Commit Graph

2547 Commits

Author SHA1 Message Date
Shay Nehmad 5f02ebe1e0 Added Guardicore processes to AV list 2019-09-10 19:32:46 +03:00
Shay Nehmad 50f8e9053a Changed on windows as well 2019-09-10 14:50:54 +03:00
Shay Nehmad 4dca735265 Changed `check_output` to `Popen` to make user deletion async
we don't care about its result
2019-09-10 14:43:48 +03:00
Shay Nehmad 53f31ddcc9 Refactored notification logic to method 2019-09-09 17:36:00 +03:00
Shay Nehmad a51a6065b8 Now looking at the exit codes of ping 2019-09-09 17:27:53 +03:00
Shay Nehmad a32012ce52 Added communicate as new user to default PBA actions 2019-09-09 13:35:46 +03:00
Shay Nehmad 63d76f19f8 Updated notification to only show if the island is not on the report page already 2019-09-09 11:47:16 +03:00
Shay Nehmad 313911fd77 Deleted console log + fixed link in notification 2019-09-09 11:38:37 +03:00
Daniel Goldberg 02b7469d9e
Merge pull request #432 from guardicore/bugfix/aws_export_with_no_config
Bugfix/aws export with no config
2019-09-09 10:36:06 +03:00
Daniel Goldberg e010ea5b39 Fully explict path all the things 2019-09-09 10:23:10 +03:00
Shay Nehmad dc2686301c Fixed notification link and updated legend texts 2019-09-09 10:20:23 +03:00
Daniel Goldberg bf3ad35124 Move try catch to better handle multiple exporters 2019-09-09 09:25:46 +03:00
Daniel Goldberg 004cfa17f3 Bugfix, add AWS exporter only when running with AWS config. 2019-09-09 09:25:46 +03:00
Daniel Goldberg 72cae8624c Move AWS exporting to proper subfolder 2019-09-09 09:25:45 +03:00
VakarisZ 547103508f
Merge pull request #423 from gaochua/fix_shellshock
Enter lock in Shellshock exploit
2019-09-09 09:05:16 +03:00
Shay Nehmad f78e76bdee Renamed process_handle to process_info and removed bad comment 2019-09-07 18:49:59 +03:00
Anh T Nguyen 7b0bf71279 update 2019-09-07 07:14:11 +07:00
VakarisZ 0ee4445ca1 Added timeout to tests, added logs 2019-09-06 20:59:11 +03:00
Anh T Nguyen ee10ca9050 move try_lock to HostExploiter 2019-09-06 11:11:19 +07:00
Shay Nehmad e520df4c34 Fixed events length check 2019-09-05 21:40:36 +03:00
Shay Nehmad 51117edbea Add deletion of users 2019-09-05 21:32:04 +03:00
Shay Nehmad e618378c95 Vastly improved communicate as new user PBA code structure, also not leaking any more process or thread handles. 2019-09-05 20:56:48 +03:00
Shay Nehmad e9cd20a345 If one PBA fails it shouldn't stop all the rest. 2019-09-05 20:56:17 +03:00
Shay Nehmad 731e3acb90 Added exception info to monkey main function. 2019-09-05 20:56:00 +03:00
Daniel Goldberg ba0bfa5902
Merge pull request #431 from VakarisZ/attack_pba_fixes
Small bugfixes for attack and pba modules.
2019-09-05 19:25:40 +03:00
VakarisZ 3a290b46ac Fixed T1078 attack technique not implemented, empty PBA message and other bugs 2019-09-05 16:40:02 +03:00
VakarisZ 772880f952 Added resources explicitly for testing, improved analyzer, added config parser class 2019-09-05 15:03:30 +03:00
Shay Nehmad 3403d26d70 Merge branch '400/aggregate-findings' into 400/more-tests 2019-09-05 12:53:05 +03:00
Daniel Goldberg c6cc81f50c
Merge pull request #418 from VakarisZ/monkeyzoo_tunneling_11
Updated monkeyzoo images and added tunneling-11
2019-09-04 17:33:58 +03:00
Shay Nehmad 5a29e047ab Extracted events amount badge to function 2019-09-04 17:00:28 +03:00
Shay Nehmad 86cf09419c Moved imports to top of try 2019-09-04 16:24:46 +03:00
VakarisZ 5ab36ffd01 Added firewall rules, fixed buggy ones 2019-09-04 16:06:49 +03:00
Shay Nehmad ae414bcd13 Remove unnecessary apostrophes from commandline 2019-09-04 12:42:46 +03:00
Shay Nehmad 097d8831c8 Joining commands using ,,.join() for linux 2019-09-04 12:40:53 +03:00
Shay Nehmad 4f912d9d1e Fixed sudo usage + added debug logs 2019-09-04 12:30:55 +03:00
Shay Nehmad f8fe0b9f09
Merge pull request #427 from guardicore/426/bugfix-load-monkey-model-aws
Added aws_instance_id field to monkey model
2019-09-04 12:18:17 +03:00
VakarisZ 02c7d6c30e Added docs about order of method calls 2019-09-04 12:11:47 +03:00
Shay Nehmad 37fac9c613 Merge branch '400/zero-trust-mvp' into 400/more-tests 2019-09-04 12:11:05 +03:00
Shay Nehmad 8484925a64 Added aws_instance_id field to monkey model 2019-09-04 12:05:46 +03:00
VakarisZ 005618072d Removed unused mssqlexec objects property 2019-09-04 11:46:28 +03:00
Shay Nehmad 2a78b62d00 Moved imports to local imports 2019-09-04 11:35:18 +03:00
VakarisZ 4f67eea2a1 Improved monkeyzoo docs, updated config, fixed prefix bugs 2019-09-04 10:29:38 +03:00
Shay Nehmad 3469ec6996 Still need to test linux 2019-09-03 22:35:18 +03:00
Shay Nehmad c371bf8ac5 Added 1314 error TODO 2019-09-03 21:52:30 +03:00
Shay Nehmad 1befe35d34 Added some logs, and more error handling for winapis. Still not working 2019-09-03 21:42:48 +03:00
Shay Nehmad 52a95935c8 Added new user communication PBA and ZT test, not working yet WIP! 2019-09-03 21:17:13 +03:00
VakarisZ c779887955 Added prefixes to all resources 2019-09-03 17:22:07 +03:00
VakarisZ ac702ffc27 Removed useless import in mssqlexec 2019-09-03 16:29:08 +03:00
VakarisZ 6c49cabbc2 Changed string formatting to latest syntax 2019-09-03 16:27:11 +03:00
VakarisZ 63d07f9c4b Added unit tests, improved mssql readability 2019-09-03 15:51:13 +03:00