Zoo: Add new machine for powershell exploiter

This commit is contained in:
Ilija Lazoroski 2021-09-02 17:06:22 +02:00
parent cd9d5b4c5e
commit 18c21513af
5 changed files with 57 additions and 5 deletions

View File

@ -10,12 +10,15 @@ class PowerShell(ConfigTemplate):
config_values.update( config_values.update(
{ {
"basic.exploiters.exploiter_classes": ["PowerShellExploiter"], "basic.exploiters.exploiter_classes": ["PowerShellExploiter"],
"basic_network.scope.subnet_scan_list": ["10.2.3.45", "10.2.3.46"], "basic_network.scope.subnet_scan_list": ["10.2.3.45", "10.2.3.46", "10.2.3.47"],
"basic.credentials.exploit_password_list": ["Passw0rd!"], "basic.credentials.exploit_password_list": ["Passw0rd!"],
"basic_network.scope.depth": 2, "basic_network.scope.depth": 2,
"basic.credentials.exploit_user_list": ["m0nk3y", "m0nk3y-user"], "basic.credentials.exploit_user_list": ["m0nk3y", "m0nk3y-user"],
"internal.classes.finger_classes": ["PingScanner"], "internal.classes.finger_classes": ["PingScanner"],
"internal.network.tcp_scanner.HTTP_PORTS": [], "internal.network.tcp_scanner.HTTP_PORTS": [],
"internal.network.tcp_scanner.tcp_target_ports": [], "internal.network.tcp_scanner.tcp_target_ports": [],
"internal.classes.exploits.exploit_ntlm_hash_list": [
"d0f0132b308a0c4e5d1029cc06f48692",
],
} }
) )

View File

@ -24,5 +24,6 @@ GCP_TEST_MACHINE_LIST = {
"europe-west1-b": [ "europe-west1-b": [
"powershell-3-45", "powershell-3-45",
"powershell-3-46", "powershell-3-46",
"powershell-3-47",
], ],
} }

View File

@ -33,8 +33,9 @@ This document describes Infection Monkeys test network, how to deploy and use
[Nr. 25 Zerologon](#_Toc536021478)<br> [Nr. 25 Zerologon](#_Toc536021478)<br>
[Nr. 3-45 Powershell](#_Toc536021479)<br> [Nr. 3-45 Powershell](#_Toc536021479)<br>
[Nr. 3-46 Powershell](#_Toc536021480)<br> [Nr. 3-46 Powershell](#_Toc536021480)<br>
[Nr. 250 MonkeyIsland](#_Toc536021481)<br> [Nr. 3-47 Powershell](#_Toc536021481)<br>
[Nr. 251 MonkeyIsland](#_Toc536021482)<br> [Nr. 250 MonkeyIsland](#_Toc536021482)<br>
[Nr. 251 MonkeyIsland](#_Toc536021483)<br>
[Network topography](#network-topography)<br> [Network topography](#network-topography)<br>
# Warning\! # Warning\!
@ -1142,7 +1143,35 @@ fullTest.conf is a good config to start, because it covers all machines.
<table> <table>
<thead> <thead>
<tr class="header"> <tr class="header">
<th><p><span id="_Toc536021481" class="anchor"></span>Nr. <strong>250 MonkeyIsland</strong></p> <th><p><span id="_Toc536021481" class="anchor"></span>Nr. <strong>3-47 Powershell</strong></p>
<p>(10.2.3.47)</p></th>
<th>(Vulnerable)</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td>OS:</td>
<td><strong>Windows Server 2016 x64</strong></td>
</tr>
<tr class="even">
<td>Software:</td>
<td>WinRM service</td>
</tr>
<tr class="odd">
<td>Default servers port:</td>
<td>-</td>
</tr>
<tr class="even">
<td>Notes:</td>
<td>User: m0nk3y, Password: Xk8VDTsC</td>
</tr>
</tbody>
</table>
<table>
<thead>
<tr class="header">
<th><p><span id="_Toc536021482" class="anchor"></span>Nr. <strong>250 MonkeyIsland</strong></p>
<p>(10.2.2.250)</p></th> <p>(10.2.2.250)</p></th>
<th></th> <th></th>
</tr> </tr>
@ -1174,7 +1203,7 @@ fullTest.conf is a good config to start, because it covers all machines.
<table> <table>
<thead> <thead>
<tr class="header"> <tr class="header">
<th><p><span id="_Toc536021482" class="anchor"></span>Nr. <strong>251 MonkeyIsland</strong></p> <th><p><span id="_Toc536021483" class="anchor"></span>Nr. <strong>251 MonkeyIsland</strong></p>
<p>(10.2.2.251)</p></th> <p>(10.2.2.251)</p></th>
<th></th> <th></th>
</tr> </tr>

View File

@ -57,6 +57,10 @@ data "google_compute_image" "mssql-16" {
name = "mssql-16" name = "mssql-16"
project = local.monkeyzoo_project project = local.monkeyzoo_project
} }
data "google_compute_image" "powershell-3-47" {
name = "powershell-3-47"
project = local.monkeyzoo_project
}
data "google_compute_image" "powershell-3-46" { data "google_compute_image" "powershell-3-46" {
name = "powershell-3-46" name = "powershell-3-46"
project = local.monkeyzoo_project project = local.monkeyzoo_project

View File

@ -313,6 +313,21 @@ resource "google_compute_instance_from_template" "mssql-16" {
} }
} }
resource "google_compute_instance_from_template" "powershell-3-47" {
name = "${local.resource_prefix}powershell-3-47"
source_instance_template = local.default_windows
boot_disk{
initialize_params {
image = data.google_compute_image.powershell-3-47.self_link
}
auto_delete = true
}
network_interface {
subnetwork="${local.resource_prefix}monkeyzoo-main-1"
network_ip="10.2.3.47"
}
}
resource "google_compute_instance_from_template" "powershell-3-46" { resource "google_compute_instance_from_template" "powershell-3-46" {
name = "${local.resource_prefix}powershell-3-46" name = "${local.resource_prefix}powershell-3-46"
source_instance_template = local.default_windows source_instance_template = local.default_windows