Commit Graph

1383 Commits

Author SHA1 Message Date
maor.rayzin 4e1c4c3290 Merge branch 'develop' into nadler/pth 2018-08-08 16:51:13 +03:00
maor.rayzin 44ee74aaca * Added a coverage for the force connection closing in the mssql fingerprinter.
(cherry picked from commit 782ced912d)
2018-08-08 16:48:51 +03:00
maor.rayzin 0486b630aa * Commented out the ldap checkup for bug testing 2018-08-08 16:38:11 +03:00
maor.rayzin 3c40fd7cc3 * Added warnings and threats comments about pth findings 2018-08-08 16:03:16 +03:00
Vakaris 8e684a3fad Bugfix: model.__init__ changed( I forgot to add the file to the branch) and server lock is not a singleton anymore 2018-08-07 17:44:31 +03:00
Itay Mizeretz 83d41df875 Fix another merge fail 2018-08-06 14:30:38 +03:00
Itay Mizeretz 063ecd9313 Add files dropped in merge 2018-08-06 14:18:03 +03:00
Itay Mizeretz 26337e3a7a Merge remote-tracking branch 'origin/develop' into feature/support-common-folder
# Conflicts:
#	infection_monkey/network/__init__.py
#	infection_monkey/transport/__init__.py
#	monkey/infection_monkey/config.py
#	monkey/infection_monkey/dropper.py
#	monkey/infection_monkey/exploit/__init__.py
#	monkey/infection_monkey/transport/ftp.py
2018-08-06 12:17:25 +03:00
Itay Mizeretz 25f0c08528 Fix python dep installation issues 2018-08-05 14:58:19 +03:00
Itay Mizeretz 4017e189ab Another stupid path fix 2018-08-05 14:21:37 +03:00
Itay Mizeretz 4e84c87050 Add missing files 2018-08-05 13:35:48 +03:00
maor.rayzin 4a780d81a8 * removed not needed import
*
2018-08-05 11:48:48 +03:00
maor.rayzin 3a9a92d1b9 * More info in the recommendations section 2018-08-05 11:46:47 +03:00
Vakaris 3f8d63c2d9 Timeout of joining set to 5 seconds. No use of waiting for another thread to stop. We can run our program while the thread stops 2018-08-04 13:01:19 +03:00
maor.rayzin cdfd6284ee * Added information about what info gathered to the report's issues section 2018-08-01 13:07:18 +03:00
maor.rayzin af3b5665ce * some logs and un-commenting for testing. 2018-07-24 20:49:57 +03:00
maor.rayzin 48e1d85eb0 * fixed a lot of safe dict access
* some small fixed and typos
2018-07-24 19:09:19 +03:00
maor.rayzin f97df84da9 Merge branch 'develop' into nadler/pth
# Conflicts:
#	infection_monkey/requirements.txt
#	monkey_island/cc/app.py
#	monkey_island/cc/resources/telemetry.py
#	monkey_island/cc/ui/src/components/pages/ReportPage.js
2018-07-24 15:00:58 +03:00
maor.rayzin dd5b606ef8 * wrong endpoint fix 2018-07-24 14:54:12 +03:00
maor.rayzin fae87bd07b * wrong endpoint fix 2018-07-24 14:52:16 +03:00
maor.rayzin 2a12fefe6d Merge branch 'nadler/pth-map' into nadler/pth 2018-07-24 14:46:32 +03:00
maor.rayzin 2f4a3dc885 * finished map's nodes and edges generation for pth report 2018-07-24 14:43:41 +03:00
Itay Mizeretz eb79499e80 Change report structure
Add tables for shared admins, strong users, shared creds.
2018-07-22 18:49:51 +03:00
maor.rayzin 1b45029c5d * WIP added map edges and nodes generation 2018-07-21 21:13:42 +03:00
maor.rayzin 865bb3489d * WIP Refactoring the report info gathering file
* WIP Refactoring the report map information
2018-07-21 21:00:13 +03:00
Itay Mizeretz 800e337f6f Add credential map to report. currently uses fake static data 2018-07-19 18:35:37 +03:00
Vakaris 40957f865c Struts2 compatability fix 2018-07-19 13:04:52 +03:00
Vakaris 68d949c655 Web RCE framework core files/changes 2018-07-19 12:33:44 +03:00
Daniel Goldberg 3e1edeac61
Merge pull request #156 from VakarisZ/dropper_samefile_fix
Dropper bug fix
2018-07-18 20:53:52 +03:00
Vakaris d78e81db06 Changed to a better file comparison function 2018-07-18 20:48:15 +03:00
maor.rayzin 77610d4994 * WIP changing the payload static file to be written on runtime 2018-07-18 13:26:31 +03:00
Vakaris dfecc6d6ac os.path.samefile does not work on windows. My code checks if files handlers are the same instead 2018-07-18 12:44:19 +03:00
Daniel Goldberg ae4227731c
Merge pull request #155 from guardicore/bugfix/remove_ftp_server
Remove FTP server from infra
2018-07-18 10:50:31 +03:00
maor.rayzin f2d17bcedc * Added a cleanup function to attack's files 2018-07-17 18:48:58 +03:00
Daniel Goldberg d853e02693 Remove FTP server from infra
New FTP server will come from pyftp
2018-07-17 13:08:08 +03:00
maor.rayzin 9877b9499c * Using get_interface_to_target function in order to retrieve right ip
to use.

* changed exception syntax to 'as' instead of ','
* added Object to the FTP class
2018-07-16 16:29:28 +03:00
maor.rayzin 782ced912d * Added a coverage for the force connection closing in the mssql fingerprinter. 2018-07-16 16:01:26 +03:00
maor.rayzin 2de474667d * Fixed a weird text alignment 2018-07-16 14:43:38 +03:00
maor.rayzin aae9704cbb * Changed the more info tab's location to the right place. 2018-07-16 12:45:14 +03:00
maor.rayzin 80d6b327bc * Added MSSQL exploiter report frontend details. 2018-07-16 11:57:56 +03:00
Daniel Goldberg 97e5b96637 Opportunistic waiting, make get_tcp_ports O(timeout) rather than timeout. 2018-07-15 16:27:46 +03:00
Daniel Goldberg 977e0a8769
Merge pull request #151 from guardicore/master
Update develop from master
2018-07-09 18:53:57 +03:00
Daniel Goldberg f98a121c51
Merge branch 'develop' into master 2018-07-09 18:53:43 +03:00
Daniel Goldberg 35b535f97a Removed hard coded debug address and replaced with non routable IP 2018-07-08 12:14:45 +03:00
maor.rayzin 19d324d81f Merge branch 'develop' into feature/mssql_exploiter
# Conflicts:
#	infection_monkey/config.py
#	infection_monkey/example.conf
#	infection_monkey/exploit/__init__.py
2018-06-27 21:40:05 +03:00
maor.rayzin b46810e02b * Finalized the MS-SQL code
* Changed the log to the right handle and added exceptions info.

* better docs and some pep 8
2018-06-27 21:30:54 +03:00
Daniel Goldberg 3118620c8a
Merge pull request #146 from VakarisZ/struts2RCE
Struts2 rce
2018-06-26 18:37:07 +03:00
Vakaris c278b0a29c Small changes 2018-06-26 18:03:31 +03:00
maor.rayzin 149525d205 Added the MSSQLExploiter class
The helper functions and utils are in mssqlexec_utils.py file
Everything is documented and this commit is still WIP.

* Added the class to the monkey's config file and example.
* Added the class to the UI config.
* Added the class import to __init__.py file
2018-06-26 17:47:43 +03:00
Vakaris 6a37f2b953 removed debugging code 2018-06-25 19:11:58 +03:00