From 67aa7d95a3db42372e13d42aa81f27a1a08158a0 Mon Sep 17 00:00:00 2001 From: Ilija Lazoroski Date: Fri, 1 Jul 2022 13:44:48 +0200 Subject: [PATCH] UI: Add vulnerability exploiters to the schema --- .../configuration/definitions/exploitation.js | 36 ++++++++----------- .../definitions/exploiter_classes.js | 10 ++++++ 2 files changed, 25 insertions(+), 21 deletions(-) diff --git a/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploitation.js b/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploitation.js index 4b765079d..2f888ef7f 100644 --- a/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploitation.js +++ b/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploitation.js @@ -18,25 +18,19 @@ export const exploitationConfigurationSchema = { 'SSHExploiter', 'MSSQLExploiter' ] - } - }, - 'vulnerability': { - 'title': 'Vulnerability Exploiters', - 'type': 'object', - 'properties': { - 'vulnerability_classes': { - 'title': 'Vulnerability Exploiters', - 'type': 'array', - 'uniqueItems': true, - 'items': { - '$ref': '#/definitions/vulnerability_classes' - }, - 'default': [ - 'Log4ShellExploiter', - 'HadoopExploiter' - ] - } - } - }, - 'options': exploitationOptionsConfigurationSchema + }, + 'vulnerability': { + 'title': 'Vulnerability Exploiters', + 'type': 'array', + 'uniqueItems': true, + 'items': { + '$ref': '#/definitions/vulnerability_classes' + }, + 'default': [ + 'Log4ShellExploiter', + 'HadoopExploiter' + ] + }, + 'options': exploitationOptionsConfigurationSchema + } }; diff --git a/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploiter_classes.js b/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploiter_classes.js index 328d356f9..12be7c791 100644 --- a/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploiter_classes.js +++ b/monkey/monkey_island/cc/ui/src/services/configuration/definitions/exploiter_classes.js @@ -101,6 +101,16 @@ export const vulnerabilityExploiters = { 'Apache Solr, Apache Tomcat, Logstash.', 'link': 'https://www.guardicore.com/infectionmonkey/docs/reference' + '/exploiters/log4shell/' + }, + { + 'type': 'string', + 'enum': ['HadoopExploiter'], + 'title': 'Hadoop/Yarn Exploiter', + 'safe': true, + 'info': 'Remote code execution on HADOOP server with YARN and default settings. ' + + 'Logic based on ' + + 'https://github.com/vulhub/vulhub/tree/master/hadoop/unauthorized-yarn.', + 'link': 'https://www.guardicore.com/infectionmonkey/docs/reference/exploiters/hadoop/' } ] }