forked from p15670423/monkey
Update after pulling from develop
This commit is contained in:
parent
e377e72a4c
commit
57f30a8979
|
@ -1,4 +1,7 @@
|
||||||
from common.data.post_breach_consts import POST_BREACH_TRAP_COMMAND
|
from common.data.post_breach_consts import POST_BREACH_TRAP_COMMAND
|
||||||
|
from common.utils.attack_utils import ScanStatus
|
||||||
|
from monkey_island.cc.database import mongo
|
||||||
|
from monkey_island.cc.services.attack.technique_reports import AttackTechnique
|
||||||
from monkey_island.cc.services.attack.technique_reports.pba_technique import \
|
from monkey_island.cc.services.attack.technique_reports.pba_technique import \
|
||||||
PostBreachTechnique
|
PostBreachTechnique
|
||||||
|
|
||||||
|
|
|
@ -1,4 +1,7 @@
|
||||||
from common.data.post_breach_consts import POST_BREACH_SETUID_SETGID
|
from common.data.post_breach_consts import POST_BREACH_SETUID_SETGID
|
||||||
|
from common.utils.attack_utils import ScanStatus
|
||||||
|
from monkey_island.cc.database import mongo
|
||||||
|
from monkey_island.cc.services.attack.technique_reports import AttackTechnique
|
||||||
from monkey_island.cc.services.attack.technique_reports.pba_technique import \
|
from monkey_island.cc.services.attack.technique_reports.pba_technique import \
|
||||||
PostBreachTechnique
|
PostBreachTechnique
|
||||||
|
|
||||||
|
@ -7,7 +10,7 @@ __author__ = "shreyamalviya"
|
||||||
|
|
||||||
class T1166(PostBreachTechnique):
|
class T1166(PostBreachTechnique):
|
||||||
tech_id = "T1166"
|
tech_id = "T1166"
|
||||||
unscanned_msg = "Monkey didn't try setting the setuid or setgid bits since it found no Linux machines."
|
unscanned_msg = "Monkey did not try creating hidden files or folders."
|
||||||
scanned_msg = "Monkey tried setting the setuid or setgid bits but failed."
|
scanned_msg = "Monkey tried creating hidden files and folders on the system but failed."
|
||||||
used_msg = "Monkey successfully set the setuid or setgid bits."
|
used_msg = "Monkey created hidden files and folders on the system."
|
||||||
pba_names = [POST_BREACH_SETUID_SETGID]
|
pba_names = [POST_BREACH_SETUID_SETGID]
|
||||||
|
|
Loading…
Reference in New Issue