From 046b18e71cd320b8168bd3c0d43346e85f923131 Mon Sep 17 00:00:00 2001 From: Itay Mizeretz Date: Tue, 28 Nov 2017 14:22:11 +0200 Subject: [PATCH] Don't show actual password on stolen creds table --- monkey_island/cc/services/report.py | 3 +-- .../cc/ui/src/components/report-components/StolenPasswords.js | 1 - 2 files changed, 1 insertion(+), 3 deletions(-) diff --git a/monkey_island/cc/services/report.py b/monkey_island/cc/services/report.py index 3a3509a40..e7ec00e5e 100644 --- a/monkey_island/cc/services/report.py +++ b/monkey_island/cc/services/report.py @@ -88,7 +88,7 @@ class ReportService: @staticmethod def get_stolen_creds(): - PASS_TYPE_DICT = {'password': 'Password', 'lm_hash': 'LM', 'ntlm_hash': 'NTLM'} + PASS_TYPE_DICT = {'password': 'Clear Password', 'lm_hash': 'LM', 'ntlm_hash': 'NTLM'} creds = [] for telem in mongo.db.telemetry.find( {'telem_type': 'system_info_collection', 'data.credentials': {'$exists': True}}, @@ -103,7 +103,6 @@ class ReportService: creds.append( { 'username': user, - 'password': monkey_creds[user][pass_type], 'type': PASS_TYPE_DICT[pass_type], 'origin': origin } diff --git a/monkey_island/cc/ui/src/components/report-components/StolenPasswords.js b/monkey_island/cc/ui/src/components/report-components/StolenPasswords.js index 754b51f92..7c42b6ea5 100644 --- a/monkey_island/cc/ui/src/components/report-components/StolenPasswords.js +++ b/monkey_island/cc/ui/src/components/report-components/StolenPasswords.js @@ -6,7 +6,6 @@ const columns = [ Header: 'Stolen Credentials', columns: [ { Header: 'Username', accessor: 'username'}, - { Header: 'Password/Hash', accessor: 'password'}, { Header: 'Type', accessor: 'type'}, { Header: 'Origin', accessor: 'origin'} ]