Commit Graph

  • f803f88afc 确认合并 develop p15670423 2022-10-11 09:55:06 +0800
  • 09b3b42dc5 ADD file via upload jd003 p34709852 2022-10-10 14:48:05 +0800
  • de18b55417 Add test_dumps.py p31829507 2022-10-10 14:39:32 +0800
  • 9071fc90aa Add test_dumps p31829507 2022-10-10 14:38:31 +0800
  • 4505399049 测试:重复提交代码 wutao 2022-10-10 13:40:54 +0800
  • f5bfdc430c 测试:提交代码 wutao 2022-10-10 13:36:32 +0800
  • 0382831701 测试:提交代码 wutao 2022-10-10 13:34:44 +0800
  • 2e0ef1865b UT: Add dummy timestamp to zerologon tests 2269-publish-events-from-zerologon Kekoa Kaaikala 2022-10-07 20:34:35 +0000
  • 88d2bf7140 Agent: Add timestamps to publish calls Kekoa Kaaikala 2022-10-07 20:27:14 +0000
  • 8eb3c94a94 Agent: Report failed login attempts Kekoa Kaaikala 2022-10-07 20:14:04 +0000
  • 74088c8143 Agent: Rename is_exploitable to authenticate Kekoa Kaaikala 2022-10-07 19:50:21 +0000
  • 2281d52acc Agent: Move is_exploitable to zerologon.py Kekoa Kaaikala 2022-10-07 19:46:54 +0000
  • 374d3d8a50 Agent: Move connect_to_dc to vuln_assessment.py Kekoa Kaaikala 2022-10-07 19:38:18 +0000
  • 86edb63cb4 Agent: Fix PasswordRestorationEvent tags in Zerologon Ilija Lazoroski 2022-10-07 17:46:55 +0200
  • 6adb356e81 Agent: Move Zerologon tag to the implementation Ilija Lazoroski 2022-10-07 15:55:20 +0200
  • 559a8c9f66 UT: Improve tests for zerologon Shreya Malviya 2022-10-07 11:35:25 +0530
  • 050a84d890 Agent: Move password restoration event publishing in zerologon Shreya Malviya 2022-10-07 11:13:44 +0530
  • f05d5be32f UT: Add check if we publish events in Zerologon Ilija Lazoroski 2022-10-06 16:46:44 +0200
  • a5e31ee998 Agent: Publish PasswordRestorationEvent in zerologon Shreya Malviya 2022-10-06 17:05:48 +0530
  • a50554f115 Agent: Add `target` in CredentialsStolenEvent in zerologon Shreya Malviya 2022-10-06 17:04:58 +0530
  • 16ed8d6233 Agent: Remove `time=time()` in calls to `_publish_exploitation_event()` in zerologon since that's the default argument anyway Shreya Malviya 2022-10-06 16:43:05 +0530
  • ad47e3be2f UT: Remove unused variables from test_zerologon.py Shreya Malviya 2022-10-06 16:29:57 +0530
  • fe178841d0 Agent: Add typehint in zerologon that mypy complained about Shreya Malviya 2022-10-06 16:28:39 +0530
  • 0e2f80ded6 Agent: Fix calls to _publish_exploitation_event in zerologon Shreya Malviya 2022-10-06 16:27:44 +0530
  • 1cf017c2ac Agent: Remove publishing exploitation attempts in zerologon's vuln assessment Shreya Malviya 2022-10-06 16:25:47 +0530
  • 3b60c760e4 Agent: Catch Exception instead of BaseException in zerologon Shreya Malviya 2022-10-06 15:59:01 +0530
  • 237b0ae394 Common: Add PasswordRestorationEvent ilija-lazoroski 2022-10-05 18:13:09 +0200
  • 1db5e9adc5 UT: Add mock_agent_event_queue in zerologon tests Ilija Lazoroski 2022-10-05 17:04:30 +0200
  • 9a261296e4 UT: Fix zerologon unit tests Ilija Lazoroski 2022-10-05 16:53:04 +0200
  • d3a2fa8a4c Agent: Add zerologon exploiter tag to zerologon_utils Ilija Lazoroski 2022-10-05 16:29:41 +0200
  • ef581ff912 Agent: Ignore union-attr mypy error in Zerologon Ilija Lazoroski 2022-10-05 16:01:34 +0200
  • e9254aedbd Agent: Publish exploitation events from Zerologon Ilija Lazoroski 2022-10-05 14:15:23 +0200
  • 563957f9c2 Island: Add NodeUpdateFacade.get_event_source_machine() 2269-update-nodes-on-exploit Mike Salvatore 2022-10-07 10:36:34 -0400
  • b6a6295ae8 Island: Remove disused agent_event_handlers/utils.py Mike Salvatore 2022-10-07 09:52:29 -0400
  • e876682d84 Island: Use NodeUpdateFacade in ScanEventHandler Mike Salvatore 2022-10-07 09:51:44 -0400
  • e77932f7d6 Island: Add NodeUpdateFacade Mike Salvatore 2022-10-07 09:49:57 -0400
  • e1f32177e9 Island: Call get_or_create_target_machine() from ScanEventHandler Mike Salvatore 2022-10-05 15:01:40 -0400
  • c4052bc5ad Island: Add utils.get_or_create_target_machine() Mike Salvatore 2022-10-05 14:30:31 -0400
  • a7d7c1a787 UT: Add missing __init__.py Mike Salvatore 2022-10-05 14:16:08 -0400
  • e54c950dc3 Island: Upsert node on TCP scan event if source of event don't exist 2267-add-services-to-machine vakarisz 2022-10-07 17:21:28 +0300
  • 04fec93c39 Merge branch '2269-publish-events-from-hadoop-exploiter' into develop Mike Salvatore 2022-10-07 09:37:37 -0400
  • d9f8b2a3d0 Agent: Use T1569 tag for propagation events 2269-publish-events-from-smbexec-exploiter Kekoa Kaaikala 2022-10-07 13:30:11 +0000
  • 7797890ff4 Agent: Add attach technique T1569 Kekoa Kaaikala 2022-10-07 13:29:00 +0000
  • 104e0abda9 Agent: Fix mypy issues in smb_tools.py Kekoa Kaaikala 2022-10-07 13:26:49 +0000
  • bc0adb2193 Agent: Rename message to error_message Kekoa Kaaikala 2022-10-07 13:14:03 +0000
  • 7a664218bd Agent: Check all potential urls in Hadoop Ilija Lazoroski 2022-10-07 14:53:19 +0200
  • d3c2d95a69 Island: Handle network services in TCP scan events vakarisz 2022-10-07 16:07:04 +0300
  • c5c8bc1d2f Island: Add mongo_dot_encoder to encode "." characters vakarisz 2022-10-07 16:04:51 +0300
  • a96b82fa0f Island: Don't raise errors if machine upsert did no changes vakarisz 2022-10-07 16:02:45 +0300
  • a143d7206e Island: Reuse the same open port logic in scan_event_handler.py vakarisz 2022-10-07 10:50:24 +0300
  • d0d37ce595 Island: Update machine services with TCP scan event results vakarisz 2022-10-05 15:31:23 +0300
  • d1427117c7 Agent: Add successful exploitation in WMI 2269-publish-events-from-wmi Ilija Lazoroski 2022-10-07 14:58:32 +0200
  • 6950dcdf0c Agent: Change propagation timestamp in WMI Ilija Lazoroski 2022-10-07 14:49:49 +0200
  • 6d60e33c1e Merge branch '2269-publish-events-for-mssql-exploiter' into develop Mike Salvatore 2022-10-07 08:46:40 -0400
  • a558948c5d Agent: Remove unnecessary `pass` from MSSQLExploiter Mike Salvatore 2022-10-07 08:43:05 -0400
  • 66f5d7a86a Agent: Remove errant exploitation event from hadoop Mike Salvatore 2022-10-07 08:35:24 -0400
  • 3b225a9c7d
    Merge pull request #2376 from guardicore/dependabot/npm_and_yarn/monkey/monkey_island/cc/ui/d3-color-and-d3-3.1.0 Shreya Malviya 2022-10-07 18:01:53 +0530
  • c09c2c2127 Agent: Add attack technique tags from WMIExploiter Ilija Lazoroski 2022-10-07 14:12:52 +0200
  • ed191bcf61 Agent: Publish events from WMI Ilija Lazoroski 2022-10-07 13:55:49 +0200
  • 79e8ce5f79 Island: Pass tuple, not set to upsert_tcp_connections() Mike Salvatore 2022-10-07 07:44:49 -0400
  • 0965b97d45 Island: Use ScanEvent for typehint in ScanEventHandler Mike Salvatore 2022-10-07 07:43:10 -0400
  • 4c026241ea Island: Change method order in ScanEventHandler Mike Salvatore 2022-10-07 07:39:47 -0400
  • 25073be9f3 Agent: Remove adding vulnerable urls in Hadoop Ilija Lazoroski 2022-10-07 11:22:27 +0200
  • c02d43556a Agent: Make Hadoop tags uppercase Ilija Lazoroski 2022-10-06 13:14:55 +0200
  • 8bdb30dcfb Agent: Rename stamp to timestamp in Hadoop Ilija Lazoroski 2022-10-06 13:05:48 +0200
  • 8f6df12d9c Agent: Modify HadoopExploiter tags to be properties Ilija Lazoroski 2022-10-06 12:58:19 +0200
  • 76a3cb0ba0 Agent: Stamp time before exploit executes Kekoa Kaaikala 2022-10-05 20:16:06 +0000
  • de5d365bb0 Agent: Publish events sooner Kekoa Kaaikala 2022-10-05 18:53:31 +0000
  • 3e592cfa69 Agent: Use exploiter tag properties Kekoa Kaaikala 2022-10-05 18:25:40 +0000
  • 4a0a24dde2 Agent: Update hadoop exploiter tags T1570 -> T1105 Kekoa Kaaikala 2022-10-05 13:42:26 +0000
  • 76ae57281d Agent: Use EXPLOIT_TAGS for exploitation event Kekoa Kaaikala 2022-10-05 12:25:23 +0000
  • 54b551b728 Agent: Update tags for hadoop events Kekoa Kaaikala 2022-10-04 19:43:14 +0000
  • c31aed94ea Agent: Move successful explotiation event publish Kekoa Kaaikala 2022-10-04 19:30:42 +0000
  • bee1047024 Agent: Update hadoop failed event publishing Kekoa Kaaikala 2022-10-04 19:16:22 +0000
  • 57af640317 Agent: Use correct publish method names Kekoa Kaaikala 2022-10-04 18:26:03 +0000
  • 9c185a3a78 Agent: Add tags and error messages in Hadoop Ilija Lazoroski 2022-10-04 16:39:10 +0200
  • fe864792f3 Agent: Publish Propagation and Exploitation events from Hadoop Ilija Lazoroski 2022-10-04 13:05:10 +0200
  • 4709ae771b
    Merge pull request #2400 from guardicore/2267-add-tcp-connections VakarisZ 2022-10-07 12:15:39 +0300
  • be4ecccdcd Island: Refactor get_node_by_id to raise UnknownRecordError vakarisz 2022-10-07 10:05:06 +0300
  • ce6ca64b4d
    Agent: Define exploiter and propagation tags correctly Shreya Malviya 2022-10-07 12:00:04 +0530
  • 77d37bdb21 Merge branch '2269-publish-events-from-log4shell-exploiter' into develop Mike Salvatore 2022-10-06 17:26:06 -0400
  • 9c2cdf15e2 Agent: Add TODO in Log4ShellExploiter Mike Salvatore 2022-10-06 17:01:06 -0400
  • ead979c6ca Agent: Add T1110 to Log4Shell exploiter tags Mike Salvatore 2022-10-06 16:54:02 -0400
  • 03c6c5ea4b Agent: Remove unnecessary Path -> str in Log4ShellExploiter Mike Salvatore 2022-10-06 16:51:14 -0400
  • eac3076828 Agent: Change typehint for build_monkey_commandline's location Mike Salvatore 2022-10-06 16:50:05 -0400
  • 7bc9993c6f Agent: Reduce VICTIM_WAIT_SLEEP_TIME_SEC to 0.050 seconds Mike Salvatore 2022-10-06 16:43:05 -0400
  • 6bd7042444 Agent: Add VICTIM_WAIT_SLEEP_TIME_SEC constant in log4shell exlpoiter Mike Salvatore 2022-10-06 16:42:33 -0400
  • d8fca72f28 Agent: Publish all prop/exploit events from _wait_for_victim() Mike Salvatore 2022-10-06 16:41:20 -0400
  • b2c5b22128 Merge branch '2269-publish-events-from-powershell-exploiter' into develop Mike Salvatore 2022-10-06 12:45:13 -0400
  • 8e3bf96589 Agent: Convert plaintext to str() Mike Salvatore 2022-10-06 12:40:50 -0400
  • 65dd386603 Agent: Collect timestamp before powershell connect 2269-publish-events-from-powershell-exploiter Mike Salvatore 2022-10-06 12:39:37 -0400
  • c4573673ce Agent: Rename timestamp -> execute_agent_timestamp Mike Salvatore 2022-10-06 12:39:11 -0400
  • f917654f41 Agent: Report successful propagation if agent ran Kekoa Kaaikala 2022-10-06 16:27:57 +0000
  • 7b13817b66 Agent: Publish propagation events Kekoa Kaaikala 2022-10-06 16:25:18 +0000
  • c631755397 Agent: Publish exploitation events Kekoa Kaaikala 2022-10-06 16:15:35 +0000
  • 629c2433cd Agent: Override tag properties Kekoa Kaaikala 2022-10-06 16:14:50 +0000
  • db09fe0cae Agent: Extract method _run_agent_on_victim Kekoa Kaaikala 2022-10-06 14:49:36 +0000
  • c3ba2cf6b2 Agent: Extract method _get_rpc_connection Kekoa Kaaikala 2022-10-06 14:45:43 +0000
  • 2d130a0442 Agent: Extract method _get_agent_command Kekoa Kaaikala 2022-10-06 14:15:52 +0000
  • 156300e8ed Agent: Extract method _exploit Kekoa Kaaikala 2022-10-06 14:14:38 +0000