Commit Graph

3246 Commits

Author SHA1 Message Date
Shreya 45c5546f17 Add "Hidden files" PBA feature
TODO: winAPI
2020-06-24 14:33:08 +05:30
Shreya Malviya 08727305d8
Merge pull request #687 from shreyamalviya/T1156
Add T1156 and T1504 attack techniques (shell startup file modifications)
2020-06-24 14:13:09 +05:30
Shreya 53e6f893c6 Disabled prop-types warning in eslint
(Accidentally force-pushed over the previous commit changing this)
2020-06-24 13:58:52 +05:30
Shreya f21dbde27d Extend windows PBA for all users on system 2020-06-24 13:37:08 +05:30
Shreya 7efeff3ff0 Modify linux PBA so it doesn't give errors when running on windows 2020-06-24 13:25:54 +05:30
Shreya 6f6bfca9f9 Use mongo search for report data
(For linux, shows only bash startup files in ATT&CK report)
2020-06-24 13:25:54 +05:30
Shreya 7459105bbc Extend linux PBA for all users on system
TODO: ATT&CK report stuff (mongo search + show only bash file modification info)
TODO: Windows
2020-06-24 13:25:54 +05:30
Shreya 8d2aaac65f Fix + make linux PBA commands cleaner 2020-06-24 13:25:54 +05:30
Shreya e5f92d29b5 Add startup files for fish, zsh, dash, ksh, sh, csh, tcsh 2020-06-24 13:25:54 +05:30
Shreya 0c60ad16ae Code design changes 2020-06-24 13:25:54 +05:30
Shreya 60207e3a79 Change file locations 2020-06-24 13:25:54 +05:30
Shreya 6d98f95d4c Make used/scanned/unscanned messages descriptive 2020-06-24 13:25:54 +05:30
Shreya 58a0a67244 Add T1504 to config_schema 2020-06-24 13:25:54 +05:30
Shreya ef6bb52302 Remove Privilege escalation/T1504 in attack_schema
Shows it twice in ATT&CK matrix in the configuration,
but shows it only once in the ATT&CK matrix in the report section.
2020-06-24 13:25:54 +05:30
Shreya 8bb5096add Add T1504 report data + modify T1156 report data 2020-06-24 13:25:54 +05:30
Shreya 1b040dc874 Add windows PBA 2020-06-24 13:25:54 +05:30
Shreya 3fe4dd679b Pass empty string to linux_cmds if OS is windows 2020-06-24 13:25:54 +05:30
Shreya dfa34e602f Started T1504 implementation
Add to `attack_schema.py`, `attack_report.py`
Add report `T1504.js`
2020-06-24 13:25:54 +05:30
Shreya e2d35ca267 Simpler bash commands for linux PBA 2020-06-24 13:25:54 +05:30
Shreya a9c763cd9c Add linux PBA + report components 2020-06-24 13:25:49 +05:30
Shay Nehmad 6ead5d43cf
Merge pull request #691 from guardicore/bugfix/pth_map_include
UI bugfix: non-existent PTH map include
2020-06-23 10:43:56 +03:00
VakarisZ 6f6cf76977 UI bugfix: non-existent PTH map include 2020-06-23 10:34:18 +03:00
VakarisZ 0ec5259540
Merge pull request #678 from guardicore/feature/pypykatz
Mimikatz dll to pypykatz refactor
2020-06-08 15:21:49 +03:00
VakarisZ 7e9251272f
Merge pull request #671 from guardicore/feature/edge_refactoring
Edge refactoring to DAL and minor PIP improvements
2020-06-08 15:17:19 +03:00
VakarisZ 966599a038 Removed pass the hash map UI component 2020-06-08 15:12:40 +03:00
VakarisZ 5669ae652c Bugfix - username with "." character fix 2020-06-08 14:24:16 +03:00
VakarisZ 3228bcf2c7 CR comments fixed: renames and readability improvements 2020-06-08 14:23:39 +03:00
VakarisZ 4c8319669f Map jiggle small-fix: wait less for map to stop moving 2020-06-08 10:31:31 +03:00
VakarisZ fb59531969 Refactored EdgeService into a boundary object. 2020-06-08 10:29:04 +03:00
Shay Nehmad 6c28ff058a
Merge pull request #680 from guardicore/master
Master
2020-06-07 17:12:24 +03:00
Shay Nehmad 3726a14f68
Merge pull request #663 from guardicore/release/1.8.2
Release/1.8.2
2020-06-07 16:04:00 +03:00
VakarisZ 0dc864baa5 Fixed a bug that added empty credentials to configuration 2020-06-05 15:59:31 +03:00
VakarisZ 6703e32ff2 UI bugs, related to PTH map hiding, fixed. 2020-06-05 14:54:04 +03:00
VakarisZ c03c70ba28 Removed infrastructure related to mimikatz binary: deployment scripts and docs updated 2020-06-05 14:40:58 +03:00
VakarisZ 0be709958c Improved scanned servers overview by inputting space character code 2020-06-05 12:09:28 +03:00
VakarisZ f5b37044fd Removed PTH map 2020-06-05 09:36:53 +03:00
VakarisZ 895db8b446 Fixed bugs and finished up pypykatz integration 2020-06-05 09:36:35 +03:00
VakarisZ 192ac67159 Fixed typo in ScannedServers.js 2020-06-05 09:27:09 +03:00
Shay Nehmad 9ea6718d37 Moved a function into common, since Monkey doesn't have ring as a dependency
Also renamed it and added UTs
2020-06-03 16:18:19 +03:00
Shay Nehmad ca87ff1330 Merge branch 'develop' into release/1.8.2 2020-06-03 15:55:29 +03:00
VakarisZ 90b47a4bb6 Migrated to pypykatz on monkey 2020-06-03 10:02:31 +03:00
Shay Nehmad 33ef1f6261
Merge pull request #670 from guardicore/485/handle-missing-binaries
485/handle missing binaries
2020-05-31 11:20:34 +03:00
VakarisZ a160e3396b Small PEP improvements all around, unused method deleted on displayed_edge.py 2020-05-29 11:42:27 +03:00
VakarisZ 0a52158a61 Merge remote-tracking branch 'upstream/develop' into feature/edge_and_config_refactoring 2020-05-29 11:08:00 +03:00
VakarisZ 092482ad87 Refactored edge from mongo queries to DAL 2020-05-29 11:07:25 +03:00
ophirharpazg a07ec9251c formatting of the binaries path 2020-05-29 00:30:03 +03:00
ophirharpazg 02bdf4bb11 Added text to the missing-binaries modal 2020-05-27 21:31:32 +03:00
ophirharpazg a4d4f629e0 Raise a modal indicating that Monkey binaries are missing. 2020-05-27 19:32:09 +03:00
ophirharpazg e1229baa61 The Missing Binaries modal works but in a non-elegant way 2020-05-27 17:10:36 +03:00
VakarisZ d430b91eac
Merge pull request #666 from guardicore/665/reset-env-button-state-bug
Fix reset env state bug
2020-05-27 11:00:12 +03:00