Commit Graph

2507 Commits

Author SHA1 Message Date
Shay Nehmad 6ec4e613cf Extracted segmentation utils function 2019-08-25 11:31:31 +03:00
Shay Nehmad fb01bface6 Extracted config utility function to new package - in future all config should move here 2019-08-25 10:30:17 +03:00
Daniel Goldberg bd37995054
Merge pull request #414 from VakarisZ/private_key_query_fix
Attack: private key query fix, mimikatz: log message.
2019-08-25 08:46:03 +02:00
VakarisZ 97b0568c35 Added success log message in mimikatz and fixed private keys attack query 2019-08-23 16:08:53 +03:00
vkuchinov 244be146bb Update VennDiagram/index.js
[x] Scrolling issue. Since only window/document have 'scroll' event, the only option to fix tooltip issue on scrolling is just simply hide it.

That works well if after scrolling the mouse pointer doesn't stay on any venn nodes. Otherwise, you have to move mouse for the tooltip.

Theoretically, I could store hovered node coordinates and use them in _onScroll function to check if mouse is still on top one Venn nodes find window.pageYOffset difference.
2019-08-23 02:41:00 +03:00
Daniel Goldberg 489a6e8ebb
Merge pull request #409 from guardicore/feature/remove_rdp_grinder
Feature/remove rdp grinder
2019-08-22 16:11:21 +02:00
Shay Nehmad af8c7dc29f Added elasticsearch test 2019-08-22 16:18:37 +03:00
Shay Nehmad 3fef55eefa Now periodically updating the report. 2019-08-22 15:00:50 +03:00
vkuchinov 20e282f5fb Update index.js
[x] Z-Indices sorting on hover
[x] Resize (viewBox solution]
[x] Rule correction, have excluded 'Unexecuted' parameter from the sum for Rule #1

Still on my today's TODO list:

[-] Still looking for an elegant solution to scrolling glitch.
     Yes, the easiest way is to hide tooltip on scrolling, but that's not cool

[-] Need some coding refining
2019-08-22 14:50:07 +03:00
Shay Nehmad bf417ab01d Added machine exploited ZT test 2019-08-22 14:40:05 +03:00
Shay Nehmad bd97c965f1 Fixed another state bug in ZT report using deep copy 2019-08-22 14:39:40 +03:00
Itay Mizeretz d4c337dc42
Merge pull request #390 from VakarisZ/attack_scripting
T1064 Scripting
2019-08-22 14:24:33 +03:00
Itay Mizeretz 9bd4238d9c
Merge pull request #385 from VakarisZ/attack_remote_services
T1021 Remote services
2019-08-22 14:11:56 +03:00
VakarisZ b9a5ac1fe4 Refactored: scripting telemetry is send as a string, without using UsageEnum 2019-08-22 14:04:45 +03:00
Shay Nehmad 2174f43a84 Added d3 to package.json and now using the ResponsiveVennDiagram in Pillaroverview 2019-08-22 13:33:40 +03:00
Shay Nehmad 4455700c2a Merge branch '400/zero-trust-mvp' into 400-zero-trust-mvp-venn-diagram 2019-08-22 11:46:12 +03:00
Shay Nehmad 7f98f55e64 Fixed error +warning in UI
Error - didn't use deep copy and caused error
Warning - 2 events might have the same timestamp
2019-08-22 11:21:52 +03:00
Shay Nehmad 4581376d8d Added the open http endpoint test 2019-08-22 10:52:33 +03:00
vkuchinov 83ed12249e VennDiagram component 2019-08-22 10:13:10 +03:00
VakarisZ 9b23be44ed Added hash parsing to the T1021 remote services attack technique. 2019-08-22 09:28:53 +03:00
Shay Nehmad d6104bbcf9 Started implementing the open_data_endpoints test, still not creating findings 2019-08-21 21:28:15 +03:00
Shay Nehmad 6843606a4f Merge commit leftovers 2019-08-21 19:03:51 +03:00
Shay Nehmad 293a6639f2 Merge branch 'develop' into 400/zero-trust-mvp 2019-08-21 19:03:33 +03:00
Shay Nehmad bfaa05aa51 Minor CR fixes - changed downlaod filename, refactored some names 2019-08-21 18:48:02 +03:00
Shay Nehmad 3f85c336b9 Moved init of mappings to init file 2019-08-21 18:32:39 +03:00
Daniel Goldberg ef4113d31b
Merge pull request #410 from VakarisZ/default_server_bugfix
Bugfix for monkey without -s flag
2019-08-21 16:47:02 +02:00
Itay Mizeretz fc23faed3e
Merge pull request #384 from VakarisZ/attack_sys_network_config
T1016 System network configuration discovery
2019-08-21 17:41:46 +03:00
Itay Mizeretz 145488edd4
Merge pull request #383 from VakarisZ/attack_system_discovery
T1018 Remote System Discovery
2019-08-21 17:39:05 +03:00
Itay Mizeretz 3202deaf51
Merge pull request #382 from VakarisZ/attack_data_from_system
T1005 Data from local system
2019-08-21 17:37:41 +03:00
Itay Mizeretz d4c18eb07a
Merge pull request #381 from VakarisZ/attack_file_perm_mod
T1222 File permissions modification
2019-08-21 17:30:29 +03:00
Itay Mizeretz 22a5f87ebb
Merge pull request #379 from VakarisZ/attack_exfiltration_c2_channel
T1041 Exfiltration Over Command and Control Channel
2019-08-21 17:27:55 +03:00
VakarisZ 4b356c2cf4 Fixes bug where monkey crashes if default server flag is not passed 2019-08-21 11:54:38 +03:00
Daniel Goldberg 3f83e26c5b
Merge pull request #408 from guardicore/bugfix/missing_dpath_requirement_in_island
Add missing requirement
2019-08-21 10:18:53 +02:00
Daniel Goldberg 3ca2df85e2 Remove all mention of RDP grinder 2019-08-21 10:02:44 +02:00
Daniel Goldberg 2d82a18501 Add missing requirement 2019-08-21 10:02:08 +02:00
VakarisZ baccf3cc0b Merge branch 'attack_remote_services' into attack_scripting 2019-08-21 09:19:33 +03:00
VakarisZ 6a1bc4ba96 Merge branch 'attack_sys_network_config' into attack_remote_services 2019-08-21 09:19:04 +03:00
VakarisZ f014d3b035 Merge branch 'attack_system_discovery' into attack_sys_network_config 2019-08-21 09:18:32 +03:00
VakarisZ 3852bb80f3 Merge branch 'attack_data_from_system' into attack_system_discovery 2019-08-21 09:08:54 +03:00
VakarisZ b80040c547 Merge branch 'attack_file_perm_mod' into attack_data_from_system 2019-08-21 09:07:48 +03:00
VakarisZ ba40f1a5c4 Merge branch 'attack_exfiltration_c2_channel' into attack_file_perm_mod 2019-08-21 09:06:33 +03:00
VakarisZ 1dfdb9b0a1 Merge remote-tracking branch 'upstream/develop' into attack_exfiltration_c2_channel
# Conflicts:
#	monkey/monkey_island/cc/models/monkey.py
#	monkey/monkey_island/cc/ui/src/components/attack/techniques/T1090.js
2019-08-21 09:05:34 +03:00
Itay Mizeretz 10b2c2e6cb
Merge pull request #377 from VakarisZ/attack_proxy
T1188 Multi-hop proxy and T1090 Connection proxy
2019-08-20 19:17:47 +03:00
VakarisZ 68aec8e336 Exported UsageTechnique class to separate file, improved documentation. Refactored scripting attack telemetry sending in pba 2019-08-20 18:15:25 +03:00
VakarisZ 4013652f6c Merge branch 'attack_remote_services' into attack_scripting 2019-08-20 17:09:03 +03:00
VakarisZ 54b38b04b2 Exported common T1021 and T1110 functions to 'technique_report_tools.py' file, fixed 'ScanStatus' usage on front end 2019-08-20 17:03:26 +03:00
VakarisZ 1360e1877c Merge branch 'attack_sys_network_config' into attack_remote_services 2019-08-20 16:36:26 +03:00
VakarisZ fd20d98a8f Fixed CR comments 2019-08-20 16:27:48 +03:00
VakarisZ 320bcc4c1d Merge branch 'attack_system_discovery' into attack_sys_network_config
# Conflicts:
#	monkey/monkey_island/cc/ui/src/components/attack/techniques/Helpers.js
#	monkey/monkey_island/cc/ui/src/components/attack/techniques/T1082.js
2019-08-20 16:10:06 +03:00
VakarisZ d73e846419 Fixed CR comments 2019-08-20 15:39:10 +03:00