Ilija Lazoroski
27c0b838c4
Island: Fix one missed telemetry processor
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
474a26aeff
UI: Fix StolenCredentials issue to add if we have any stolen credentials
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
5c765f85c2
UI: Add StolenCredentialsIssue to issues
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
35ed7f60c4
Island: Fix an import in initialize
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
c65439e049
UI: Remove WeakPassword issue
...
* We don't have the passwords used for exploiting the machines
in the UI
* All it will be reworked
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
1683265868
Island: Rename reporting/stolen_credentials.py to
...
reporting/format_credentials.py
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
5ebf0ed8f6
Island: Remove StolenCredentials model
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
a24bdd43b8
Island: Move credentials parser hack to dirty_hacks function
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
885f0565a8
Island: Patch T1003 with a callable class
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
06a64c14d7
Island: Add callable class for T1003
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
c83f76b02b
Island: Add formatting credentials for report
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
c75ee22c29
Island: Remove get_config_{users,passwords} from reporting
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
94419d8141
Island: Add PTHReportservice get issues functions
...
* get_duplicated_passwords_issues
* get strong_users_on_crit_issues
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
f417cff17b
UI: Rename UsedCredentials.tsx.js to UsedCredentials.js
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
bfda71dd45
UI: Check for actual stolen credentials in issues
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
89f5ff89d2
Island: Remove extract_ssh_keys from stolen_credentials reporting
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
4dbdbcc75e
UI: Remove unneeded logging in UsedCredentials component
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
8ccdba7528
UI: Grab credentials from endpoint and render them
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
f99bd74cd4
UI: Construct and render stolen credentials
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
2861f0b085
UI: Add UsedCredentials component to render credentials
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
e61b0bfdca
UI: Add credentials parsing functionalities
2022-07-18 21:23:17 +02:00
Ilija Lazoroski
f0f4f6d591
Island: Remove credentials from reporting
2022-07-18 21:23:17 +02:00
ilija-lazoroski
7456ef6b05
Merge pull request #2100 from guardicore/2092-remove-single-tests
...
2092 remove single tests
2022-07-18 21:02:54 +02:00
Mike Salvatore
ea1dc930a1
BB: Remove "single_tests" subpackage
2022-07-18 13:08:29 -04:00
Mike Salvatore
cf45ae4c3e
BB: Remove "grouped" subpackage
2022-07-18 13:07:18 -04:00
Mike Salvatore
c1073bd1ea
BB: Remove unused "single_tests"
2022-07-18 13:06:00 -04:00
Mike Salvatore
70f3506317
BB: Remove test_blackbox_in_depth.py
2022-07-18 13:02:19 -04:00
Mike Salvatore
4e11ed2816
Merge pull request #2099 from guardicore/2072-credentials-store-fix
...
2072 credentials store fix
2022-07-18 11:07:38 -04:00
Mike Salvatore
dde3fd3476
UT: Parametrize test_get_credentials_from_store()
2022-07-18 10:30:52 -04:00
Mike Salvatore
ebc854735e
Agent: Use new Credentials objects in AggregatingCredentialsStore
2022-07-18 10:22:14 -04:00
Mike Salvatore
ef4fbb30cc
Agent: Use new credentials format in ControlChannel
2022-07-18 09:55:08 -04:00
Mike Salvatore
19a7bfd8e6
Merge pull request #2098 from guardicore/2072-simplify-credentials
...
2072 simplify credentials
2022-07-18 09:35:54 -04:00
Mike Salvatore
e5d3271b74
UT: Use Credentials.to_mapping() in test_credential_telem_send()
2022-07-18 09:23:21 -04:00
Mike Salvatore
068dbbe963
Agent: Extract methods to clean up AggregatingCredentialsStore
2022-07-18 09:14:51 -04:00
Mike Salvatore
7c920cced3
Agent: Fix identity logic in AggregatingCredentialsStore
2022-07-18 09:07:11 -04:00
Mike Salvatore
9edfe6979b
Agent: Capture secrets if missing username in SSHCredentialCollector
2022-07-18 08:53:36 -04:00
Mike Salvatore
d5a125d985
Agent: Capture username even if no secrets are associated
2022-07-18 08:46:07 -04:00
Mike Salvatore
c144ad9e64
Agent: Fix "new user" logic in MimikatzCredentialCollector
...
Neither Passwords nor hashes should be included for and users that
Infection Monkey creates.
2022-07-18 08:42:31 -04:00
Mike Salvatore
cb9f43d242
Agent: Fix type hint in MimikatzCredentialCollector
2022-07-18 08:27:32 -04:00
Mike Salvatore
302803b779
Agent: Improve variable names in MimikatzCredentialCollector
2022-07-18 08:27:08 -04:00
Mike Salvatore
acf12c2de1
Common: Simplify _make_credentials()
2022-07-18 08:14:01 -04:00
Mike Salvatore
9e7963afc0
Common: Simplify _serialize_credentials()
2022-07-18 08:13:09 -04:00
Ilija Lazoroski
575fff0cdb
Agent: Simplify credentials object in MimikatzCredentialCollector
2022-07-18 11:49:44 +02:00
Ilija Lazoroski
2cb6c60866
UT: Fix credentials intercepting telemetry messenger tests
2022-07-18 11:47:49 +02:00
Ilija Lazoroski
0f2fc0902f
Agent: Simplify credentials object in aggregating credentials store
2022-07-18 11:32:12 +02:00
Ilija Lazoroski
f421f42604
Agent: Simplify credentials in ssh credentials collector
2022-07-18 11:32:12 +02:00
Mike Salvatore
213b161d1a
Common: Fix type hints in credentials.py
2022-07-15 12:34:42 -04:00
Mike Salvatore
62ce91b59b
Common: Prevent invalid Credentials objects from being constructed
2022-07-15 12:19:12 -04:00
Mike Salvatore
19a720898e
Island: Handle encryption/decryption of None credential components
2022-07-15 11:36:07 -04:00
Mike Salvatore
2af713dabd
Common: Allow identities or secrets to be None
...
It's possible that credentials are stolen and an identity/secret
association can not be made. For example, a list of usernames can be
acquired by `ls /home`, but no passwords will be retrieved this way.
Credentials(identity=Username("username"), secret=None) will represent
this case.
2022-07-15 10:50:25 -04:00