forked from p15670423/monkey
BB: Remove WebLogic exploiter
This commit is contained in:
parent
89384ca6f7
commit
d9c295bed4
|
@ -16,7 +16,6 @@ class Performance(ConfigTemplate):
|
||||||
"SmbExploiter",
|
"SmbExploiter",
|
||||||
"WmiExploiter",
|
"WmiExploiter",
|
||||||
"SSHExploiter",
|
"SSHExploiter",
|
||||||
"WebLogicExploiter",
|
|
||||||
"HadoopExploiter",
|
"HadoopExploiter",
|
||||||
"MSSQLExploiter",
|
"MSSQLExploiter",
|
||||||
"PowerShellExploiter",
|
"PowerShellExploiter",
|
||||||
|
|
|
@ -1,18 +0,0 @@
|
||||||
from copy import copy
|
|
||||||
|
|
||||||
from envs.monkey_zoo.blackbox.config_templates.base_template import BaseTemplate
|
|
||||||
from envs.monkey_zoo.blackbox.config_templates.config_template import ConfigTemplate
|
|
||||||
|
|
||||||
|
|
||||||
class Weblogic(ConfigTemplate):
|
|
||||||
|
|
||||||
config_values = copy(BaseTemplate.config_values)
|
|
||||||
|
|
||||||
config_values.update(
|
|
||||||
{
|
|
||||||
"basic.exploiters.exploiter_classes": ["WebLogicExploiter"],
|
|
||||||
"basic_network.scope.subnet_scan_list": ["10.2.2.18", "10.2.2.19"],
|
|
||||||
"internal.network.tcp_scanner.HTTP_PORTS": [7001],
|
|
||||||
"internal.network.tcp_scanner.tcp_target_ports": [],
|
|
||||||
}
|
|
||||||
)
|
|
|
@ -11,8 +11,6 @@ GCP_TEST_MACHINE_LIST = {
|
||||||
"tunneling-10",
|
"tunneling-10",
|
||||||
"tunneling-11",
|
"tunneling-11",
|
||||||
"tunneling-12",
|
"tunneling-12",
|
||||||
"weblogic-18",
|
|
||||||
"weblogic-19",
|
|
||||||
"zerologon-25",
|
"zerologon-25",
|
||||||
],
|
],
|
||||||
"europe-west1-b": [
|
"europe-west1-b": [
|
||||||
|
|
|
@ -22,7 +22,6 @@ from envs.monkey_zoo.blackbox.config_templates.smb_mimikatz import SmbMimikatz
|
||||||
from envs.monkey_zoo.blackbox.config_templates.smb_pth import SmbPth
|
from envs.monkey_zoo.blackbox.config_templates.smb_pth import SmbPth
|
||||||
from envs.monkey_zoo.blackbox.config_templates.ssh import Ssh
|
from envs.monkey_zoo.blackbox.config_templates.ssh import Ssh
|
||||||
from envs.monkey_zoo.blackbox.config_templates.tunneling import Tunneling
|
from envs.monkey_zoo.blackbox.config_templates.tunneling import Tunneling
|
||||||
from envs.monkey_zoo.blackbox.config_templates.weblogic import Weblogic
|
|
||||||
from envs.monkey_zoo.blackbox.config_templates.wmi_mimikatz import WmiMimikatz
|
from envs.monkey_zoo.blackbox.config_templates.wmi_mimikatz import WmiMimikatz
|
||||||
from envs.monkey_zoo.blackbox.config_templates.wmi_pth import WmiPth
|
from envs.monkey_zoo.blackbox.config_templates.wmi_pth import WmiPth
|
||||||
from envs.monkey_zoo.blackbox.config_templates.zerologon import Zerologon
|
from envs.monkey_zoo.blackbox.config_templates.zerologon import Zerologon
|
||||||
|
@ -184,10 +183,6 @@ class TestMonkeyBlackbox:
|
||||||
def test_smb_pth(self, island_client):
|
def test_smb_pth(self, island_client):
|
||||||
TestMonkeyBlackbox.run_exploitation_test(island_client, SmbPth, "SMB_PTH")
|
TestMonkeyBlackbox.run_exploitation_test(island_client, SmbPth, "SMB_PTH")
|
||||||
|
|
||||||
@pytest.mark.skip(reason="Weblogic exploiter is deprecated")
|
|
||||||
def test_weblogic_exploiter(self, island_client):
|
|
||||||
TestMonkeyBlackbox.run_exploitation_test(island_client, Weblogic, "Weblogic_exploiter")
|
|
||||||
|
|
||||||
def test_log4j_solr_exploiter(self, island_client):
|
def test_log4j_solr_exploiter(self, island_client):
|
||||||
TestMonkeyBlackbox.run_exploitation_test(
|
TestMonkeyBlackbox.run_exploitation_test(
|
||||||
island_client, Log4jSolr, "Log4Shell_Solr_exploiter"
|
island_client, Log4jSolr, "Log4Shell_Solr_exploiter"
|
||||||
|
|
|
@ -14,7 +14,6 @@ from envs.monkey_zoo.blackbox.config_templates.smb_mimikatz import SmbMimikatz
|
||||||
from envs.monkey_zoo.blackbox.config_templates.smb_pth import SmbPth
|
from envs.monkey_zoo.blackbox.config_templates.smb_pth import SmbPth
|
||||||
from envs.monkey_zoo.blackbox.config_templates.ssh import Ssh
|
from envs.monkey_zoo.blackbox.config_templates.ssh import Ssh
|
||||||
from envs.monkey_zoo.blackbox.config_templates.tunneling import Tunneling
|
from envs.monkey_zoo.blackbox.config_templates.tunneling import Tunneling
|
||||||
from envs.monkey_zoo.blackbox.config_templates.weblogic import Weblogic
|
|
||||||
from envs.monkey_zoo.blackbox.config_templates.wmi_mimikatz import WmiMimikatz
|
from envs.monkey_zoo.blackbox.config_templates.wmi_mimikatz import WmiMimikatz
|
||||||
from envs.monkey_zoo.blackbox.config_templates.wmi_pth import WmiPth
|
from envs.monkey_zoo.blackbox.config_templates.wmi_pth import WmiPth
|
||||||
from envs.monkey_zoo.blackbox.config_templates.zerologon import Zerologon
|
from envs.monkey_zoo.blackbox.config_templates.zerologon import Zerologon
|
||||||
|
@ -44,7 +43,6 @@ CONFIG_TEMPLATES = [
|
||||||
SmbPth,
|
SmbPth,
|
||||||
Ssh,
|
Ssh,
|
||||||
Tunneling,
|
Tunneling,
|
||||||
Weblogic,
|
|
||||||
WmiMimikatz,
|
WmiMimikatz,
|
||||||
WmiPth,
|
WmiPth,
|
||||||
Zerologon,
|
Zerologon,
|
||||||
|
|
|
@ -18,8 +18,6 @@ This document describes Infection Monkey’s test network, how to deploy and use
|
||||||
[Nr. 15 Mimikatz](#_Toc536021468)<br>
|
[Nr. 15 Mimikatz](#_Toc536021468)<br>
|
||||||
[Nr. 16 MsSQL](#_Toc536021469)<br>
|
[Nr. 16 MsSQL](#_Toc536021469)<br>
|
||||||
[Nr. 17 Upgrader](#_Toc536021470)<br>
|
[Nr. 17 Upgrader](#_Toc536021470)<br>
|
||||||
[Nr. 18 WebLogic](#_Toc526517180)<br>
|
|
||||||
[Nr. 19 WebLogic](#_Toc526517181)<br>
|
|
||||||
[Nr. 21 Scan](#_Toc526517196)<br>
|
[Nr. 21 Scan](#_Toc526517196)<br>
|
||||||
[Nr. 22 Scan](#_Toc526517197)<br>
|
[Nr. 22 Scan](#_Toc526517197)<br>
|
||||||
[Nr. 25 Zerologon](#_Toc536021478)<br>
|
[Nr. 25 Zerologon](#_Toc536021478)<br>
|
||||||
|
@ -632,80 +630,6 @@ Update all requirements using deployment script:<br>
|
||||||
</tbody>
|
</tbody>
|
||||||
</table>
|
</table>
|
||||||
|
|
||||||
<table>
|
|
||||||
<thead>
|
|
||||||
<tr class="header">
|
|
||||||
<th><p><span id="_Toc526517180" class="anchor"></span>Nr. <strong>18</strong> WebLogic</p>
|
|
||||||
<p>(10.2.2.18)</p></th>
|
|
||||||
<th>(Vulnerable)</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr class="odd">
|
|
||||||
<td>OS:</td>
|
|
||||||
<td><strong>Ubuntu 16.04.05 x64</strong></td>
|
|
||||||
</tr>
|
|
||||||
<tr class="even">
|
|
||||||
<td>Software:</td>
|
|
||||||
<td><p>JDK,</p>
|
|
||||||
<p><a href="https://www.oracle.com/technetwork/middleware/weblogic/downloads/wls-main-097127.html">Oracle WebLogic server 12.2.1.2</a></p></td>
|
|
||||||
</tr>
|
|
||||||
<tr class="odd">
|
|
||||||
<td>Default server’s port:</td>
|
|
||||||
<td>7001</td>
|
|
||||||
</tr>
|
|
||||||
<tr class="even">
|
|
||||||
<td>Admin domain credentials:</td>
|
|
||||||
<td>weblogic : B74Ot0c4</td>
|
|
||||||
</tr>
|
|
||||||
<tr class="odd">
|
|
||||||
<td>Server’s config:</td>
|
|
||||||
<td>Default</td>
|
|
||||||
</tr>
|
|
||||||
<tr class="even">
|
|
||||||
<td>Notes:</td>
|
|
||||||
<td></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
<table>
|
|
||||||
<thead>
|
|
||||||
<tr class="header">
|
|
||||||
<th><p><span id="_Toc526517181" class="anchor"></span>Nr. <strong>19</strong> WebLogic</p>
|
|
||||||
<p>(10.2.2.19)</p></th>
|
|
||||||
<th>(Vulnerable)</th>
|
|
||||||
</tr>
|
|
||||||
</thead>
|
|
||||||
<tbody>
|
|
||||||
<tr class="odd">
|
|
||||||
<td>OS:</td>
|
|
||||||
<td><strong>Windows 10 x64</strong></td>
|
|
||||||
</tr>
|
|
||||||
<tr class="even">
|
|
||||||
<td>Software:</td>
|
|
||||||
<td><p>JDK,</p>
|
|
||||||
<p><a href="https://www.oracle.com/technetwork/middleware/weblogic/downloads/wls-main-097127.html">Oracle WebLogic server 12.2.1.2</a></p></td>
|
|
||||||
</tr>
|
|
||||||
<tr class="odd">
|
|
||||||
<td>Default server’s port:</td>
|
|
||||||
<td>7001</td>
|
|
||||||
</tr>
|
|
||||||
<tr class="even">
|
|
||||||
<td>Admin servers credentials:</td>
|
|
||||||
<td>weblogic : =ThS2d=m(`B</td>
|
|
||||||
</tr>
|
|
||||||
<tr class="odd">
|
|
||||||
<td>Server’s config:</td>
|
|
||||||
<td>Default</td>
|
|
||||||
</tr>
|
|
||||||
<tr class="even">
|
|
||||||
<td>Notes:</td>
|
|
||||||
<td></td>
|
|
||||||
</tr>
|
|
||||||
</tbody>
|
|
||||||
</table>
|
|
||||||
|
|
||||||
<table>
|
<table>
|
||||||
<thead>
|
<thead>
|
||||||
<tr class="header">
|
<tr class="header">
|
||||||
|
|
|
@ -83,14 +83,6 @@ data "google_compute_image" "log4j-logstash-56" {
|
||||||
name = "log4j-logstash-56"
|
name = "log4j-logstash-56"
|
||||||
project = local.monkeyzoo_project
|
project = local.monkeyzoo_project
|
||||||
}
|
}
|
||||||
data "google_compute_image" "weblogic-18" {
|
|
||||||
name = "weblogic-18"
|
|
||||||
project = local.monkeyzoo_project
|
|
||||||
}
|
|
||||||
data "google_compute_image" "weblogic-19" {
|
|
||||||
name = "weblogic-19"
|
|
||||||
project = local.monkeyzoo_project
|
|
||||||
}
|
|
||||||
data "google_compute_image" "scan-21" {
|
data "google_compute_image" "scan-21" {
|
||||||
name = "scan-21"
|
name = "scan-21"
|
||||||
project = local.monkeyzoo_project
|
project = local.monkeyzoo_project
|
||||||
|
|
|
@ -400,56 +400,6 @@ resource "google_compute_instance_from_template" "log4j-logstash-56" {
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
/* We need to alter monkey's behavior for this to upload 32-bit monkey instead of 64-bit (not yet developed)
|
|
||||||
resource "google_compute_instance_from_template" "upgrader-17" {
|
|
||||||
name = "${local.resource_prefix}upgrader-17"
|
|
||||||
source_instance_template = "${local.default_windows}"
|
|
||||||
boot_disk{
|
|
||||||
initialize_params {
|
|
||||||
image = "${data.google_compute_image.upgrader-17.self_link}"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
network_interface {
|
|
||||||
subnetwork="${local.resource_prefix}monkeyzoo-main"
|
|
||||||
network_ip="10.2.2.17"
|
|
||||||
access_config {
|
|
||||||
// Cheaper, non-premium routing
|
|
||||||
network_tier = "STANDARD"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
*/
|
|
||||||
|
|
||||||
resource "google_compute_instance_from_template" "weblogic-18" {
|
|
||||||
name = "${local.resource_prefix}weblogic-18"
|
|
||||||
source_instance_template = local.default_ubuntu
|
|
||||||
boot_disk{
|
|
||||||
initialize_params {
|
|
||||||
image = data.google_compute_image.weblogic-18.self_link
|
|
||||||
}
|
|
||||||
auto_delete = true
|
|
||||||
}
|
|
||||||
network_interface {
|
|
||||||
subnetwork="${local.resource_prefix}monkeyzoo-main"
|
|
||||||
network_ip="10.2.2.18"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
resource "google_compute_instance_from_template" "weblogic-19" {
|
|
||||||
name = "${local.resource_prefix}weblogic-19"
|
|
||||||
source_instance_template = local.default_windows
|
|
||||||
boot_disk{
|
|
||||||
initialize_params {
|
|
||||||
image = data.google_compute_image.weblogic-19.self_link
|
|
||||||
}
|
|
||||||
auto_delete = true
|
|
||||||
}
|
|
||||||
network_interface {
|
|
||||||
subnetwork="${local.resource_prefix}monkeyzoo-main"
|
|
||||||
network_ip="10.2.2.19"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
resource "google_compute_instance_from_template" "scan-21" {
|
resource "google_compute_instance_from_template" "scan-21" {
|
||||||
name = "${local.resource_prefix}scan-21"
|
name = "${local.resource_prefix}scan-21"
|
||||||
source_instance_template = local.default_ubuntu
|
source_instance_template = local.default_ubuntu
|
||||||
|
|
Loading…
Reference in New Issue