Commit Graph

  • de5d365bb0 Agent: Publish events sooner Kekoa Kaaikala 2022-10-05 18:53:31 +0000
  • 3e592cfa69 Agent: Use exploiter tag properties Kekoa Kaaikala 2022-10-05 18:25:40 +0000
  • 4a0a24dde2 Agent: Update hadoop exploiter tags T1570 -> T1105 Kekoa Kaaikala 2022-10-05 13:42:26 +0000
  • 76ae57281d Agent: Use EXPLOIT_TAGS for exploitation event Kekoa Kaaikala 2022-10-05 12:25:23 +0000
  • 54b551b728 Agent: Update tags for hadoop events Kekoa Kaaikala 2022-10-04 19:43:14 +0000
  • c31aed94ea Agent: Move successful explotiation event publish Kekoa Kaaikala 2022-10-04 19:30:42 +0000
  • bee1047024 Agent: Update hadoop failed event publishing Kekoa Kaaikala 2022-10-04 19:16:22 +0000
  • 57af640317 Agent: Use correct publish method names Kekoa Kaaikala 2022-10-04 18:26:03 +0000
  • 9c185a3a78 Agent: Add tags and error messages in Hadoop Ilija Lazoroski 2022-10-04 16:39:10 +0200
  • fe864792f3 Agent: Publish Propagation and Exploitation events from Hadoop Ilija Lazoroski 2022-10-04 13:05:10 +0200
  • 4709ae771b
    Merge pull request #2400 from guardicore/2267-add-tcp-connections VakarisZ 2022-10-07 12:15:39 +0300
  • be4ecccdcd Island: Refactor get_node_by_id to raise UnknownRecordError vakarisz 2022-10-07 10:05:06 +0300
  • ce6ca64b4d
    Agent: Define exploiter and propagation tags correctly Shreya Malviya 2022-10-07 12:00:04 +0530
  • 77d37bdb21 Merge branch '2269-publish-events-from-log4shell-exploiter' into develop Mike Salvatore 2022-10-06 17:26:06 -0400
  • 9c2cdf15e2 Agent: Add TODO in Log4ShellExploiter Mike Salvatore 2022-10-06 17:01:06 -0400
  • ead979c6ca Agent: Add T1110 to Log4Shell exploiter tags Mike Salvatore 2022-10-06 16:54:02 -0400
  • 03c6c5ea4b Agent: Remove unnecessary Path -> str in Log4ShellExploiter Mike Salvatore 2022-10-06 16:51:14 -0400
  • eac3076828 Agent: Change typehint for build_monkey_commandline's location Mike Salvatore 2022-10-06 16:50:05 -0400
  • 7bc9993c6f Agent: Reduce VICTIM_WAIT_SLEEP_TIME_SEC to 0.050 seconds Mike Salvatore 2022-10-06 16:43:05 -0400
  • 6bd7042444 Agent: Add VICTIM_WAIT_SLEEP_TIME_SEC constant in log4shell exlpoiter Mike Salvatore 2022-10-06 16:42:33 -0400
  • d8fca72f28 Agent: Publish all prop/exploit events from _wait_for_victim() Mike Salvatore 2022-10-06 16:41:20 -0400
  • b2c5b22128 Merge branch '2269-publish-events-from-powershell-exploiter' into develop Mike Salvatore 2022-10-06 12:45:13 -0400
  • 8e3bf96589 Agent: Convert plaintext to str() Mike Salvatore 2022-10-06 12:40:50 -0400
  • 65dd386603 Agent: Collect timestamp before powershell connect 2269-publish-events-from-powershell-exploiter Mike Salvatore 2022-10-06 12:39:37 -0400
  • c4573673ce Agent: Rename timestamp -> execute_agent_timestamp Mike Salvatore 2022-10-06 12:39:11 -0400
  • f917654f41 Agent: Report successful propagation if agent ran Kekoa Kaaikala 2022-10-06 16:27:57 +0000
  • 7b13817b66 Agent: Publish propagation events Kekoa Kaaikala 2022-10-06 16:25:18 +0000
  • c631755397 Agent: Publish exploitation events Kekoa Kaaikala 2022-10-06 16:15:35 +0000
  • 629c2433cd Agent: Override tag properties Kekoa Kaaikala 2022-10-06 16:14:50 +0000
  • db09fe0cae Agent: Extract method _run_agent_on_victim Kekoa Kaaikala 2022-10-06 14:49:36 +0000
  • c3ba2cf6b2 Agent: Extract method _get_rpc_connection Kekoa Kaaikala 2022-10-06 14:45:43 +0000
  • 2d130a0442 Agent: Extract method _get_agent_command Kekoa Kaaikala 2022-10-06 14:15:52 +0000
  • 156300e8ed Agent: Extract method _exploit Kekoa Kaaikala 2022-10-06 14:14:38 +0000
  • ac11d159fe Agent: Revise Powershell publishing of events Ilija Lazoroski 2022-10-06 16:03:15 +0200
  • de9b5601d8
    Merge branch 2269-publish-events-from-sshexec-exploiter into develop Mike Salvatore 2022-10-06 10:00:35 -0400
  • c980bfd915 Agent: Move timestamp closer to ssh.exec_command() Mike Salvatore 2022-10-06 09:57:11 -0400
  • 52380a2513 Agent: Publish exploitation event on unexpected SSH exception Mike Salvatore 2022-10-06 09:51:14 -0400
  • 39bada5bb1 Agent: Move assignment outside of try/except Mike Salvatore 2022-10-05 12:17:16 -0400
  • 3bca02af59 Agent: Fix powershell tests Kekoa Kaaikala 2022-10-05 14:25:02 +0000
  • 7d535c72d9 Agent: Publish powershell exploitation events Kekoa Kaaikala 2022-10-05 14:10:11 +0000
  • 3bede2f9d1 Agent: Publish propagation events Kekoa Kaaikala 2022-10-05 13:59:21 +0000
  • bb6716df18 Common: Add attack technique T1059 Kekoa Kaaikala 2022-10-05 13:23:13 +0000
  • 8503e0f499 UT: Remove unused test data structures vakarisz 2022-10-06 15:02:13 +0300
  • ec617df06a Agent: Fix LocketHTTPServer mypy error in MSSQLExploiter Ilija Lazoroski 2022-10-06 13:53:17 +0200
  • 0d246a0479 Island: Rename add_tcp_connections to upsert_tcp_connections vakarisz 2022-10-06 14:49:11 +0300
  • 47846628e6 Agent: Modify MSSQL tags to be properties Ilija Lazoroski 2022-10-06 13:47:11 +0200
  • 3bc2e4876f Island: Handle missing node in add_tcp_connections vakarisz 2022-10-06 14:45:56 +0300
  • 15974ff21c Agent: Stamp time before running exploit Kekoa Kaaikala 2022-10-05 20:49:08 +0000
  • 66f8471f24 Agent: Remove "summary" event Kekoa Kaaikala 2022-10-05 20:46:29 +0000
  • e404416363 Agent: Use exploit tag properties Kekoa Kaaikala 2022-10-05 20:41:47 +0000
  • 5c6b1e3910 Common: Remove unused technique T1071 Kekoa Kaaikala 2022-10-05 20:36:07 +0000
  • 9269c8579c Agent: Remove unneccessary technique Kekoa Kaaikala 2022-10-05 20:35:34 +0000
  • 8317c03686 Agent: Add tags to MSSQL propagation events Kekoa Kaaikala 2022-10-05 13:29:03 +0000
  • aab965bad7 Common: Add attack technique T1071 Kekoa Kaaikala 2022-10-05 13:28:08 +0000
  • fa8b721abe Common: Add attack technique T1059 Kekoa Kaaikala 2022-10-05 13:23:13 +0000
  • 183bd1145f Agent: Add tags to MSSQL exploitation events Kekoa Kaaikala 2022-10-05 13:07:28 +0000
  • 33230e85f7 Agent: Use updated publish methods Kekoa Kaaikala 2022-10-05 12:51:59 +0000
  • 2cd9d0086b Agent: Fix mypy error in http_tools.py Kekoa Kaaikala 2022-10-04 15:21:46 +0000
  • 8dd196122b Agent: Publish events from MSSQLExploiter Kekoa Kaaikala 2022-10-04 14:46:35 +0000
  • b0ec035909 Island: Move tcp_connection addition to node repository vakarisz 2022-10-06 14:31:12 +0300
  • 0f3f45e92f Agent: Modify Log4Shell tags to be properties Ilija Lazoroski 2022-10-06 13:26:48 +0200
  • 016bf5c795 Agent: Stamp times before the exploit runs Kekoa Kaaikala 2022-10-05 19:55:56 +0000
  • 48e6e95271 Agent: Update propagation tags for log4shell Kekoa Kaaikala 2022-10-05 12:48:16 +0000
  • ac69064dec Agent: Send failed exploitation event Kekoa Kaaikala 2022-10-05 12:31:19 +0000
  • 0c4b90beb5 Agent: Fix typo Kekoa Kaaikala 2022-10-05 12:23:00 +0000
  • c5d5418af4 Agent: Fix typo in t1203 attack technique in Log4Shell Ilija Lazoroski 2022-10-04 16:38:26 +0200
  • ef4a465515 Agent: Add tags to exploitation and propagation events in Log4Shell Ilija Lazoroski 2022-10-04 16:24:03 +0200
  • c5506f98e8 Agent: Publish Propagation and Exploitation events from Log4Shell Ilija Lazoroski 2022-10-04 13:25:23 +0200
  • c90044074d Island: Remove storage error when node wasn't modified vakarisz 2022-10-06 14:21:13 +0300
  • 95f1e3cb7b Agent: Modify tags methods to be properties in SSHExploiter Ilija Lazoroski 2022-10-06 12:48:15 +0200
  • dcb08b2881 Agent: Convert IPv4Address to str when connecting to socket Ilija Lazoroski 2022-10-06 12:46:11 +0200
  • f0112410c9 Agent: Rename stamp to timestamp in SSHExploiter Ilija Lazoroski 2022-10-06 11:59:31 +0200
  • e11bd2c7f2 Agent: Stamp start time prior to running exploit Kekoa Kaaikala 2022-10-05 20:09:32 +0000
  • aba886624e Agent: Send propagation events sooner Kekoa Kaaikala 2022-10-05 18:02:27 +0000
  • e8f48085a4 Agent: Use the tag properties Kekoa Kaaikala 2022-10-05 17:43:40 +0000
  • 79f72dda55 Agent: Stop sending PropagationEvent before attempt Kekoa Kaaikala 2022-10-05 17:26:59 +0000
  • 72378f4e53 Agent: Publish scan event when checking ssh port Kekoa Kaaikala 2022-10-05 15:02:46 +0000
  • 431d6ae775 Agent: Extract method _get_ssh_port Kekoa Kaaikala 2022-10-05 14:50:00 +0000
  • 0a1901b9a1 Agent: Use error to propagate failure Kekoa Kaaikala 2022-10-04 22:12:50 +0000
  • a2534391a6 Agent: Extract method _propagate Kekoa Kaaikala 2022-10-04 21:59:35 +0000
  • 1cb88e029a Agent: Extract method _exploit Kekoa Kaaikala 2022-10-04 21:35:42 +0000
  • b31eb885f0 Agent: Extract method _get_victim_os Kekoa Kaaikala 2022-10-04 21:26:55 +0000
  • dc8a0ac2ad Agent: Extract method _upload_agent_binary Kekoa Kaaikala 2022-10-04 21:13:49 +0000
  • 9dac64b60e Agent: Update ssh exploiter tags Kekoa Kaaikala 2022-10-04 20:25:50 +0000
  • 5d9416c385 Agent: Use common.tags to publish events in SSHExploiter Ilija Lazoroski 2022-10-04 16:13:42 +0200
  • 5948537d4a Agent: Add tags to SSHExploiter Ilija Lazoroski 2022-10-04 15:59:58 +0200
  • ddaada1f09 Agent: Revise event publishing in SSHExploiter Ilija Lazoroski 2022-10-04 12:46:28 +0200
  • 2248bdcd67 Island: Add _get_node_by_id method to mongo_node_repository.py vakarisz 2022-10-06 14:10:47 +0300
  • e2453e481c Agent: Rename variables in HostExploiter Shreya Malviya 2022-10-06 16:13:38 +0530
  • 254b4e1c6c Agent: Update publish methods to accept timestamp Kekoa Kaaikala 2022-10-05 19:43:25 +0000
  • 12e9aaf42e Agent: Add abstract properties for exploiter tags Kekoa Kaaikala 2022-10-05 17:32:48 +0000
  • 95b1d9c62d Agent: Remove target from publish methods Kekoa Kaaikala 2022-10-05 15:57:15 +0000
  • 249950d602 Island: Improve tcp handler code and coverage vakarisz 2022-10-05 17:07:19 +0300
  • 6c913895c5 Island: Add TCP connections to nodes based on TCP scan event vakarisz 2022-10-05 14:46:47 +0300
  • bbcdc1bef4 Island: Make upsert_node method public vakarisz 2022-10-05 14:33:00 +0300
  • 73a8c14397 Merge branch '2269-add-attack-technique-tags' into develop Mike Salvatore 2022-10-05 08:25:51 -0400
  • 63f869d296 Project: Add common.tags and HostExploiter publish functions to Vulture Ilija Lazoroski 2022-10-05 14:21:23 +0200
  • 82217b4094
    Merge branch 2267-add-network-services into develop Mike Salvatore 2022-10-05 08:20:13 -0400
  • 10e3c97489 Island: Use Tuple[SocketAddress] for tcp_connections Mike Salvatore 2022-10-04 15:09:02 -0400
  • 8799a60f47 Island: Fix serialization/deserialization of Machine.network_services Mike Salvatore 2022-10-04 12:41:42 -0400