Commit Graph

530 Commits

Author SHA1 Message Date
Itay Mizeretz f9206ff817 Remove unsafe exploits from default config 2017-10-04 15:25:34 +03:00
Itay Mizeretz 8ecb895244 Change default for victims_max_find
Move things around in config
2017-10-04 14:57:56 +03:00
Itay Mizeretz 70c4a99e83 Add clean node image 2017-10-04 14:08:43 +03:00
Itay Mizeretz 4625378737 minor fixes 2017-10-04 14:07:38 +03:00
itaymmguardicore d7ce6c2293 Merge pull request #56 from guardicore/feature/removednet
Remove DNET library.
2017-10-04 10:50:41 +03:00
Daniel Goldberg 2949d4a8c2 Remove DNET library. 2017-10-03 18:20:20 +03:00
Itay Mizeretz 0c971da15c linux's implementation of local_ips returns array of strs instead of unicodes
This fixes SambaCry Linux->Linux exploit among other things
2017-10-03 17:08:23 +03:00
Itay Mizeretz 14eec1ba99 Log stack trace of exceptions thrown from exploit 2017-10-03 16:18:34 +03:00
Itay Mizeretz 65f5dbeaaf Sleep only *between* life cycles 2017-10-03 15:47:50 +03:00
Itay Mizeretz 2bbd5d4824 Fix SambaCry .close() bug 2017-10-03 15:47:07 +03:00
Daniel Goldberg 039cc1bd6c Merge pull request #55 from guardicore/bugfix/fix-sambacry-for-user
Fix SambaCry not working for non-root user
2017-10-02 17:32:06 +03:00
Itay Mizeretz 65872d9518 Fix SambaCry not working for non-root user 2017-10-02 17:11:51 +03:00
Daniel Goldberg 62713932de Merge pull request #54 from guardicore/bugfix/various-fixes
Bugfix/various fixes
2017-10-02 12:48:29 +03:00
Daniel Goldberg 39ab50f376 Fix inconsistent return value in send_head 2017-10-02 12:40:53 +03:00
Daniel Goldberg 637b704fa2 remove fully qualified path 2017-10-02 12:40:53 +03:00
Daniel Goldberg 9d5ea03eb3 PEP8+python exceptions 2017-10-02 12:40:53 +03:00
Daniel Goldberg a2b1b78f0b PEP8 + Python exception 2017-10-02 12:40:53 +03:00
Daniel Goldberg b668a0d0f3 PEP8 + Python exceptions 2017-10-02 12:40:53 +03:00
Daniel Goldberg b77aa5d10c PEP8 + new exception format. 2017-10-02 12:40:53 +03:00
Itay Mizeretz 8ddac92429 Fix mimikatz lowercase hostname comparison 2017-10-02 12:14:31 +03:00
Itay Mizeretz a04f34bb41 Commented out Useless button 2017-10-02 11:59:48 +03:00
Itay Mizeretz fd85bfb044 Add map legend 2017-10-02 11:43:23 +03:00
Itay Mizeretz afcd066fff Fix mimikatz bug where plain passwords weren't collected when they could have 2017-10-02 11:25:53 +03:00
Itay Mizeretz 48be73bc3f Fix edge width and tunnel edge color 2017-10-01 18:36:23 +03:00
Itay Mizeretz 27d9e8bcee Fix bug in processing tunnel edges 2017-10-01 16:34:11 +03:00
Itay Mizeretz 22ff980923 Merge remote-tracking branch 'origin/develop' into bugfix/various-fixes 2017-10-01 11:36:12 +03:00
Daniel Goldberg b910baf1d0 Stupid, stupid casting bug. 2017-10-01 11:35:17 +03:00
Daniel Goldberg e8583a5bd8 Merge pull request #52 from guardicore/feature/pass-the-hash
Feature/pass the hash
2017-09-28 19:27:12 +03:00
Itay Mizeretz 9af6590e75 Fix CR 2017-09-28 19:03:31 +03:00
Itay Mizeretz 2d83657bd9 Fix missing WindowsError on linux 2017-09-28 17:56:34 +03:00
Itay Mizeretz 6233fec0f7 If exception thrown from exploit, we now send telemetry about trying 2017-09-28 16:14:30 +03:00
Itay Mizeretz 7365f7d6a7 Fix in sambacry
Sambacry tries to exploit when can't recognize version
2017-09-28 16:13:47 +03:00
Itay Mizeretz 3c345679b3 Change skip exploit if monkey exist to false 2017-09-28 14:44:18 +03:00
Itay Mizeretz 174c74cbcb Temporarily disable shellshock reporting its vulnerable pages 2017-09-28 14:43:08 +03:00
Daniel Goldberg 5586619f19 PEP8 fun 2017-09-28 14:22:35 +03:00
Daniel Goldberg a27c802b11 If already touching this file, modify it for PEP8 + better exception syntax. 2017-09-28 14:17:41 +03:00
Itay Mizeretz cf9fa82b67 Change C&C map physics to something decent 2017-09-28 11:13:00 +03:00
Itay Mizeretz 48ce135194 Merge remote-tracking branch 'origin/develop' into feature/pass-the-hash
# Conflicts:
#	monkey_island/cc/services/config.py
2017-09-27 18:42:25 +03:00
Itay Mizeretz d628a27595 Add pass-the-hash for wmi 2017-09-27 18:30:44 +03:00
Itay Mizeretz 7e3f420fe0 Add pass-the-hash for sambacry 2017-09-27 17:23:23 +03:00
itaymmguardicore 9242fe3232 Merge pull request #51 from guardicore/feature/elasticgroovy
Feature/elasticgroovy
2017-09-27 15:41:40 +03:00
Daniel Goldberg 6b7f67933d Finish fixing CR notes. 2017-09-27 14:38:44 +03:00
Itay Mizeretz fe77fc833c fix ntlm_hash telem 2017-09-27 14:28:53 +03:00
Daniel Goldberg 142401e706 change the user/password combo to existing function in another place. 2017-09-27 13:40:50 +03:00
Daniel Goldberg 08aaed8eb3 Merge pull request #53 from guardicore/bugfix/expand-env-variables-in-config
Expand config env variables on demand
2017-09-27 13:39:51 +03:00
Itay Mizeretz 22ce3d9387 Expand config env variables on demand 2017-09-27 11:24:42 +03:00
Itay Mizeretz 7e2e2aa15f Global config updates of creds now apply to running monkeys
Fix issue caused by moving of the credentials to basic tab
2017-09-26 20:00:56 +03:00
Daniel Goldberg 5e8288e211 Fixed CR notes in
https://github.com/guardicore/monkey/pull/51#pullrequestreview-65212211
2017-09-26 18:16:20 +03:00
Itay Mizeretz 89b442be58 Implement pass the hash for SMB 2017-09-26 18:11:13 +03:00
Daniel Goldberg 798b2a8794 Add Elastic Exploit to the UI 2017-09-26 15:45:43 +03:00