Commit Graph

7820 Commits

Author SHA1 Message Date
Mike Salvatore 8d4edca419
Merge pull request #1813 from guardicore/1801-fix-failure-quitting-tunnel
1801 fix failure quitting tunnel
2022-03-24 14:57:24 -04:00
Mike Salvatore 35923c1eb1 BB: Reduce the timeouts for tunneling tests 2022-03-24 13:43:04 -04:00
vakarisz a92a8af96b BB: Remove smb-20 machine 2022-03-24 13:08:30 -04:00
Mike Salvatore b3b5707a45 Agent: Convert dest_path to str before performing comparison 2022-03-24 12:51:07 -04:00
Mike Salvatore 8aad5b16d5 Agent: Fix tunnel address parsing in _close_tunnel()
The current proxy schema specifies that tunnels start with "http://",
not "https://". This lead to a bug in the tunnel address parsing which
prevented the tunnel from being quit properly.
2022-03-24 12:27:22 -04:00
Mike Salvatore ef134be044 Agent: Remove default servers from WormConfiguration.command_servers
In my 16 months working on this project, the default server included in
WormConfiguration.command_servers has never had a Monkey Island running
on it. This adds a 30 second delay to each hop in the tunneling test as
the agent attempts to contact this bogus IP. Removing it speeds up
propagation and also avoids unintended consequences if a user has a
different service running on 192.0.2.0:5000.
2022-03-24 11:10:22 -04:00
Mike Salvatore 996f2b3c7a Agent: Fix unnecessary waiting in MonkeyTunnel
The monkey tunnel only needs to wait before closing if propagation was
successful. Previously, it waited before closing if any exploiter was
run.

PR: #1811
2022-03-24 11:05:05 -04:00
Mike Salvatore 2471eb6762
Merge pull request #1810 from guardicore/1782-log4shell
1782 log4shell
2022-03-24 10:50:46 -04:00
vakaris_zilius 25c7696300 Agent: Change typehints of agent destination path to PurePath 2022-03-24 14:47:07 +00:00
vakaris_zilius 49d3433ade Agent: Change to more specific typehint in helpers.py 2022-03-24 14:36:20 +00:00
Shreya Malviya cb51394439 BB: Add relevant TCP ports to PowerShell config template 2022-03-24 18:43:52 +05:30
Mike Salvatore 707c79ab21 Agent: Reduce proxy timeouts from 30 to 10 seconds
Stopping the agent is delayed by these timeouts. Reducing them allows
the agent to stop more rapidly on average.

Fixes #1372
2022-03-24 08:37:03 -04:00
vakaris_zilius 087027b20c Agent: Change WMI exploiter to use random agent name 2022-03-24 07:25:46 -04:00
vakaris_zilius 1436be6428 Agent: Fix propagation success toggle in log4shell
Propagation will only be marked successful if the agent got downloaded, not if the java class got downloaded
2022-03-24 10:39:41 +00:00
vakaris_zilius 90b4038c14 Agent: Use random agent name in log4shell exploiter 2022-03-24 10:37:57 +00:00
vakaris_zilius dc2a63475b Agent: Fix incorrect monkey destination path bug
This bug happened because Path will always cast path to current OS path and if target OS is different the path won't work. By explicitly casting the path to target OS type we get a path for target OS
2022-03-24 10:31:41 +00:00
Shreya Malviya 8ad31593b1
Merge pull request #1803 from guardicore/1788-powershell-ssl-detection
PowerShell SSL detection
2022-03-24 13:28:10 +05:30
VakarisZ cbf9544e58
Merge pull request #1805 from guardicore/1782-smb
Agent: Convert destination path to string in SMB exploiter
2022-03-24 07:39:48 +00:00
vakaris_zilius c09428dde9 Agent: Move path to string translation to smb_tools from smbexec 2022-03-24 07:38:43 +00:00
Mike Salvatore 45658b5559 Agent: Skip empty password attempts in PowerShell if HTTP disabled 2022-03-23 19:20:42 -04:00
Mike Salvatore f8b3b378d6 BB: Skip tests for deprecated exploiters 2022-03-23 14:50:38 -04:00
Mike Salvatore 5835a87d3c BB: Reduce the time that tunnels are held open in tunneling test 2022-03-23 14:50:38 -04:00
Mike Salvatore 123606f23d BB: Reduce time to wait for agents to finish
Since the agents stop and start so much more quickly now, these delays
can be reduced.
2022-03-23 14:50:38 -04:00
Mike Salvatore ef9c3f4f32 BB: Add ports 5985 and 5986 to PowerShell tests 2022-03-23 14:50:38 -04:00
Mike Salvatore 88422f9764 BB: Fix API call to kill all monkeys 2022-03-23 14:50:38 -04:00
Mike Salvatore 06899be264 Tests: Fix tests for PowerShellExploiter 2022-03-23 14:47:19 -04:00
Mike Salvatore c28e200a25 Agent: Remove disused PowerShellRemotingDisabledError 2022-03-23 14:43:59 -04:00
Mike Salvatore 385449101d Tests: Move host fixtures to conftest.py 2022-03-23 14:43:59 -04:00
Mike Salvatore 3d7586f713 Agent: Fix edge case handling in auth_options._get_ssl()
If the host has neither the HTTP or HTTPS port enabled, return False.
2022-03-23 14:43:59 -04:00
Mike Salvatore 4b84ba3fc0 Tests: Fix unit tests for powershell_utils.auth_options 2022-03-23 14:43:59 -04:00
Shreya Malviya e947f335ff Agent: Remove unused functions in PowerShell exploiter 2022-03-23 14:43:59 -04:00
Shreya Malviya 4614e2207d Agent: Decide if SSL is to be used in auth_options.py 2022-03-23 14:43:59 -04:00
Shreya Malviya 6d9e18fdc9 Island: Add 5985 and 5986 to TCP ports 2022-03-23 14:43:59 -04:00
Ilija Lazoroski 51cfb73ce0 Agent: User random binary destination path for MSSQL Exploit 2022-03-23 14:42:10 -04:00
Ilija Lazoroski cad5fa4897 Agent: Use random binary destination path for SSH Exploit 2022-03-23 14:41:06 -04:00
Mike Salvatore 82b6cdbad5
Merge pull request #1804 from guardicore/1782-powershell
Agent: Upload binary with random string when using powershell
2022-03-23 14:33:25 -04:00
Mike Salvatore 99b8321271 Tests: Fix broken PowerShellExploiter tests 2022-03-23 14:32:08 -04:00
Mike Salvatore d3fc833813 Agent: Use Paths in IPowerShellClient.copy_file() 2022-03-23 14:25:28 -04:00
Ilija Lazoroski 1e28599398 Agent: Make ZeroLogon interruptibale 2022-03-23 14:14:47 -04:00
Mike Salvatore 56bdcbeddd Agent: Pull paramiko from specific tag
Co-authored-by: vakarisz <vakarisz@yahoo.com>
2022-03-23 11:34:13 -04:00
vakaris_zilius 7001977a88 Agent: Change powershell client to work with Path not str 2022-03-23 15:24:36 +00:00
vakaris_zilius 18e3dd7c91 Agent: Convert destination path to string in SMB exploiter 2022-03-23 15:14:23 +00:00
vakaris_zilius 7c504d220d Agent: Upload binary with random string when using powershell 2022-03-23 14:56:05 +00:00
Mike Salvatore 06f33e0fa1
Merge pull request #1802 from guardicore/1782-random-agent-filename
Agent: Add a method that appends random string to filename in path
2022-03-23 09:41:17 -04:00
vakaris_zilius c2b06f22f0 Agent: Improve path comparison style in test_helpers.py 2022-03-23 13:37:33 +00:00
vakaris_zilius efb0039e34 Agent: Make _add_random_suffix method code more concise 2022-03-23 13:33:26 +00:00
vakaris_zilius 2e6b361a9d Agent: Add a method that appends random string to filename in path
This method will be used to avoid duplication in destination file paths and will avoid clashes of exploiters writing to same files
2022-03-23 10:49:25 +00:00
Mike Salvatore 3973f26192 Build: Bump Python version for building AppImage to 3.7.13 2022-03-22 19:34:25 -04:00
Mike Salvatore 426fc15ec1 Agent: Fix typo interruptable -> interruptible 2022-03-22 08:35:08 -04:00
Ilija Lazoroski 8921ed77ac Agent: Make Hadoop interruptable 2022-03-22 08:23:33 -04:00