p34709852
/
monkey
forked from p15670423/monkey
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
7,971 Commits 30 Branches 0 Tags 47 MiB
Commit Graph

7971 Commits

Author SHA1 Message Date
vakarisz 1f31e96adb Agent: Make custom PBA related imports shorter 2022-03-30 15:52:02 +03:00
vakarisz 67543ef91a Agent: Add a custom PBA run check 
We only want to run the custom PBA if commands are specified
 2022-03-30 15:51:46 +03:00
vakarisz 079d768f73 Agent: Rename UsersPBA to CustomPBA for consistency 2022-03-30 15:51:44 +03:00
vakarisz 24915ba797 Agent: Load and fix the custom PBA into puppet 2022-03-30 15:51:24 +03:00
vakarisz 23b8c351fb Island, Agent: Add custom user PBA to puppet and master 2022-03-30 15:51:22 +03:00
Mike Salvatore ee0561a061 Agent: Move MockPuppet to unit test suite 
The MockPuppet is now only used by the unit tests.
 2022-03-30 07:39:34 -04:00
Mike Salvatore b5f65b16d7 Agent: Remove disused Puppet._mock_puppet attribute 2022-03-30 07:36:49 -04:00
Mike Salvatore 1f34a72421
Merge pull request #1828 from guardicore/1604-remove-dead-code 
Remove dead code
 2022-03-30 07:35:21 -04:00
Mike Salvatore 315471ab57 Agent: Remove disused WebRCE.target_url attribute 2022-03-30 07:33:53 -04:00
Mike Salvatore 9738430333 Project: Remove temporary agent-refactor vulture exceptions 2022-03-30 07:31:29 -04:00
Mike Salvatore 2c32c354ae Agent: Remove MockMaster 
This mock has outlived its usefulness and can now be removed.
 2022-03-30 07:20:37 -04:00
Mike Salvatore 73b678ae19 Agent: Remove redundant telemetry_messenger instantiation 2022-03-30 07:16:56 -04:00
Mike Salvatore 29b19a667b Swimm: update exercise Implement a new PBA — VW4rf3AxRslfT7lwaug7 2022-03-30 07:16:35 -04:00
Shreya Malviya 6c59c54739 UI: Fix logic in PostBreachParser.js for process list collection PBA 2022-03-30 15:59:46 +05:30
VakarisZ 896755f54d
Merge pull request #1829 from guardicore/1604-modify-puppet-to-run-pbas 
PBA modifications so they run
 2022-03-30 12:09:37 +03:00
Shreya Malviya ca0972f847 Agent: Pass None to telemetry_messenger arg in nested PBA classes 
This is not the most ideal way but it gets the job done without the unnecessary complexity of passing the telemetry messenger through different classes and functions when it's not needed.
 2022-03-30 14:01:12 +05:30
Shreya Malviya 3f01b9bcac Agent: Pass telemetry_messenger to PBA constructors where it was missing 2022-03-30 13:52:53 +05:30
Shreya Malviya a2bad110a1 Agent: Modify PBA base class to return pba_data and not None 2022-03-30 13:46:09 +05:30
Shreya Malviya 501d32b171 Agent: Modify master to pass PostBreachData to PostBreachTelem 2022-03-30 13:44:38 +05:30
Shreya Malviya 9f8463f707 Agent: Modify PBA base class to accept options in its run method 2022-03-30 13:42:58 +05:30
Shreya Malviya 0be6af2d5c Agent: Modify clear command history PBA to return pba_data and not None 2022-03-30 13:42:17 +05:30
Shreya Malviya 40b1ae0058 Agent: Modify puppet to run PBAs instead of using the mock puppet 2022-03-30 13:37:47 +05:30
Shreya Malviya 296a91a458 Agent: Remove unused file post_breach_handler.py 2022-03-30 12:29:35 +05:30
Shreya Malviya 99b621f2c8 Project: Add config's post_breach_actions to Vulture's allowlist 2022-03-30 12:29:27 +05:30
Shreya Malviya 31d9f04fe7 Agent: Remove leftover WormConfiguration code from HostExploiter 2022-03-30 12:28:29 +05:30
Mike Salvatore 394088e39d BB: Reduce DELAY_BETWEEN_ANALYSIS 2022-03-29 16:10:20 -04:00
Mike Salvatore d596e8c593 Agent: Rename typing to custom_types 
Naming the module "typing" and then importing from "typing" within the
module itself caused some confusion for python and resulted in failed
builds.
 2022-03-29 14:28:16 -04:00
Mike Salvatore 8733d3f6c4 Swimm: update exercise Implement a new PBA — VW4rf3AxRslfT7lwaug7 2022-03-29 14:28:12 -04:00
Mike Salvatore 52ff1e894a Swimm: update exercise Add a new Post Breach Action (PBA) afMu3y3ny5lnrYFWl3EI 2022-03-29 14:28:07 -04:00
Mike Salvatore 2992d91f16
Merge pull request #1817 from guardicore/1801-credentials-store 
1801 credentials store
 2022-03-29 13:54:32 -04:00
Ilija Lazoroski 6ab7bd2f45 Agent, UT: Remove leftover that cause overwrite in CredentialsStore 
* Use `add` instead of `update` - `add` doesn't let to have duplicates
* Move TestTelem to conftest in UT telemetry messenger
 2022-03-29 19:53:39 +02:00
Mike Salvatore 7e476fb649 UT: Fix failing telemetry/pba tests 2022-03-29 13:38:18 -04:00
Mike Salvatore 2ecfdcfe46 Agent: Remove stale TODO in ZerologonExploiter 2022-03-29 13:02:26 -04:00
Mike Salvatore 9ded75d05d Agent: Update TODO in bit_manipulators.py 2022-03-29 12:57:31 -04:00
Mike Salvatore baa9de4087 Agent: Remove stale TODO in AutomatedMaster 2022-03-29 12:44:41 -04:00
Mike Salvatore a3c5d9dd7a Agent: Remove stale TODO in monkey.py 2022-03-29 12:40:20 -04:00
Mike Salvatore 763cf578c7 Agent: Move credentials request caching to AggregatingCredentialsStore 
The ControlChannel shouldn't be concerned with caching. It's mission
should be to service requests. The caching is more appropriately placed
in the AggregatingCredentialsStore.
 2022-03-29 12:00:57 -04:00
Ilija Lazoroski b49d9d9b9a Agent, UT: Update credentials store using `setdefault().update` 
* get_credentials use PropgationCredentials type
* private stored credentials in Aggregating Credentials Store
* initial values in credentials store constructor
* build_puppet accepts ICredentialsStore
* private telemetry_messenger in monkey
 2022-03-29 17:56:39 +02:00
Mike Salvatore def62940af Agent: Add PropagationCredentials type 2022-03-29 17:36:48 +02:00
Ilija Lazoroski e844ecf4e4 Agent: Create credentials store before building the puppet 2022-03-29 17:36:48 +02:00
Ilija Lazoroski 638658178b Agent: Create credential attribute even if we don't have credentials 2022-03-29 17:36:48 +02:00
Ilija Lazoroski 0a5fc84b4e Agent: Fix timeout in ZeroLogon 
Timeout should be on DCERPC transport factory.
 2022-03-29 17:36:48 +02:00
Ilija Lazoroski e7e6201d75 Agent: Use credential intercepting messenger in Zerologon 2022-03-29 17:36:48 +02:00
Ilija Lazoroski b8a72a9719 UT: Add credentials intercepting telemetry messenger tests 
Add __test__ to False to discard pytest warning about __init__
constructors of TestTelem classes
 2022-03-29 17:36:48 +02:00
Ilija Lazoroski 06773ba9d9 UT: Fix AutomatedMaster unit test to include Credentials Store 2022-03-29 17:36:48 +02:00
Ilija Lazoroski 1b9bbfe752 Agent: Fix ssh string to include proper user and ip 2022-03-29 17:36:48 +02:00
Ilija Lazoroski ccb0337aef Agent: Add return to get credentials method in Credentials Store 2022-03-29 17:36:48 +02:00
Ilija Lazoroski d434c20bcb Agent: Inject credentials store to Automated Master 
Intercept credentials and update the credentials store using
credentials intercepting telemetry messenger
 2022-03-29 17:36:48 +02:00
Ilija Lazoroski 4de90584c9 Agent: Add Credentials intercepting telemetry messenger 2022-03-29 17:36:48 +02:00
Mike Salvatore eb6342e2f8 Agent: Add public credentials property to CredentialsTelem 2022-03-29 17:36:48 +02:00