p59342861
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
11,421 Commits 30 Branches 0 Tags 47 MiB
Commit Graph

11421 Commits

Author SHA1 Message Date
Kekoa Kaaikala 2e0ef1865b UT: Add dummy timestamp to zerologon tests 2022-10-07 20:34:35 +00:00
Kekoa Kaaikala 88d2bf7140 Agent: Add timestamps to publish calls 2022-10-07 20:27:14 +00:00
Kekoa Kaaikala 8eb3c94a94 Agent: Report failed login attempts 2022-10-07 20:14:04 +00:00
Kekoa Kaaikala 74088c8143 Agent: Rename is_exploitable to authenticate 2022-10-07 19:50:21 +00:00
Kekoa Kaaikala 2281d52acc Agent: Move is_exploitable to zerologon.py 2022-10-07 19:46:54 +00:00
Kekoa Kaaikala 374d3d8a50 Agent: Move connect_to_dc to vuln_assessment.py 2022-10-07 19:38:18 +00:00
Ilija Lazoroski 86edb63cb4 Agent: Fix PasswordRestorationEvent tags in Zerologon 2022-10-07 17:50:16 +02:00
Ilija Lazoroski 6adb356e81 Agent: Move Zerologon tag to the implementation 
It is not used anywhere else.
 2022-10-07 17:50:16 +02:00
Shreya Malviya 559a8c9f66 UT: Improve tests for zerologon 2022-10-07 17:50:16 +02:00
Shreya Malviya 050a84d890 Agent: Move password restoration event publishing in zerologon 2022-10-07 17:50:16 +02:00
Ilija Lazoroski f05d5be32f UT: Add check if we publish events in Zerologon 2022-10-07 17:50:16 +02:00
Shreya Malviya a5e31ee998 Agent: Publish PasswordRestorationEvent in zerologon 2022-10-07 17:50:16 +02:00
Shreya Malviya a50554f115 Agent: Add `target` in CredentialsStolenEvent in zerologon 2022-10-07 17:50:16 +02:00
Shreya Malviya 16ed8d6233 Agent: Remove `time=time()` in calls to `_publish_exploitation_event()` in zerologon since that's the default argument anyway 2022-10-07 17:50:16 +02:00
Shreya Malviya ad47e3be2f UT: Remove unused variables from test_zerologon.py 2022-10-07 17:50:16 +02:00
Shreya Malviya fe178841d0 Agent: Add typehint in zerologon that mypy complained about 2022-10-07 17:50:16 +02:00
Shreya Malviya 0e2f80ded6 Agent: Fix calls to _publish_exploitation_event in zerologon 2022-10-07 17:50:16 +02:00
Shreya Malviya 1cf017c2ac Agent: Remove publishing exploitation attempts in zerologon's vuln assessment 2022-10-07 17:50:16 +02:00
Shreya Malviya 3b60c760e4 Agent: Catch Exception instead of BaseException in zerologon 2022-10-07 17:50:16 +02:00
ilija-lazoroski 237b0ae394 Common: Add PasswordRestorationEvent 2022-10-07 17:50:16 +02:00
Ilija Lazoroski 1db5e9adc5 UT: Add mock_agent_event_queue in zerologon tests 2022-10-07 17:50:16 +02:00
Ilija Lazoroski 9a261296e4 UT: Fix zerologon unit tests 2022-10-07 17:50:16 +02:00
Ilija Lazoroski d3a2fa8a4c Agent: Add zerologon exploiter tag to zerologon_utils 2022-10-07 17:50:16 +02:00
Ilija Lazoroski ef581ff912 Agent: Ignore union-attr mypy error in Zerologon 2022-10-07 17:50:16 +02:00
Ilija Lazoroski e9254aedbd Agent: Publish exploitation events from Zerologon 2022-10-07 17:50:16 +02:00
Mike Salvatore 04fec93c39 Merge branch '2269-publish-events-from-hadoop-exploiter' into develop 
PR #2396
 2022-10-07 09:37:37 -04:00
Ilija Lazoroski 7a664218bd Agent: Check all potential urls in Hadoop 2022-10-07 15:13:04 +02:00
Mike Salvatore 6d60e33c1e Merge branch '2269-publish-events-for-mssql-exploiter' into develop 
PR #2401
 2022-10-07 08:46:40 -04:00
Mike Salvatore a558948c5d Agent: Remove unnecessary `pass` from MSSQLExploiter 2022-10-07 08:43:05 -04:00
Mike Salvatore 66f5d7a86a Agent: Remove errant exploitation event from hadoop 
If no potential URLs are found, then no exploit is attempted, so there's
no reason to publish an ExploitationEvent.
 2022-10-07 08:35:24 -04:00
Shreya Malviya 3b225a9c7d
Merge pull request #2376 from guardicore/dependabot/npm_and_yarn/monkey/monkey_island/cc/ui/d3-color-and-d3-3.1.0 
Bump d3-color and d3 in /monkey/monkey_island/cc/ui
 2022-10-07 18:01:53 +05:30
Mike Salvatore 79e8ce5f79 Island: Pass tuple, not set to upsert_tcp_connections() 
pydantic can probably handle the set -> tuple conversion itself, but
mypy complains.
 2022-10-07 07:44:49 -04:00
Mike Salvatore 0965b97d45 Island: Use ScanEvent for typehint in ScanEventHandler 
`event` gets passed to `_get_source_machine()`, which expects
`ScanEvent`, not `AbstractAgentEvent`
 2022-10-07 07:43:50 -04:00
Mike Salvatore 4c026241ea Island: Change method order in ScanEventHandler 2022-10-07 07:41:50 -04:00
Ilija Lazoroski 25073be9f3 Agent: Remove adding vulnerable urls in Hadoop 
Adding vulnerable ulrs causes check to see if the target is exploitable
which calls self.exploit
 2022-10-07 11:46:35 +02:00
Ilija Lazoroski c02d43556a Agent: Make Hadoop tags uppercase 2022-10-07 11:46:35 +02:00
Ilija Lazoroski 8bdb30dcfb Agent: Rename stamp to timestamp in Hadoop 2022-10-07 11:46:35 +02:00
Ilija Lazoroski 8f6df12d9c Agent: Modify HadoopExploiter tags to be properties 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala 76a3cb0ba0 Agent: Stamp time before exploit executes 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala de5d365bb0 Agent: Publish events sooner 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala 3e592cfa69 Agent: Use exploiter tag properties 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala 4a0a24dde2 Agent: Update hadoop exploiter tags T1570 -> T1105 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala 76ae57281d Agent: Use EXPLOIT_TAGS for exploitation event 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala 54b551b728 Agent: Update tags for hadoop events 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala c31aed94ea Agent: Move successful explotiation event publish 2022-10-07 11:46:35 +02:00
Kekoa Kaaikala bee1047024 Agent: Update hadoop failed event publishing 2022-10-07 11:46:34 +02:00
Kekoa Kaaikala 57af640317 Agent: Use correct publish method names 2022-10-07 11:46:34 +02:00
Ilija Lazoroski 9c185a3a78 Agent: Add tags and error messages in Hadoop 2022-10-07 11:46:34 +02:00
Ilija Lazoroski fe864792f3 Agent: Publish Propagation and Exploitation events from Hadoop 2022-10-07 11:46:34 +02:00
VakarisZ 4709ae771b
Merge pull request #2400 from guardicore/2267-add-tcp-connections 
2267 add tcp connections
 2022-10-07 12:15:39 +03:00