Vakaris
|
bd8423216b
|
Changed constructor to have default paths set to None for convienience
|
2018-08-23 18:35:30 +03:00 |
maor.rayzin
|
c373bfbcfb
|
* integrated parts of the pth report to the main report module.
* Changed the ui a bit, removed some tables and add information to the current tables.
|
2018-08-23 15:17:08 +03:00 |
itaymmguardicore
|
685371a062
|
Merge pull request #168 from VakarisZ/Struts2_with_framework
Struts2 vulnerability with framework
|
2018-08-23 15:08:36 +03:00 |
Vakaris
|
3ff823ab04
|
Removed unused import statement
|
2018-08-23 15:06:58 +03:00 |
Vakaris
|
1c5c010028
|
More pythonic and clean way to apply function to url_list
|
2018-08-23 14:37:31 +03:00 |
Itay Mizeretz
|
5489a68049
|
Remove unecessary consts
|
2018-08-23 14:10:50 +03:00 |
Vakaris
|
ef4eadf64a
|
struts built_potential_url's now use map function to save code
|
2018-08-23 13:51:11 +03:00 |
Itay Mizeretz
|
cdc576e77e
|
Make mimikatz inside zip and extract only if config says so
|
2018-08-22 19:31:26 +03:00 |
itaymmguardicore
|
fc2929ed2e
|
Merge pull request #159 from VakarisZ/WebRCE_Framework
Web rce framework
|
2018-08-22 16:46:48 +03:00 |
Vakaris
|
df4b1268d1
|
Refactored struts2 to overload get_exploit_config
|
2018-08-22 16:08:38 +03:00 |
Vakaris
|
9ef44ef71f
|
Struts2 refactored to use default_exploit_host function
|
2018-08-22 16:07:59 +03:00 |
Vakaris
|
6cb058eb1d
|
Struts2 refactored for framework fixes
|
2018-08-22 16:07:39 +03:00 |
Vakaris
|
bbd4adf2ae
|
Struts2 core functions
|
2018-08-22 16:07:39 +03:00 |
Vakaris
|
3e7d7425e4
|
made get_exploit_config non-static for readability
|
2018-08-22 16:01:16 +03:00 |
Vakaris
|
e1b1236fb3
|
Comments and CR notes fixed
|
2018-08-22 13:41:17 +03:00 |
Vakaris
|
eae3f3440d
|
Refactored exploit_host and added get_exploit_config
|
2018-08-22 13:33:36 +03:00 |
Itay Mizeretz
|
369795e375
|
small fixes to make everything work
|
2018-08-21 17:17:21 +03:00 |
Vakaris
|
911404ef68
|
Implemented default_exploit_host method that can implement whole framework's workflow according to some flags/params
|
2018-08-21 12:34:59 +03:00 |
Itay Mizeretz
|
a18061d45d
|
Merge branch 'develop' into feature/detect-cross-segment-traffic
# Conflicts:
# infection_monkey/config.py
# infection_monkey/example.conf
# monkey_island/cc/services/report.py
|
2018-08-21 11:42:45 +03:00 |
Itay Mizeretz
|
203943bf27
|
Merge remote-tracking branch 'origin/master' into develop
|
2018-08-21 11:34:59 +03:00 |
Itay Mizeretz
|
bafa0e42a0
|
Make feature simpler
Change config value phrasing
|
2018-08-21 11:34:26 +03:00 |
itaymmguardicore
|
b56dec318e
|
Merge pull request #166 from guardicore/hotfix/fix-dep-security-vul
Hotfix/fix dep security vul
|
2018-08-20 14:43:29 +03:00 |
Vakaris
|
e3d286dbc0
|
Minor bugfix for error handling in new custom monkey destination paths feature
|
2018-08-18 13:14:05 +03:00 |
Vakaris
|
5565a80418
|
Web_RCE framework now supports custom monkey uploading paths( we don't always have permissions to uppload to C:\Windows)
|
2018-08-17 13:53:09 +03:00 |
Itay Mizeretz
|
6e7706f9bf
|
Fix bug which is now critical
|
2018-08-16 18:55:29 +03:00 |
Itay Mizeretz
|
5724d14583
|
Fix webpack lookup issue
|
2018-08-16 18:30:51 +03:00 |
Itay Mizeretz
|
422df7c71f
|
Replace deprecated modal component
|
2018-08-16 18:30:26 +03:00 |
Itay Mizeretz
|
a65721d0c5
|
Fix known bug necessary for building
|
2018-08-16 17:09:23 +03:00 |
Itay Mizeretz
|
b8dd37c5df
|
Temprarily comment out broken component
|
2018-08-16 17:08:34 +03:00 |
Itay Mizeretz
|
2a393d6ed5
|
Upgrade npm packages and make required modifications
|
2018-08-16 17:08:03 +03:00 |
Vakaris
|
b8bda692b9
|
Notes fixed v.2
|
2018-08-15 16:01:27 +03:00 |
Vakaris
|
0d45a44d6b
|
Final, tested framework fixes
|
2018-08-10 15:07:56 +03:00 |
Vakaris
|
5232d84e06
|
Almost all notes fixed, but nothing tested.
|
2018-08-09 16:52:15 +03:00 |
Vakaris
|
d1a29872c4
|
Fixed half of the notes and added a small tcp_port_to_service method in network/tools
no message
|
2018-08-09 12:13:44 +03:00 |
maor.rayzin
|
4e1c4c3290
|
Merge branch 'develop' into nadler/pth
|
2018-08-08 16:51:13 +03:00 |
maor.rayzin
|
44ee74aaca
|
* Added a coverage for the force connection closing in the mssql fingerprinter.
(cherry picked from commit 782ced912d )
|
2018-08-08 16:48:51 +03:00 |
maor.rayzin
|
0486b630aa
|
* Commented out the ldap checkup for bug testing
|
2018-08-08 16:38:11 +03:00 |
maor.rayzin
|
3c40fd7cc3
|
* Added warnings and threats comments about pth findings
|
2018-08-08 16:03:16 +03:00 |
Vakaris
|
8e684a3fad
|
Bugfix: model.__init__ changed( I forgot to add the file to the branch) and server lock is not a singleton anymore
|
2018-08-07 17:44:31 +03:00 |
Itay Mizeretz
|
83d41df875
|
Fix another merge fail
|
2018-08-06 14:30:38 +03:00 |
Itay Mizeretz
|
063ecd9313
|
Add files dropped in merge
|
2018-08-06 14:18:03 +03:00 |
Itay Mizeretz
|
26337e3a7a
|
Merge remote-tracking branch 'origin/develop' into feature/support-common-folder
# Conflicts:
# infection_monkey/network/__init__.py
# infection_monkey/transport/__init__.py
# monkey/infection_monkey/config.py
# monkey/infection_monkey/dropper.py
# monkey/infection_monkey/exploit/__init__.py
# monkey/infection_monkey/transport/ftp.py
|
2018-08-06 12:17:25 +03:00 |
Itay Mizeretz
|
25f0c08528
|
Fix python dep installation issues
|
2018-08-05 14:58:19 +03:00 |
Itay Mizeretz
|
4017e189ab
|
Another stupid path fix
|
2018-08-05 14:21:37 +03:00 |
Itay Mizeretz
|
4e84c87050
|
Add missing files
|
2018-08-05 13:35:48 +03:00 |
maor.rayzin
|
4a780d81a8
|
* removed not needed import
*
|
2018-08-05 11:48:48 +03:00 |
maor.rayzin
|
3a9a92d1b9
|
* More info in the recommendations section
|
2018-08-05 11:46:47 +03:00 |
Vakaris
|
3f8d63c2d9
|
Timeout of joining set to 5 seconds. No use of waiting for another thread to stop. We can run our program while the thread stops
|
2018-08-04 13:01:19 +03:00 |
maor.rayzin
|
cdfd6284ee
|
* Added information about what info gathered to the report's issues section
|
2018-08-01 13:07:18 +03:00 |
maor.rayzin
|
af3b5665ce
|
* some logs and un-commenting for testing.
|
2018-07-24 20:49:57 +03:00 |