p17860254
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Island: Add callable class for T1003

This commit is contained in:
Ilija Lazoroski 2022-07-15 15:23:50 +02:00
parent c83f76b02b
commit 06a64c14d7
1 changed files with 19 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
monkey/monkey_island/cc/services/attack/technique_reports/T1003.py
View File

@ -1,7 +1,7 @@
from common.utils.attack_utils import ScanStatus from common.utils.attack_utils import ScanStatus
from monkey_island.cc.models import StolenCredentials from monkey_island.cc.repository import ICredentialsRepository
from monkey_island.cc.services.attack.technique_reports import AttackTechnique from monkey_island.cc.services.attack.technique_reports import AttackTechnique
from monkey_island.cc.services.reporting.stolen_credentials import get_stolen_creds from monkey_island.cc.services.reporting.stolen_credentials import format_creds_for_reporting
class T1003(AttackTechnique): class T1003(AttackTechnique):
@ -16,8 +16,21 @@ class T1003(AttackTechnique):
@staticmethod @staticmethod
def get_report_data(): def get_report_data():
raise NotImplementedError
class T1003GetReportData:
"""
Class to patch the T1003 attack technique which
needs stolen credentials from db.
"""
def __init__(self, credentials_repository: ICredentialsRepository):
self._credentials_repository = credentials_repository
def __call__(self):
def get_technique_status_and_data(): def get_technique_status_and_data():
if list(StolenCredentials.objects()): if list(self._credentials_repository.get_stolen_credentials()):
status = ScanStatus.USED.value status = ScanStatus.USED.value
else: else:
status = ScanStatus.UNSCANNED.value status = ScanStatus.UNSCANNED.value
@ -28,5 +41,7 @@ class T1003(AttackTechnique):
data.update(T1003.get_message_and_status(status)) data.update(T1003.get_message_and_status(status))
data.update(T1003.get_mitigation_by_status(status)) data.update(T1003.get_mitigation_by_status(status))
data["stolen_creds"] = get_stolen_creds() data["stolen_creds"] = format_creds_for_reporting(
self._credentials_repository.get_stolen_credentials()
)
return data return data