p59342861
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Agent: Fix propagation success toggle in log4shell 

Propagation will only be marked successful if the agent got downloaded, not if the java class got downloaded
This commit is contained in:
vakaris_zilius 2022-03-24 10:39:41 +00:00
parent 90b4038c14
commit 1436be6428
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
monkey/infection_monkey/exploit/log4shell.py
View File

@ -159,7 +159,6 @@ class Log4ShellExploiter(WebRCE):
"port": port, "port": port,
} }
self.exploit_info["vulnerable_urls"].append(url) self.exploit_info["vulnerable_urls"].append(url)
self.exploit_result.propagation_success = True
def _wait_for_victim(self) -> bool: def _wait_for_victim(self) -> bool:
victim_called_back = self._wait_for_victim_to_download_java_bytecode() victim_called_back = self._wait_for_victim_to_download_java_bytecode()
@ -188,6 +187,7 @@ class Log4ShellExploiter(WebRCE):
while not timer.is_expired(): while not timer.is_expired():
if self._agent_http_server_thread.downloads > 0: if self._agent_http_server_thread.downloads > 0:
self.exploit_result.propagation_success = True
break break
# TODO: if the http server got an error we're waiting for nothing here # TODO: if the http server got an error we're waiting for nothing here