Commit Graph

6164 Commits

Author SHA1 Message Date
Mike Salvatore 4e7a95316e Agent: Extract _get_credentials() into powershell_utils/utils.py 2021-08-24 12:53:37 -04:00
Mike Salvatore aef8f2e37a Agent: Extract method _build_monkey_execution_command 2021-08-24 12:16:52 -04:00
Mike Salvatore 1928f1b9bc Agent: Remove "credentials" local variable 2021-08-24 12:11:59 -04:00
Mike Salvatore a2bdc69388 Agent: Log and report exploitation attempts from PowerShellExploiter 2021-08-24 12:03:42 -04:00
Mike Salvatore 8209fa55df Agent: Set client parameters if password is "" in PowerShellExploiter 2021-08-24 11:53:48 -04:00
Mike Salvatore fb18c1cbd4 Agent: Only use "None" creds in powershell exploiter if host is Windows 2021-08-24 11:43:17 -04:00
Mike Salvatore 79cc82b159 Agent: Remove duplicated try/except if/else from PowerShellExploiter 2021-08-24 10:35:21 -04:00
Mike Salvatore 66527b1bde Agent: Move Windows architecture constants from web_rce.py -> consts.py 2021-08-24 09:37:05 -04:00
Mike Salvatore f1c247ad93 Agent: Refactored PowerShellExploiter authentication function names 2021-08-24 09:29:02 -04:00
Ilija Lazoroski 73a3f2057a Docs: Documentation for PowerShell. Update zoo docs 2021-08-24 15:16:10 +02:00
Ilija Lazoroski 5cee9443ff Zoo: Remove GCPHandler class. Powershell-3-47 renamed to
Powershell-3-46. Powershell-45 moved to different zone
2021-08-24 15:11:22 +02:00
Ilija Lazoroski 9f2a4cb7e4 Zoo: Update terraform scripts. Update gcp test machine list with new zone 2021-08-24 11:56:09 +02:00
Ilija Lazoroski 305b2cf716 Zoo: Add PowerShell config and bb test 2021-08-24 10:32:54 +02:00
Shreya Malviya e339932fde island: Change 'Powershell' to 'PowerShell' in attack schema for T1210 2021-08-24 13:16:59 +05:30
Shreya Malviya b6c3623e74 agent, island, vulture: Update class name and text related to powershell exploiter to maintain consistency ('PowerShell Remoting') 2021-08-24 13:15:47 +05:30
Shreya Malviya 72e0378335 agent: Fix import path in powershell exploiter 2021-08-24 11:52:12 +05:30
Shreya Malviya ee9fde4005 agent: Refactor powershell remoting exploiter 2021-08-24 11:40:41 +05:30
Shreya Malviya 29788776fa agent: Modify exploitation log messages in powershell exploiter 2021-08-24 11:40:41 +05:30
Shreya Malviya 04125e5e14 agent: Add separate function to set log levels for sensitive packages in powershell exploiter 2021-08-24 11:40:40 +05:30
Shreya Malviya dc4a5fbb85 agent: Use variable 'is_32bit' for function argument 2021-08-24 11:40:40 +05:30
Shreya Malviya ba8c44d22c agent: Fix typos in powershell remoting exploiter 2021-08-24 11:40:40 +05:30
Shreya Malviya 5419200d61 agent: Update exploited service name in powershell remoting exploiter 2021-08-24 11:40:40 +05:30
VakarisZ 2b71fb80c7 Fixed missing powershell exploiter report components. 2021-08-24 11:40:39 +05:30
VakarisZ 9966c54fe2 Added powershell remoting exploiter. 2021-08-24 11:40:39 +05:30
VakarisZ 55a817931d Bugfix for monkey binary removal if dropper fails to do so 2021-08-24 11:40:39 +05:30
Mike Salvatore d203b28a38
Merge pull request #1424 from guardicore/post-breach-pyinstaller-hook
Post breach pyinstaller hook
2021-08-23 13:54:55 -04:00
Mike Salvatore 342b5689f1 Update changelog with fixes for #1405 and #1419 2021-08-23 11:44:29 -04:00
Mike Salvatore 7f71901a29 Agent: Use path relative to __file__ to locate powershell scripts 2021-08-23 11:14:23 -04:00
Mike Salvatore 536b061cc7 Agent: Remove unused TEMP_FILE constant from windows timestomping PBA 2021-08-23 11:14:23 -04:00
Mike Salvatore 1ef884ae4e Agent: Add pyinstaller hook for post_breach package 2021-08-23 11:14:20 -04:00
Mike Salvatore db8ea45197 Agent: Remove traceroute binaries
The traceroute binaries are no longer used. They inflate the size of the
agent binaries and add unnecessary dependencies.
2021-08-20 16:27:36 -04:00
Mike Salvatore 1f519ad1ee Agent: Deduplicate ping command list in PingScanner 2021-08-20 11:05:55 -04:00
Mike Salvatore 1d9372690d Agent: Deduplicate timeout calculation in PingScanner 2021-08-20 11:05:55 -04:00
Mike Salvatore 198fbd66f8 Merge branch 'remove-internet-access-check' into develop
PR #1420
2021-08-20 10:40:24 -04:00
Mike Salvatore 434246f21f Merge branch '1175/fix-break-on-german-system-lang' into develop
PR #1403
2021-08-20 10:37:29 -04:00
Mike Salvatore cf73d11d9e Update changelog for issue #1402 2021-08-20 09:30:56 -04:00
Mike Salvatore 1d9ae4c01a Island: Fix typo "trough" -> "through" 2021-08-20 09:23:23 -04:00
Ilija Lazoroski 9f194f3417 Merge branch '1183/hide-input-component' into develop
PR #1417
2021-08-20 13:59:45 +02:00
Mike Salvatore 0fc9631d75 Update changelog with entry for #1183 2021-08-20 07:47:29 -04:00
Mike Salvatore 54e519eeaa Agent: Gracefully handle character decode errors in ping command 2021-08-19 19:20:42 -04:00
Mike Salvatore 5f9e507dc7 Agent: Add debug logging to get_host_fingerprint() 2021-08-19 19:20:42 -04:00
Mike Salvatore ce27829753 Update CHANGELOG.md with fix for #1175 2021-08-19 19:20:38 -04:00
Mike Salvatore 769dd67b66 Agent: Automatically select correct output encoding for ping command 2021-08-19 19:19:34 -04:00
TRGamer-tech f2148db70b Add cp850 encoding to subprocess 2021-08-19 19:19:34 -04:00
Mike Salvatore 85e26beda8 Tests: Remove internet_services from test config 2021-08-19 14:17:01 -04:00
Mike Salvatore 087c8f2cf8 BB: Remove internet_services from BaseTemplate 2021-08-19 14:16:44 -04:00
Mike Salvatore b48c1720e7 Island; Remove "internet_access" and "internet_services"
Issue #1402
2021-08-19 14:16:08 -04:00
Mike Salvatore 189e1338ba Agent: Remove internet access check
Issue #1402
2021-08-19 14:15:15 -04:00
Ilija Lazoroski 8e9f5647f6 UI: Hide description that messed up the list 2021-08-19 10:35:36 -04:00
Ilija Lazoroski 24009797ab UI: Rename HideInput to SensitiveTextInput. Resolve spacing 2021-08-19 11:16:22 +02:00