p17860254
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Added hash parsing to the T1021 remote services attack technique.

This commit is contained in:
VakarisZ 2019-08-22 09:28:53 +03:00
parent 6a1bc4ba96
commit 9b23be44ed
1 changed files with 2 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
monkey/monkey_island/cc/services/attack/technique_reports/T1021.py
View File

@ -22,18 +22,14 @@ class T1021(AttackTechnique):
'attempt_cnt': {'$size': '$data.attempts'},
'attempts': {'$filter': {'input': '$data.attempts',
'as': 'attempt',
'cond': {'$and': [{'$eq': ['$$attempt.result', True]},
{'$or': [{'$ne': ['$$attempt.password', '']},
{'$ne': ['$$attempt.ssh_key', '']}]}]
}
'cond': {'$eq': ['$$attempt.result', True]}
}
}
}
}]
scanned_query = {'telem_category': 'exploit',
'data.attempts': {'$elemMatch': {'$or': [{'password': {'$ne': ''}},
{'ssh_key': {'$ne': ''}}]}}}
'data.attempts': {'$elemMatch': {'result': True}}}
@staticmethod
def get_report_data():