Mike Salvatore
c28e200a25
Agent: Remove disused PowerShellRemotingDisabledError
2022-03-23 14:43:59 -04:00
Mike Salvatore
385449101d
Tests: Move host fixtures to conftest.py
2022-03-23 14:43:59 -04:00
Mike Salvatore
3d7586f713
Agent: Fix edge case handling in auth_options._get_ssl()
...
If the host has neither the HTTP or HTTPS port enabled, return False.
2022-03-23 14:43:59 -04:00
Mike Salvatore
4b84ba3fc0
Tests: Fix unit tests for powershell_utils.auth_options
2022-03-23 14:43:59 -04:00
Shreya Malviya
e947f335ff
Agent: Remove unused functions in PowerShell exploiter
2022-03-23 14:43:59 -04:00
Shreya Malviya
4614e2207d
Agent: Decide if SSL is to be used in auth_options.py
2022-03-23 14:43:59 -04:00
Shreya Malviya
6d9e18fdc9
Island: Add 5985 and 5986 to TCP ports
2022-03-23 14:43:59 -04:00
Ilija Lazoroski
51cfb73ce0
Agent: User random binary destination path for MSSQL Exploit
2022-03-23 14:42:10 -04:00
Ilija Lazoroski
cad5fa4897
Agent: Use random binary destination path for SSH Exploit
2022-03-23 14:41:06 -04:00
Mike Salvatore
82b6cdbad5
Merge pull request #1804 from guardicore/1782-powershell
...
Agent: Upload binary with random string when using powershell
2022-03-23 14:33:25 -04:00
Mike Salvatore
99b8321271
Tests: Fix broken PowerShellExploiter tests
2022-03-23 14:32:08 -04:00
Mike Salvatore
d3fc833813
Agent: Use Paths in IPowerShellClient.copy_file()
2022-03-23 14:25:28 -04:00
Ilija Lazoroski
1e28599398
Agent: Make ZeroLogon interruptibale
2022-03-23 14:14:47 -04:00
Mike Salvatore
56bdcbeddd
Agent: Pull paramiko from specific tag
...
Co-authored-by: vakarisz <vakarisz@yahoo.com>
2022-03-23 11:34:13 -04:00
vakaris_zilius
7001977a88
Agent: Change powershell client to work with Path not str
2022-03-23 15:24:36 +00:00
vakaris_zilius
7c504d220d
Agent: Upload binary with random string when using powershell
2022-03-23 14:56:05 +00:00
Mike Salvatore
06f33e0fa1
Merge pull request #1802 from guardicore/1782-random-agent-filename
...
Agent: Add a method that appends random string to filename in path
2022-03-23 09:41:17 -04:00
vakaris_zilius
c2b06f22f0
Agent: Improve path comparison style in test_helpers.py
2022-03-23 13:37:33 +00:00
vakaris_zilius
efb0039e34
Agent: Make _add_random_suffix method code more concise
2022-03-23 13:33:26 +00:00
vakaris_zilius
2e6b361a9d
Agent: Add a method that appends random string to filename in path
...
This method will be used to avoid duplication in destination file paths and will avoid clashes of exploiters writing to same files
2022-03-23 10:49:25 +00:00
Mike Salvatore
3973f26192
Build: Bump Python version for building AppImage to 3.7.13
2022-03-22 19:34:25 -04:00
Mike Salvatore
426fc15ec1
Agent: Fix typo interruptable -> interruptible
2022-03-22 08:35:08 -04:00
Ilija Lazoroski
8921ed77ac
Agent: Make Hadoop interruptable
2022-03-22 08:23:33 -04:00
Mike Salvatore
ed817feaf2
Agent: Make SMBExploiter interruptible
2022-03-22 07:33:00 -04:00
vakaris_zilius
2c7920c95a
Agent: Fix ssh timeout for open_sftp by using forked paramiko
2022-03-22 07:09:09 -04:00
VakarisZ
663c1c6471
Merge pull request #1796 from guardicore/1611-interruptable-log4shell
...
Agent: Make log4shell interruptable
2022-03-22 07:14:36 +00:00
vakaris_zilius
3cfa72f731
Agent: Remove unreliable stop check in log4shell
2022-03-22 06:57:33 +00:00
Mike Salvatore
f3fddfb4ba
Merge pull request #1789 from guardicore/1611-interruptable-ssh-exploit
...
1611 interruptable ssh exploit
2022-03-21 14:09:00 -04:00
Ilija Lazoroski
e3e038bf40
Agent: Add timeouts to SSH exploit
2022-03-21 18:48:53 +01:00
Ilija Lazoroski
9765f64174
Agent: Make SSH interruptable
2022-03-21 17:37:35 +01:00
vakaris_zilius
684e723b09
Agent: Fix timer usage in log4shell
2022-03-21 16:20:48 +00:00
vakaris_zilius
325c4368de
Agent: Remove unnecessary interrupts from log4shell
2022-03-21 16:11:59 +00:00
Mike Salvatore
0f77d4ca37
Agent: Use Timer in Log4ShellExploiter
2022-03-21 11:46:55 -04:00
vakaris_zilius
41278c8044
Agent: Make log4shell interruptable
2022-03-21 15:04:24 +00:00
Mike Salvatore
b1716e9457
Merge pull request #1791 from guardicore/1611-interruptable-powershell
...
1611 Make powershell exploiter interruptable
2022-03-21 10:27:01 -04:00
Mike Salvatore
cda113d291
Agent: Check _signal_handler before resetting on Windows
...
We don't need to call win32api.SetConsoleCtrlHandler if _signal_handler
is None (i.e. was never set).
2022-03-21 10:21:10 -04:00
Mike Salvatore
a2ac2658ed
Agent: Initialize self._master = None
2022-03-21 10:19:54 -04:00
Mike Salvatore
7a1fcced2f
Agent: Extract method _set_interrupted() from is_interrupted()
2022-03-21 09:09:15 -04:00
Mike Salvatore
b0f03179c1
Agent: Add `interrupted` boolean to ExploiterResultData
...
Setting an interrupted flag on the ExploiterResultData is a more useful
way to present the information to anything that uses it. If decisions
need to be made based on whether or not something was interrupted, a
flag can be checked instead of parsing an error message.
2022-03-21 09:00:43 -04:00
Mike Salvatore
83b18debc0
Agent: Remove InterruptError and use `if` instead
2022-03-21 09:00:43 -04:00
vakaris_zilius
f50f4cf71c
Agent: Add interrupt error message to powershell results
2022-03-21 09:00:43 -04:00
vakaris_zilius
02154e38fd
Agent: Make powershell exploiter interruptable
2022-03-21 09:00:43 -04:00
Mike Salvatore
61344f9861
Merge pull request #1792 from guardicore/1741-add-smb-to-puppet
...
1741 add smb to puppet
2022-03-21 08:16:24 -04:00
Mike Salvatore
75ea2c8c3a
Docs: Remove reference to example.conf
2022-03-21 08:15:25 -04:00
Mike Salvatore
896a9171ac
Agent: Add missing 'f' to f-string
2022-03-21 08:14:01 -04:00
Mike Salvatore
cadc23d8a5
Agent: Only start/stop tunnel if the agent is able to propagate
...
Starting and stopping the tunnel is slow, and only necessary if the
agent plans to propagate. If depth < 1, propagation will not occur, so
there's no point in having a tunnel open. If a `-d` parameter is not
supplied to the agent, the tunnel will be started.
2022-03-21 08:11:19 -04:00
Mike Salvatore
7e4ec00454
Agent: Add error message to exploit_result when SMB exploiter gives up
2022-03-21 07:21:05 -04:00
Mike Salvatore
9ca8bc1a60
Agent: Remove example.conf
...
This file is out of date and an unnecessary maintenance burden.
2022-03-21 07:16:22 -04:00
Mike Salvatore
89bda5ae87
Agent: Improve logging in SMBExploiter
2022-03-21 07:15:47 -04:00
VakarisZ
fe7c7d5d9c
Merge pull request #1793 from guardicore/agent-log-timestamp-ordering
...
Agent log timestamp ordering
2022-03-21 07:46:04 +00:00