Merge pull request #2354 from guardicore/2323-use-socketaddress-in-running_on_island

2323 use socketaddress in running on island
This commit is contained in:
Kekoa Kaaikala 2022-09-27 09:44:04 -04:00 committed by GitHub
commit 036a382e95
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
5 changed files with 21 additions and 31 deletions

View File

@ -8,6 +8,7 @@ from urllib3 import disable_warnings
from common.common_consts.timeouts import MEDIUM_REQUEST_TIMEOUT from common.common_consts.timeouts import MEDIUM_REQUEST_TIMEOUT
from common.network.network_utils import get_my_ip_addresses_legacy from common.network.network_utils import get_my_ip_addresses_legacy
from common.types import SocketAddress
from infection_monkey.config import GUID from infection_monkey.config import GUID
from infection_monkey.island_api_client import IIslandAPIClient from infection_monkey.island_api_client import IIslandAPIClient
from infection_monkey.network.info import get_host_subnets from infection_monkey.network.info import get_host_subnets
@ -24,7 +25,7 @@ class ControlClient:
# https://github.com/guardicore/monkey/blob/133f7f5da131b481561141171827d1f9943f6aec/monkey/infection_monkey/telemetry/base_telem.py # https://github.com/guardicore/monkey/blob/133f7f5da131b481561141171827d1f9943f6aec/monkey/infection_monkey/telemetry/base_telem.py
control_client_object = None control_client_object = None
def __init__(self, server_address: str, island_api_client: IIslandAPIClient): def __init__(self, server_address: SocketAddress, island_api_client: IIslandAPIClient):
self.server_address = server_address self.server_address = server_address
self._island_api_client = island_api_client self._island_api_client = island_api_client
@ -55,12 +56,6 @@ class ControlClient:
) )
def send_telemetry(self, telem_category, json_data: str): def send_telemetry(self, telem_category, json_data: str):
if not self.server_address:
logger.error(
"Trying to send %s telemetry before current server is established, aborting."
% telem_category
)
return
try: try:
telemetry = {"monkey_guid": GUID, "telem_category": telem_category, "data": json_data} telemetry = {"monkey_guid": GUID, "telem_category": telem_category, "data": json_data}
requests.post( # noqa: DUO123 requests.post( # noqa: DUO123
@ -74,8 +69,6 @@ class ControlClient:
logger.warning(f"Error connecting to control server {self.server_address}: {exc}") logger.warning(f"Error connecting to control server {self.server_address}: {exc}")
def send_log(self, log): def send_log(self, log):
if not self.server_address:
return
try: try:
telemetry = {"monkey_guid": GUID, "log": json.dumps(log)} telemetry = {"monkey_guid": GUID, "log": json.dumps(log)}
self._island_api_client.send_log(json.dumps(telemetry)) self._island_api_client.send_log(json.dumps(telemetry))

View File

@ -16,11 +16,7 @@ from common.agent_event_serializers import (
from common.agent_events import CredentialsStolenEvent from common.agent_events import CredentialsStolenEvent
from common.agent_registration_data import AgentRegistrationData from common.agent_registration_data import AgentRegistrationData
from common.event_queue import IAgentEventQueue, PyPubSubAgentEventQueue from common.event_queue import IAgentEventQueue, PyPubSubAgentEventQueue
from common.network.network_utils import ( from common.network.network_utils import get_my_ip_addresses, get_network_interfaces
address_to_ip_port,
get_my_ip_addresses,
get_network_interfaces,
)
from common.types import SocketAddress from common.types import SocketAddress
from common.utils.argparse_types import positive_int from common.utils.argparse_types import positive_int
from common.utils.attack_utils import ScanStatus, UsageEnum from common.utils.attack_utils import ScanStatus, UsageEnum
@ -118,17 +114,17 @@ class InfectionMonkey:
self._agent_event_serializer_registry = self._setup_agent_event_serializers() self._agent_event_serializer_registry = self._setup_agent_event_serializers()
server, self._island_api_client = self._connect_to_island_api() self._island_address, self._island_api_client = self._connect_to_island_api()
self._cmd_island_ip = server.ip self._cmd_island_ip = self._island_address.ip
self._cmd_island_port = server.port self._cmd_island_port = self._island_address.port
self._island_address = SocketAddress(self._cmd_island_ip, self._cmd_island_port)
self._control_client = ControlClient( self._control_client = ControlClient(
server_address=str(server), island_api_client=self._island_api_client server_address=self._island_address, island_api_client=self._island_api_client
) )
self._control_channel = ControlChannel(str(server), get_agent_id(), self._island_api_client) self._control_channel = ControlChannel(
self._register_agent(self._island_address) str(self._island_address), get_agent_id(), self._island_api_client
)
self._register_agent()
# TODO Refactor the telemetry messengers to accept control client # TODO Refactor the telemetry messengers to accept control client
# and remove control_client_object # and remove control_client_object
@ -178,14 +174,14 @@ class InfectionMonkey:
return server, island_api_client return server, island_api_client
def _register_agent(self, server: SocketAddress): def _register_agent(self):
agent_registration_data = AgentRegistrationData( agent_registration_data = AgentRegistrationData(
id=get_agent_id(), id=get_agent_id(),
machine_hardware_id=get_machine_id(), machine_hardware_id=get_machine_id(),
start_time=agent_process.get_start_time(), start_time=agent_process.get_start_time(),
# parent_id=parent, # parent_id=parent,
parent_id=None, # None for now, until we change GUID to UUID parent_id=None, # None for now, until we change GUID to UUID
cc_server=server, cc_server=self._island_address,
network_interfaces=get_network_interfaces(), network_interfaces=get_network_interfaces(),
) )
self._island_api_client.register_agent(agent_registration_data) self._island_api_client.register_agent(agent_registration_data)
@ -444,8 +440,8 @@ class InfectionMonkey:
return VictimHostFactory(self._cmd_island_ip, self._cmd_island_port, on_island) return VictimHostFactory(self._cmd_island_ip, self._cmd_island_port, on_island)
def _running_on_island(self, local_network_interfaces: List[IPv4Interface]) -> bool: def _running_on_island(self, local_network_interfaces: List[IPv4Interface]) -> bool:
server_ip, _ = address_to_ip_port(self._control_client.server_address) server_ip = self._control_client.server_address.ip
return server_ip in {str(interface.ip) for interface in local_network_interfaces} return server_ip in {interface.ip for interface in local_network_interfaces}
def _is_another_monkey_running(self): def _is_another_monkey_running(self):
return not self._singleton.try_lock() return not self._singleton.try_lock()

View File

@ -51,7 +51,7 @@ def tcp_port_to_service(port):
return "tcp-" + str(port) return "tcp-" + str(port)
def get_interface_to_target(dst): def get_interface_to_target(dst: str) -> str:
""" """
:param dst: destination IP address string without port. E.G. '192.168.1.1.' :param dst: destination IP address string without port. E.G. '192.168.1.1.'
:return: IP address string of an interface that can connect to the target. E.G. '192.168.1.4.' :return: IP address string of an interface that can connect to the target. E.G. '192.168.1.4.'

View File

@ -83,11 +83,12 @@ class CustomPBA(PBA):
if not status: if not status:
status = ScanStatus.USED status = ScanStatus.USED
server_ip = str(self.control_client.server_address.ip)
self.telemetry_messenger.send_telemetry( self.telemetry_messenger.send_telemetry(
T1105Telem( T1105Telem(
status, status,
self.control_client.server_address.split(":")[0], server_ip,
get_interface_to_target(self.control_client.server_address.split(":")[0]), get_interface_to_target(server_ip),
filename, filename,
) )
) )

View File

@ -1,6 +1,6 @@
import logging import logging
import subprocess import subprocess
from typing import Dict, Iterable, List, Tuple from typing import Dict, Iterable, List, Optional, Tuple
from common.common_consts.timeouts import LONG_REQUEST_TIMEOUT from common.common_consts.timeouts import LONG_REQUEST_TIMEOUT
from common.utils.attack_utils import ScanStatus from common.utils.attack_utils import ScanStatus
@ -24,7 +24,7 @@ class PBA:
name="unknown", name="unknown",
linux_cmd="", linux_cmd="",
windows_cmd="", windows_cmd="",
timeout: int = LONG_REQUEST_TIMEOUT, timeout: Optional[float] = LONG_REQUEST_TIMEOUT,
): ):
""" """
:param name: Name of post breach action. :param name: Name of post breach action.