p59342861
/
monkey
forked from p15670423/monkey
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
1,257 Commits 30 Branches 0 Tags 47 MiB
Commit Graph

1257 Commits

Author SHA1 Message Date
Daniel Goldberg 095510e8e2 Add filtering of invalid results, otherwise it'll propagate 2018-03-29 11:01:07 +03:00
Daniel Goldberg b06d92331d Fix horrid encryption bug where monkeys would not receive new credentials. 
Note the change in config.py is not optimal but should be fixed as part of another PR
 2018-03-29 11:01:07 +03:00
Daniel Goldberg 9b44fc8b98 Adds configuration option to turn Azure collection on and off 
Merge mimikatz and Azure into system info collection settings.
 2018-03-29 11:01:06 +03:00
Daniel Goldberg 9d7b345d1d Split up Azure credential working to make it easier for the server to understand. 
Fixed bugs in Azure report server side and fixed a hardcoded constant in get_issues_overview
 2018-03-29 11:01:06 +03:00
Daniel Goldberg 93fee0d2c5 Add Azure password stealing to the report. 2018-03-29 11:01:06 +03:00
Daniel Goldberg 21abdb5cef Add tag to system info if on Azure and harvested creds. 2018-03-29 11:01:05 +03:00
Daniel Goldberg e3bd29ef6f Add credential harvesting by default to both OS colelctors 2018-03-29 11:01:05 +03:00
Daniel Goldberg cb39be6f58 Initial commit of standalone Azure password harvester 2018-03-29 11:01:05 +03:00
Ace Pace 225c7fae6f Delete current monkey business code from repository untill we go back to developing it. 2018-03-22 09:47:30 +02:00
Daniel Goldberg 8f0251e822
Updated readme links 2018-03-13 11:08:23 +02:00
Itay Mizeretz 08e7f8cd3a quick bugfix for auth 2018-03-11 19:03:40 +02:00
Oran Nadler 96c9681bf1 eliminate some 'None'-s from the report 2018-03-10 23:58:51 -08:00
Oran Nadler 8807e68177 add posssible attacks per sid 2018-03-10 23:18:53 -08:00
Daniel Goldberg 0fb4feb78c
Merge pull request #107 from guardicore/develop 
Finish the current small sprint.
New additions
* New icons
* Encrypted creds in the DB
* Option to pull logs from the monkey
* Rename C&C to Monkey Island 
* Get rid of chaos monkey (at last!)
* Async scanning of victims
 2018-03-10 18:44:21 +02:00
Itay Mizeretz 6caec5ccf2 quick bugfix to not try and drop system collections 2018-03-10 18:24:58 +02:00
itaymmguardicore 1a3ca06ce8
Merge pull request #86 from guardicore/feature/secure-island-db 
Feature/secure island db
 2018-03-08 20:03:40 +02:00
Itay Mizeretz 444828ad02 Remove isparta-instrumenter-loader 
Force up-to-date moment dep
 2018-03-08 19:12:51 +02:00
Itay Mizeretz cf86294eb4 fix CR 2018-03-08 15:37:45 +02:00
Itay Mizeretz 795885b322 Fix CR 2018-03-08 14:17:27 +02:00
Oran Nadler ce1c8a54f8 show only real attacks in the graph 2018-03-07 07:45:48 -08:00
Oran Nadler e0b64ee63b cosmetics 2018-03-07 06:48:03 -08:00
Oran Nadler 1ee53972a8 small fixeS 2018-03-07 06:47:29 -08:00
Oran Nadler 458cc20ceb small fixes 2018-03-07 00:03:55 -08:00
Oran Nadler 3291e4f0bc fix html tableS 2018-03-07 00:01:43 -08:00
Oran Nadler 9be9c48253 analsis runs 2018-03-06 23:56:32 -08:00
Oran Nadler b56f05335b fix todo 2018-03-06 23:36:04 -08:00
Oran Nadler 3f9204dd83 add a lot of information to report 2018-03-06 22:29:17 +02:00
Oran Nadler 86be96eb44 Add dc table 2018-03-06 21:55:56 +02:00
Oran Nadler 18114ea7fe add draft for some tables 2018-03-06 21:53:22 +02:00
Daniel Goldberg 8f5643b0b5
Merge pull request #87 from guardicore/feature/send-raw-log 
Feature/send raw log
 2018-03-06 18:10:22 +02:00
Oran Nadler 492bea27a5 add more queries 2018-03-06 07:31:35 -08:00
Oran Nadler 22b0aeb6cc better handle multiple runs of monkey & add a few more queries 2018-03-06 05:37:50 -08:00
Oran Nadler cbc6f2395d add ntds information to map 2018-03-06 04:52:39 -08:00
Oran Nadler 01b071dfe1 add labels 2018-03-06 00:32:57 -08:00
Itay Mizeretz 450f3ed3be Use 32bit as default path 2018-03-04 17:50:35 +02:00
Itay Mizeretz a37ef02772 Fix mutual import 2018-03-04 17:21:01 +02:00
Itay Mizeretz ee23703bfa Monkey now uses different names for 32,64bit on windows. 
No need to use dropper or rename moneky
 2018-03-04 17:05:43 +02:00
Oran Nadler 8a3216d812 works 2018-03-04 06:24:22 -08:00
Oran Nadler 00fe34d431 add pth map to ui 2018-03-04 05:22:34 -08:00
Oran Nadler 6779d4c758 fix 2018-03-04 04:11:15 -08:00
Oran Nadler dd0b73519c use the collected sam info 2018-03-04 03:54:41 -08:00
Itay Mizeretz 72fd930499 unlock singleton before upgrade 2018-02-28 19:54:10 +02:00
Itay Mizeretz 784e383959 Check if should upgrade only once 
Don't send state-done telemetry if upgrading
 2018-02-28 19:38:05 +02:00
Itay Mizeretz abd738acbc Change config value name 
Add logs
 2018-02-28 19:01:42 +02:00
Oran Nadler 2013e706e5 add intial draft for analyses script for pth map 2018-02-28 08:48:21 -08:00
Itay Mizeretz 260607b685 Use dedicated api to determine server is running 2018-02-28 18:26:31 +02:00
Itay Mizeretz 15b9ef1565 Remove destination path if it exists (mostly for windows upgrade) 
Fix minor bug in dropper
 2018-02-28 16:26:14 +02:00
Itay Mizeretz bbdebb1268 Fix various bugs 2018-02-28 16:24:40 +02:00
Itay Mizeretz e30e9c8b83 Upgrade after finding server 2018-02-28 16:23:54 +02:00
Itay Mizeretz 355a75feef seperate the wakeup and server lookup processes 2018-02-28 16:21:44 +02:00