p41275903
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Agent: Change windows removal command

This commit is contained in:
Ilija Lazoroski 2022-04-19 21:37:24 +02:00 committed by Mike Salvatore
parent 4f5711b2ba
commit f2527b4d89
2 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
monkey/infection_monkey/model/__init__.py
View File

@ -28,9 +28,18 @@ MONKEY_CMDLINE_DETACHED_WINDOWS = "%s start cmd /c %%(monkey_path)s %s" % (
CMD_PREFIX, CMD_PREFIX,
MONKEY_ARG, MONKEY_ARG,
) )
# Time for delay deleting monkey executable
DELAY_SECONDS = 5
# Command that returns 1 if the process is running and 0 otherwise
CHECK_RUNNING_MONKEY_CMD = 'tasklist /fi "PID eq %(exe_pid)s" ^| find /C "%(exe_pid)s"'
DELETE_FILE_AND_EXIT = "del /f /q %(file_path)s & exit"
# Command that checks for running monkey process 20 times
# If the monkey is running it sleeps for 'delay_seconds'
# If the monkey is not running it deletes the executable and exits the loop
DELAY_DELETE_CMD = ( DELAY_DELETE_CMD = (
"cmd /c (for /l %%i in (1,0,2) do (ping -n 60 127.0.0.1 & del /f /q %(file_path)s & " f'cmd /c (for /l %%i in (1,1,20) do (for /F "delims=" %%j IN '
"if not exist %(file_path)s exit)) > NUL 2>&1 " f'(\'{CHECK_RUNNING_MONKEY_CMD}\') DO if "%%j"=="1" (timeout {DELAY_SECONDS}) else '
f"({DELETE_FILE_AND_EXIT})) ) > NUL 2>&1"
) )
# Commands used for downloading monkeys # Commands used for downloading monkeys

2
monkey/infection_monkey/monkey.py
View File

@ -415,7 +415,7 @@ class InfectionMonkey:
startupinfo.dwFlags = CREATE_NEW_CONSOLE | STARTF_USESHOWWINDOW startupinfo.dwFlags = CREATE_NEW_CONSOLE | STARTF_USESHOWWINDOW
startupinfo.wShowWindow = SW_HIDE startupinfo.wShowWindow = SW_HIDE
subprocess.Popen( subprocess.Popen(
DELAY_DELETE_CMD % {"file_path": sys.executable}, DELAY_DELETE_CMD % {"file_path": sys.executable, "exe_pid": os.getpid()},
stdin=None, stdin=None,
stdout=None, stdout=None,
stderr=None, stderr=None,