show low sevirity threat users

monkey_island/cc/resources/pthmap.py

@@ -824,6 +824,11 @@ class PassTheHashMap(object):
 
         return machines
 
+    @cache
+    def GetNonCritialServers(self):
+        return self.machines - self.GetCritialServers()
+        
+    @cache
     def GetThreateningUsersByVictim(self, victim):
         threatening_users = set()
         
@@ -876,6 +881,26 @@ def main():
     print """</table>"""
     
     
+    print "<h2>Strong Users That Threat NonCritical Servers</h2>"
+    print "<h3>Administrators of non-critical servers that we could find thier secret cached somewhere</h3>"
+    
+    threatening = dict(map(lambda x: (x, len(pth.GetThreateningUsersByVictim(x))), pth.GetNonCritialServers()))
+    
+    print """<table>"""
+    print """<tr><th>Critical Server</th><th>Hostname</th><th>Domain</th><th>Threatening User Count</th><th>Threatening Users</th></tr>"""
+    for m, count in sorted(threatening.iteritems(), key=lambda (k,v): (v,k), reverse=True):
+        if count <= 0:
+            continue
+        print """<tr><td><a href="#{ip}">{ip}</a></td><td>{hostname}</td><td>{domain}</td><td>{count}</td>""".format(ip=m.GetIp(), hostname=m.GetHostName(), domain=m.GetDomainName(), count=count)
+        print """<td><ul>"""
+        
+        for sid in pth.GetThreateningUsersByVictim(m):
+            print """<li><a href="#{sid}">{username}</a></li>""".format(sid=sid, username=pth.GetUsernameBySid(sid))
+
+        print """</ul></td></tr>"""
+    print """</table>"""
+   
+    
     print "<h2>Cached Passwords</h2>"
     print "<h3>On how many machines each secret is cached (possible attacker count)?</h3>"
     cache_counts = dict(map(lambda x: (x, pth.GetAttackCountBySecret(x)), pth.GetAllSecrets()))