p41275903
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

UT: Separate mimikatz credentials stolen event test

This commit is contained in:
Ilija Lazoroski 2022-08-18 09:22:59 +02:00
parent 6722057491
commit 20f529d6a2
1 changed files with 28 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

29
monkey/tests/unit_tests/infection_monkey/credential_collectors/test_mimikatz_collector.py
View File

@ -124,12 +124,39 @@ def test_mimikatz_credentials_stolen_event_published(monkeypatch):
patch_pypykatz([], monkeypatch) patch_pypykatz([], monkeypatch)
mimikatz_credential_collector = MimikatzCredentialCollector(mock_event_queue) mimikatz_credential_collector = MimikatzCredentialCollector(mock_event_queue)
collected_credentials = mimikatz_credential_collector.collect_credentials() mimikatz_credential_collector.collect_credentials()
mock_event_queue.publish.assert_called_once() mock_event_queue.publish.assert_called_once()
mock_event_queue_call_args = mock_event_queue.publish.call_args[0][0] mock_event_queue_call_args = mock_event_queue.publish.call_args[0][0]
assert isinstance(mock_event_queue_call_args, CredentialsStolenEvent) assert isinstance(mock_event_queue_call_args, CredentialsStolenEvent)
def test_mimikatz_credentials_stolen_event_tags(monkeypatch):
mock_event_queue = MagicMock(spec=IEventQueue)
patch_pypykatz([], monkeypatch)
mimikatz_credential_collector = MimikatzCredentialCollector(mock_event_queue)
mimikatz_credential_collector.collect_credentials()
mock_event_queue_call_args = mock_event_queue.publish.call_args[0][0]
assert mock_event_queue_call_args.tags == MIMIKATZ_EVENT_TAGS assert mock_event_queue_call_args.tags == MIMIKATZ_EVENT_TAGS
def test_mimikatz_credentials_stolen_event_stolen_credentials(monkeypatch):
mock_event_queue = MagicMock(spec=IEventQueue)
win_creds = [
WindowsCredentials(
username="user2", password="secret2", lm_hash="0182BD0BD4444BF8FC83B5D9042EED2E"
),
]
patch_pypykatz(win_creds, monkeypatch)
mimikatz_credential_collector = MimikatzCredentialCollector(mock_event_queue)
collected_credentials = mimikatz_credential_collector.collect_credentials()
mock_event_queue_call_args = mock_event_queue.publish.call_args[0][0]
assert mock_event_queue_call_args.stolen_credentials == collected_credentials assert mock_event_queue_call_args.stolen_credentials == collected_credentials