Commit Graph

151 Commits

Author SHA1 Message Date
Mike Salvatore 8b4d1d084e Changelog: Improve message for removing log path config options 2022-03-10 09:11:06 -05:00
Ilija Lazoroski 0947e41ea9 Changelog: Add entry for changing log file name 2022-03-10 12:39:50 +01:00
Mike Salvatore 03145a1392 Changelog: Add changelog entry for human-readable thread names 2022-03-09 10:04:45 -05:00
Mike Salvatore 145078839d Merge branch '1675-remove-32-bit-agents' into agent-refactor
PR #1758
2022-03-02 08:49:52 -05:00
Mike Salvatore 46eb8a4484 CHANGELOG: Add changelog entries for removing 32-bit agents. 2022-03-02 06:50:15 -05:00
vakarisz 458b2121cd Changelog: added entry for removed T1082 attack technique report 2022-03-01 16:16:06 +02:00
Mike Salvatore caa6405315 Agent: Change agent permissions to 700 in SSH exploiter
Changing the permissions to 777 introduces a security risk into the
target host. A malicious attacker with local access can potentially
modify the binary, resulting in code execution and privilege escalation
when the attacking agent launches the agent on the victim.

Issue #1750
2022-02-28 13:18:07 -05:00
Shreya Malviya 7e362283fa Changelog: Add entry for removing the Elastic Search exploiter 2022-02-24 19:14:20 +05:30
Mike Salvatore 55c3236d8e Changelog: Remove ShellShock exploiter 2022-02-23 10:24:23 -05:00
Mike Salvatore 095572f919 Merge branch '1606-run-credential-collectors' into agent-refactor
PR #1719
2022-02-17 09:30:01 -05:00
Mike Salvatore cc27dc9710 Changelog: Add changelog entry for SSHCollector 2022-02-16 15:17:13 -05:00
Shreya Malviya 123f0aab16 Changelog: Add entry for process list collection PBA 2022-02-16 17:09:13 +05:30
Ilija Lazoroski fb8847b5c5 Agent: Remove sambacry binaries from monkey spec
PR #1698
2022-02-09 08:25:20 -05:00
Mike Salvatore 9a88ac3ed8 Changelog: Add entry for ScoutSuite removal 2022-02-09 14:28:00 +05:30
Ilija Lazoroski e224470161 Changelog: Add entry for removal of agent's bootloader 2022-02-01 18:27:51 +01:00
Mike Salvatore d257276f30 Changelog: Add entry for removal of MS08-067 exploiter 2022-01-31 08:15:43 -05:00
Mike Salvatore 8371a268ba Island: Change the order of log messages on startup to improve UX
Some users were confused when the Island started up and thought it had
frozen. I hope to alleviate this confusion by changing the order of the
log messages. If the last message displayed after initialization
gives the user instructions on accessing the island, hopefully users
will no longer be confused.

PR #1684
2022-01-26 12:09:43 -05:00
Mike Salvatore e1cf4fa9c2 Merge branch 'release/1.13.0' into agent-refactor 2022-01-25 13:35:49 -05:00
Mike Salvatore fed7d050be Changelog: Update version and release date for v1.13.0 2022-01-25 09:54:12 -05:00
Mike Salvatore 75ed119c00 Changelog: Add changelog entries for Log4Shell exploiter 2022-01-21 07:40:42 -05:00
Ilija Lazoroski 654ff38ea0 Changelog: Add entry for removing unneeded options in internal config. 2021-12-14 16:01:25 +01:00
Ilija Lazoroski e73b4af026 Changelog: Add entry for removing MySQL fingerprinter 2021-12-14 14:54:45 +01:00
Mike Salvatore 6a1b6c784e
Merge pull request #1643 from guardicore/1538-propagation-credentials-endpoint
Implement propagation credentials endpoint
2021-12-08 06:42:49 -05:00
Mike Salvatore 5052e21d97 Island: Remove /api/monkey_control/check_remote_port/<string:port> 2021-12-07 13:26:37 -05:00
Mike Salvatore 91a8376df6 Changelog: Add propagation-credentials endpoint entry 2021-12-07 11:59:40 -05:00
Mike Salvatore 30afe3cc85 Island: Strip credentials out of config before sending to agent
The credentials for credential reuse attacks will now be retrieved by
the agent via a new endpoint that returns only credentials in order to
reduce unnecessary network traffic (issue #1538).
2021-12-03 09:13:08 -05:00
Mike Salvatore 1d7c80bfec Changelog: Add changelog entry for #1576 2021-12-01 07:40:30 -05:00
Ilija Lazoroski a41cad6291 Changelog: Add entry for removing ATT&CK configuration screen 2021-11-22 11:27:46 +01:00
Shreya Malviya 828d152203 Changelog: Add entry for removing max iters and timeout between iters config options 2021-11-19 08:07:33 -05:00
Mike Salvatore ee285b6fbd
Merge pull request #1617 from guardicore/1535-hostname-collector-removal
1535 hostname collector removal
2021-11-19 07:14:10 -05:00
Mike Salvatore c3424b46bc Changelog: Add credentials.json to the changelog 2021-11-18 14:27:43 -05:00
VakarisZ bab54e8976 Changelog: add an entry about removed hostname system info collector 2021-11-17 12:00:55 +02:00
VakarisZ 0b8af5e78f Changelog: add entry about removed environment system info collector 2021-11-16 17:50:00 +02:00
Ilija Lazoroski 729de3ae9e Changelog: Add entry for removing custom monkey dir name option 2021-11-16 11:08:50 +01:00
VakarisZ c6e180bd73 Changelog: add entry about removed azure credential collector 2021-11-16 09:46:22 +02:00
Shreya Malviya f90434d38d Chaneglog: Add entry for removing custom singleton mutex name config option 2021-11-16 11:34:14 +05:30
Ilija Lazoroski de0fff9fbb Changelog: Remove checkbox to try move the dropper 2021-11-15 14:17:32 +01:00
Ilija Lazoroski cb06f408d4 Changelog: Remove serialize config 2021-11-15 13:36:21 +01:00
Ilija Lazoroski 5073d1fe2b Changelog: Remove checkbox for file logging 2021-11-15 12:43:13 +01:00
Ilija Lazoroski 0f2a86d672 Changelog: Remove checkbox for self deleting a monkey on cleanup 2021-11-15 12:13:16 +01:00
Ilija Lazoroski bbe01778cf Changelog: Removed checkbox to send log to server 2021-11-12 15:56:11 +01:00
VakarisZ 6ee1949d46
Merge pull request #1582 from guardicore/1535-netstat-info-collector-removal
1535 netstat info collector removal
2021-11-12 17:05:44 +02:00
Shreya Malviya 59e7ac34f7
Agent: Don't download exe on Linux during signed script PBA execution 2021-11-12 07:58:04 -05:00
VakarisZ 435f52a658 Changelog: add entry about removed netstat collector 2021-11-12 14:09:07 +02:00
Shreya Malviya 9ee6049636 Changelog: Add entry for backdoor uer PBA's HTTP request modifications 2021-11-11 19:26:47 +05:30
VakarisZ e618f0613d Changelog: add entry about the removed sambacry exploiter 2021-11-10 15:44:01 +02:00
Shreya Malviya 124e9efe91 Changelog: Add entry for removing 'kill file' 2021-11-10 18:49:41 +05:30
VakarisZ 7e1e5917cb Changelog: add entry for manual monkey run option modifications 2021-11-05 11:46:43 -04:00
Shreya Malviya 779ae79499 Changelog: Add entry for removing the VSFTPD exploiter 2021-10-29 18:24:23 +05:30
VakarisZ 5cfe6de927 Changelog: add entry for fixed #1545 2021-10-28 10:49:25 -04:00