-08 14:27:48 +05:30
Mike Salvatore
35923c1eb1
BB: Reduce the timeouts for tunneling tests
2022-03-24 13:43:04 -04:00
Mike Salvatore
5835a87d3c
BB: Reduce the time that tunnels are held open in tunneling test
2022-03-23 14:50:38 -04:00
Mike Salvatore
ef9c3f4f32
BB: Add ports 5985 and 5986 to PowerShell tests
2022-03-23 14:50:38 -04:00
Mike Salvatore
c075fed2da
BB: Remove 'PingScanner' from fingerprinters in config templates
2022-02-28 13:18:07 -05:00
Shreya Malviya
6c7e630465
BB: Remove ElasticGroovyExploiter references
2022-02-24 15:14:32 +05:30
Ilija Lazoroski
ddc77e6d6a
Zoo: Remove ShellShock Exploiter
2022-02-23 13:50:12 +01:00
Shreya Malviya
7787984f4a
BB: Remove ProcessListCollector from BB config templates
2022-02-16 17:31:40 +05:30
Mike Salvatore
e1cf4fa9c2
Merge branch 'release/1.13.0' into agent-refactor
2022-01-25 13:35:49 -05:00
Mike Salvatore
4a7c8fe411
Merge branch 'release/1.13.0' into develop
2022-01-25 13:23:17 -05:00
vakarisz
28cf8b55cf
BB: modified performance config template to contain log4shell machines
2022-01-25 15:16:32 +02:00
vakarisz
e3f9312ff9
BB: change log4j exploit depth to 1 (default)
...
This change is necessary to make sure that exploitation is successfull from a particular machine being tested.
2022-01-18 11:44:47 +02:00
Ilija Lazoroski
311a721880
BB: Fix IP address for Tomcat machines
2022-01-17 16:34:56 +01:00
vakarisz
a7b31dd9e4
BB: add log4shell BB tests
2022-01-13 16:11:10 +02:00
Mike Salvatore
3d56d88512
BB: Remove stale TODO from poweshell test
2021-11-30 13:40:13 -05:00
VakarisZ
86f2a0dc78
BB: remove deleted system info collectors from config templates
2021-11-17 12:59:34 +02:00
VakarisZ
f5c8db979f
Project: remove remaining sambacry exploiter references in performance.py config template, vulture_allowlist.py and monkey_config_standard.json unit test data file
2021-11-10 15:44:05 +02:00
Shreya Malviya
b005946d88
BB: Remove VSFTPD exploiter from BB performance test's config template
2021-10-29 18:17:33 +05:30
VakarisZ
1ad74a4bff
BB: fix zerologon test to check propagation via SMB as well
...
ZeroLogon doesn't propagate to the machine it only steals the credentials. It's best to make sure that propagation is also possible by running SMB exploiter
2021-10-26 10:21:36 -04:00
Mike Salvatore
8d7a5a410c
BB: Remove ".\\m0nk3y" user from Powershell user list
...
This user was added to work around issue #1486 . Since d4a1c2bda resolves
that issue, this user can be removed from the config for this test.
2021-10-19 08:23:07 -04:00
Ilija Lazoroski
a438f3afb0
Zoo: Replace --os with --skip-powershell-reuse
...
With this logic the powershell cached will run
if we don't provide the cli param --skip-powershell-reuse.
2021-09-28 17:31:20 +02:00
Ilija Lazoroski
07c08ac0b6
Zoo: Reformat powershell cached credentials test
2021-09-27 19:02:13 +02:00
Ilija Lazoroski
689e6ac532
Zoo: Add os specific black box test.
...
Add new --os flag to the blackbox tests.
If not specified it will skip all os marked tests.
2021-09-27 13:08:52 +02:00
Ilija Lazoroski
b90e9ccf21
Zoo: Add second hop bb test
...
Added new powershell-3-48 machine for second hop test.
Explanation why cached are not working after the first hop.
Documentation for the zoo.
2021-09-24 15:29:11 +02:00
Ilija Lazoroski
d27194c568
Zoo: Fix powershell bb config for ntlm hash
2021-09-06 13:50:24 +02:00
Ilija Lazoroski
18c21513af
Zoo: Add new machine for powershell exploiter
2021-09-02 17:06:22 +02:00
Mike Salvatore
d22c7813a5
BB: Switch the scanning order in tunneling tests
...
Because the SMB exploiter deploys the 32-bit agent, which will then
upgrade itself to 64-bit, it takes a long time between when exploitation
is successful and the agent calls home. By switching the order that
hosts are scanned in, this test runs approximately 25 seconds quicker
and allows us to reduce the `keep_tunnel_open_time` setting by 30
seconds.
2021-08-30 13:28:25 -04:00
Ilija Lazoroski
5cee9443ff
Zoo: Remove GCPHandler class. Powershell-3-47 renamed to
...
Powershell-3-46. Powershell-45 moved to different zone
2021-08-24 15:11:22 +02:00
Ilija Lazoroski
9f2a4cb7e4
Zoo: Update terraform scripts. Update gcp test machine list with new zone
2021-08-24 11:56:09 +02:00
Ilija Lazoroski
305b2cf716
Zoo: Add PowerShell config and bb test
2021-08-24 10:32:54 +02:00
Mike Salvatore
087c8f2cf8
BB: Remove internet_services from BaseTemplate
2021-08-19 14:16:44 -04:00
Ilija Lazoroski
e393374ae6
BB: Increase scope depth for Struts2
2021-08-05 10:36:33 +02:00
Mike Salvatore
ee77869357
BB: Limit propagation depth to 1 for most tests
2021-08-04 15:06:03 -04:00
Mike Salvatore
c34a303628
BB: Limit scanned ports for SMB PTH test
2021-08-04 13:54:17 -04:00
Mike Salvatore
8d992f41d3
BB: Update config_values with smb_pth settings
2021-08-04 13:54:17 -04:00