p17860254
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Agent: Update ssh exploiter tags

This commit is contained in:
Kekoa Kaaikala 2022-10-04 20:25:50 +00:00 committed by Ilija Lazoroski
parent 5d9416c385
commit 9dac64b60e
1 changed files with 9 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
monkey/infection_monkey/exploit/sshexec.py
View File

@ -37,6 +37,8 @@ SSH_CHANNEL_TIMEOUT = MEDIUM_REQUEST_TIMEOUT
TRANSFER_UPDATE_RATE = 15
SSH_EXPLOITER_TAG = "ssh-exploiter"
EXPLOIT_TAGS = (SSH_EXPLOITER_TAG, T1110_ATTACK_TECHNIQUE_TAG, T1021_ATTACK_TECHNIQUE_TAG)
PROPAGATION_TAGS = (SSH_EXPLOITER_TAG, T1105_ATTACK_TECHNIQUE_TAG, T1222_ATTACK_TECHNIQUE_TAG)
class SSHExploiter(HostExploiter):
@ -96,11 +98,7 @@ class SSHExploiter(HostExploiter):
self._publish_exploitation_event(
target=self.host.ip_addr,
exploitation_success=True,
tags=(
SSH_EXPLOITER_TAG,
T1110_ATTACK_TECHNIQUE_TAG,
T1021_ATTACK_TECHNIQUE_TAG,
),
tags=EXPLOIT_TAGS,
)
self.report_login_attempt(True, user, ssh_key=ssh_string)
return ssh
@ -114,7 +112,7 @@ class SSHExploiter(HostExploiter):
target=self.host.ip_addr,
exploitation_success=False,
error_message=error_message,
tags=(SSH_EXPLOITER_TAG,),
tags=EXPLOIT_TAGS,
)
self.report_login_attempt(False, user, ssh_key=ssh_string)
continue
@ -157,11 +155,7 @@ class SSHExploiter(HostExploiter):
self._publish_exploitation_event(
target=self.host.ip_addr,
exploitation_success=True,
tags=(
SSH_EXPLOITER_TAG,
T1110_ATTACK_TECHNIQUE_TAG,
T1021_ATTACK_TECHNIQUE_TAG,
),
tags=EXPLOIT_TAGS,
)
self.report_login_attempt(True, user, current_password)
return ssh
@ -173,7 +167,7 @@ class SSHExploiter(HostExploiter):
target=self.host.ip_addr,
exploitation_success=False,
error_message=error_message,
tags=(SSH_EXPLOITER_TAG,),
tags=EXPLOIT_TAGS,
)
self.report_login_attempt(False, user, current_password)
ssh.close()
@ -294,7 +288,7 @@ class SSHExploiter(HostExploiter):
target=self.host.ip_addr,
propagation_success=False,
error_message=self.exploit_result.error_message,
tags=(SSH_EXPLOITER_TAG, T1105_ATTACK_TECHNIQUE_TAG, T1222_ATTACK_TECHNIQUE_TAG),
tags=PROPAGATION_TAGS,
)
return self.exploit_result
@ -316,7 +310,7 @@ class SSHExploiter(HostExploiter):
self._publish_propagation_event(
target=self.host.ip_addr,
propagation_success=True,
tags=(SSH_EXPLOITER_TAG, T1105_ATTACK_TECHNIQUE_TAG, T1222_ATTACK_TECHNIQUE_TAG),
tags=PROPAGATION_TAGS,
)
ssh.close()
@ -332,7 +326,7 @@ class SSHExploiter(HostExploiter):
target=self.host.ip_addr,
propagation_success=False,
error_message=self.exploit_result.error_message,
tags=(SSH_EXPLOITER_TAG, T1105_ATTACK_TECHNIQUE_TAG, T1222_ATTACK_TECHNIQUE_TAG),
tags=PROPAGATION_TAGS,
)
logger.error(self.exploit_result.error_message)