p59342861
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge pull request #1580 from guardicore/1577-timeout-backdoor-user-pba 

Modify "Communicate as Backdoor User" PBA's HTTP requests
This commit is contained in:
Mike Salvatore 2021-11-12 07:56:23 -05:00 committed by GitHub
parent 54519dc309 9ee6049636
commit 9f4bf71976
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG.md
View File

@ -9,6 +9,8 @@ Changelog](https://keepachangelog.com/en/1.0.0/).
### Added ### Added
### Changed ### Changed
- "Communicate as Backdoor User" PBA's HTTP requests to request headers only and
include a timeout. #1577
### Removed ### Removed
- The VSFTPD exploiter. #1533 - The VSFTPD exploiter. #1533

6
monkey/infection_monkey/post_breach/actions/communicate_as_backdoor_user.py
View File

@ -67,16 +67,16 @@ class CommunicateAsBackdoorUser(PBA):
format_string = ( format_string = (
'powershell.exe -command "[Net.ServicePointManager]::SecurityProtocol = [' 'powershell.exe -command "[Net.ServicePointManager]::SecurityProtocol = ['
"Net.SecurityProtocolType]::Tls12; " "Net.SecurityProtocolType]::Tls12; "
'Invoke-WebRequest {url} -UseBasicParsing"' 'Invoke-WebRequest {url} -UseBasicParsing -method HEAD"'
) )
else: else:
# if curl works, we're good. # if curl works, we're good.
# If curl doesn't exist or fails and wget work, we're good. # If curl doesn't exist or fails and wget work, we're good.
# And if both don't exist: we'll call it a win. # And if both don't exist: we'll call it a win.
if shutil.which("curl") is not None: if shutil.which("curl") is not None:
format_string = "curl {url}" format_string = "curl {url} --head --max-time 10"
else: else:
format_string = "wget -O/dev/null -q {url}" format_string = "wget -O/dev/null -q {url} --method=HEAD --timeout=10"
return format_string.format(url=url) return format_string.format(url=url)
def send_result_telemetry(self, exit_status, commandline, username): def send_result_telemetry(self, exit_status, commandline, username):

2
monkey/infection_monkey/utils/windows/users.py
View File

@ -15,7 +15,7 @@ if is_windows_os():
ACTIVE_NO_NET_USER = "/ACTIVE:NO" ACTIVE_NO_NET_USER = "/ACTIVE:NO"
WAIT_TIMEOUT_IN_MILLISECONDS = 60 * 1000 WAIT_TIMEOUT_IN_MILLISECONDS = 10 * 1000
logger = logging.getLogger(__name__) logger = logging.getLogger(__name__)