Commit Graph

  • ac11d159fe Agent: Revise Powershell publishing of events Ilija Lazoroski 2022-10-06 16:03:15 +0200
  • de9b5601d8
    Merge branch 2269-publish-events-from-sshexec-exploiter into develop Mike Salvatore 2022-10-06 10:00:35 -0400
  • c980bfd915 Agent: Move timestamp closer to ssh.exec_command() Mike Salvatore 2022-10-06 09:57:11 -0400
  • 52380a2513 Agent: Publish exploitation event on unexpected SSH exception Mike Salvatore 2022-10-06 09:51:14 -0400
  • 39bada5bb1 Agent: Move assignment outside of try/except Mike Salvatore 2022-10-05 12:17:16 -0400
  • 3bca02af59 Agent: Fix powershell tests Kekoa Kaaikala 2022-10-05 14:25:02 +0000
  • 7d535c72d9 Agent: Publish powershell exploitation events Kekoa Kaaikala 2022-10-05 14:10:11 +0000
  • 3bede2f9d1 Agent: Publish propagation events Kekoa Kaaikala 2022-10-05 13:59:21 +0000
  • bb6716df18 Common: Add attack technique T1059 Kekoa Kaaikala 2022-10-05 13:23:13 +0000
  • 8503e0f499 UT: Remove unused test data structures vakarisz 2022-10-06 15:02:13 +0300
  • ec617df06a Agent: Fix LocketHTTPServer mypy error in MSSQLExploiter Ilija Lazoroski 2022-10-06 13:53:17 +0200
  • 0d246a0479 Island: Rename add_tcp_connections to upsert_tcp_connections vakarisz 2022-10-06 14:49:11 +0300
  • 47846628e6 Agent: Modify MSSQL tags to be properties Ilija Lazoroski 2022-10-06 13:47:11 +0200
  • 3bc2e4876f Island: Handle missing node in add_tcp_connections vakarisz 2022-10-06 14:45:56 +0300
  • 15974ff21c Agent: Stamp time before running exploit Kekoa Kaaikala 2022-10-05 20:49:08 +0000
  • 66f8471f24 Agent: Remove "summary" event Kekoa Kaaikala 2022-10-05 20:46:29 +0000
  • e404416363 Agent: Use exploit tag properties Kekoa Kaaikala 2022-10-05 20:41:47 +0000
  • 5c6b1e3910 Common: Remove unused technique T1071 Kekoa Kaaikala 2022-10-05 20:36:07 +0000
  • 9269c8579c Agent: Remove unneccessary technique Kekoa Kaaikala 2022-10-05 20:35:34 +0000
  • 8317c03686 Agent: Add tags to MSSQL propagation events Kekoa Kaaikala 2022-10-05 13:29:03 +0000
  • aab965bad7 Common: Add attack technique T1071 Kekoa Kaaikala 2022-10-05 13:28:08 +0000
  • fa8b721abe Common: Add attack technique T1059 Kekoa Kaaikala 2022-10-05 13:23:13 +0000
  • 183bd1145f Agent: Add tags to MSSQL exploitation events Kekoa Kaaikala 2022-10-05 13:07:28 +0000
  • 33230e85f7 Agent: Use updated publish methods Kekoa Kaaikala 2022-10-05 12:51:59 +0000
  • 2cd9d0086b Agent: Fix mypy error in http_tools.py Kekoa Kaaikala 2022-10-04 15:21:46 +0000
  • 8dd196122b Agent: Publish events from MSSQLExploiter Kekoa Kaaikala 2022-10-04 14:46:35 +0000
  • b0ec035909 Island: Move tcp_connection addition to node repository vakarisz 2022-10-06 14:31:12 +0300
  • 0f3f45e92f Agent: Modify Log4Shell tags to be properties Ilija Lazoroski 2022-10-06 13:26:48 +0200
  • 016bf5c795 Agent: Stamp times before the exploit runs Kekoa Kaaikala 2022-10-05 19:55:56 +0000
  • 48e6e95271 Agent: Update propagation tags for log4shell Kekoa Kaaikala 2022-10-05 12:48:16 +0000
  • ac69064dec Agent: Send failed exploitation event Kekoa Kaaikala 2022-10-05 12:31:19 +0000
  • 0c4b90beb5 Agent: Fix typo Kekoa Kaaikala 2022-10-05 12:23:00 +0000
  • c5d5418af4 Agent: Fix typo in t1203 attack technique in Log4Shell Ilija Lazoroski 2022-10-04 16:38:26 +0200
  • ef4a465515 Agent: Add tags to exploitation and propagation events in Log4Shell Ilija Lazoroski 2022-10-04 16:24:03 +0200
  • c5506f98e8 Agent: Publish Propagation and Exploitation events from Log4Shell Ilija Lazoroski 2022-10-04 13:25:23 +0200
  • c90044074d Island: Remove storage error when node wasn't modified vakarisz 2022-10-06 14:21:13 +0300
  • 95f1e3cb7b Agent: Modify tags methods to be properties in SSHExploiter Ilija Lazoroski 2022-10-06 12:48:15 +0200
  • dcb08b2881 Agent: Convert IPv4Address to str when connecting to socket Ilija Lazoroski 2022-10-06 12:46:11 +0200
  • f0112410c9 Agent: Rename stamp to timestamp in SSHExploiter Ilija Lazoroski 2022-10-06 11:59:31 +0200
  • e11bd2c7f2 Agent: Stamp start time prior to running exploit Kekoa Kaaikala 2022-10-05 20:09:32 +0000
  • aba886624e Agent: Send propagation events sooner Kekoa Kaaikala 2022-10-05 18:02:27 +0000
  • e8f48085a4 Agent: Use the tag properties Kekoa Kaaikala 2022-10-05 17:43:40 +0000
  • 79f72dda55 Agent: Stop sending PropagationEvent before attempt Kekoa Kaaikala 2022-10-05 17:26:59 +0000
  • 72378f4e53 Agent: Publish scan event when checking ssh port Kekoa Kaaikala 2022-10-05 15:02:46 +0000
  • 431d6ae775 Agent: Extract method _get_ssh_port Kekoa Kaaikala 2022-10-05 14:50:00 +0000
  • 0a1901b9a1 Agent: Use error to propagate failure Kekoa Kaaikala 2022-10-04 22:12:50 +0000
  • a2534391a6 Agent: Extract method _propagate Kekoa Kaaikala 2022-10-04 21:59:35 +0000
  • 1cb88e029a Agent: Extract method _exploit Kekoa Kaaikala 2022-10-04 21:35:42 +0000
  • b31eb885f0 Agent: Extract method _get_victim_os Kekoa Kaaikala 2022-10-04 21:26:55 +0000
  • dc8a0ac2ad Agent: Extract method _upload_agent_binary Kekoa Kaaikala 2022-10-04 21:13:49 +0000
  • 9dac64b60e Agent: Update ssh exploiter tags Kekoa Kaaikala 2022-10-04 20:25:50 +0000
  • 5d9416c385 Agent: Use common.tags to publish events in SSHExploiter Ilija Lazoroski 2022-10-04 16:13:42 +0200
  • 5948537d4a Agent: Add tags to SSHExploiter Ilija Lazoroski 2022-10-04 15:59:58 +0200
  • ddaada1f09 Agent: Revise event publishing in SSHExploiter Ilija Lazoroski 2022-10-04 12:46:28 +0200
  • 2248bdcd67 Island: Add _get_node_by_id method to mongo_node_repository.py vakarisz 2022-10-06 14:10:47 +0300
  • e2453e481c Agent: Rename variables in HostExploiter Shreya Malviya 2022-10-06 16:13:38 +0530
  • 254b4e1c6c Agent: Update publish methods to accept timestamp Kekoa Kaaikala 2022-10-05 19:43:25 +0000
  • 12e9aaf42e Agent: Add abstract properties for exploiter tags Kekoa Kaaikala 2022-10-05 17:32:48 +0000
  • 95b1d9c62d Agent: Remove target from publish methods Kekoa Kaaikala 2022-10-05 15:57:15 +0000
  • 249950d602 Island: Improve tcp handler code and coverage vakarisz 2022-10-05 17:07:19 +0300
  • 6c913895c5 Island: Add TCP connections to nodes based on TCP scan event vakarisz 2022-10-05 14:46:47 +0300
  • bbcdc1bef4 Island: Make upsert_node method public vakarisz 2022-10-05 14:33:00 +0300
  • 73a8c14397 Merge branch '2269-add-attack-technique-tags' into develop Mike Salvatore 2022-10-05 08:25:51 -0400
  • 63f869d296 Project: Add common.tags and HostExploiter publish functions to Vulture Ilija Lazoroski 2022-10-05 14:21:23 +0200
  • 82217b4094
    Merge branch 2267-add-network-services into develop Mike Salvatore 2022-10-05 08:20:13 -0400
  • 10e3c97489 Island: Use Tuple[SocketAddress] for tcp_connections Mike Salvatore 2022-10-04 15:09:02 -0400
  • 8799a60f47 Island: Fix serialization/deserialization of Machine.network_services Mike Salvatore 2022-10-04 12:41:42 -0400
  • d8cf5d33dd Common: Extract MutableInfectionMonkeyModelConfig Mike Salvatore 2022-10-04 12:29:56 -0400
  • eb3daf84f1 Common: Use strings for NetworkService Enum values Mike Salvatore 2022-10-04 12:13:04 -0400
  • f6ed8a997c Common: Rename NetworkServiceNameEnum -> NetworkService Mike Salvatore 2022-10-04 12:10:47 -0400
  • 8bf1d1f46f Island, Common: Add services to machine.py vakarisz 2022-10-03 18:01:49 +0300
  • a390c97b70 Island: Add tcp_connections to node vakarisz 2022-10-03 17:59:17 +0300
  • 80a095b657 Agent: Use NetworkPort instead of Port vakarisz 2022-10-03 14:45:29 +0300
  • 2ece91b9df Agent: Rename event_queue to agent_event_queue in SSHCredentialCollector Ilija Lazoroski 2022-10-05 11:37:58 +0200
  • c7e2b91735 Agent: Rename event_queue to agent_event_queue in MimikatzCredentialCollector Ilija Lazoroski 2022-10-05 11:34:50 +0200
  • 19fcf8d053 Agent: Import attack technique tags from common in MimikatzCollector Ilija Lazoroski 2022-10-05 11:30:09 +0200
  • c8aee645fa Agent: Import attack technique tags from common in SSHCollector Ilija Lazoroski 2022-10-05 11:24:52 +0200
  • 491612f9e8 Common: Add T1005 and T1145 attack technique tags Ilija Lazoroski 2022-10-05 11:21:28 +0200
  • 0ed167fb48 Agent: Import attack technique tags from common in Zerologon Ilija Lazoroski 2022-10-05 11:13:39 +0200
  • e46bb8964d Common: Add T1003 and T1098 attack technique tags Ilija Lazoroski 2022-10-05 11:11:18 +0200
  • fd8ea53e8b Merge branch '2269-remove-find_monkeys_in_db' into develop Mike Salvatore 2022-10-04 18:21:00 -0400
  • bbbb1ac773 Island: Remove disused LogBlackboxEndpoint Mike Salvatore 2022-10-04 16:08:33 -0400
  • 6ae7676322 BB: Pass generator instead of list comprehension to all() Mike Salvatore 2022-10-04 15:43:25 -0400
  • b713cce893 Island: Remove /api/test/monkey endpoint Mike Salvatore 2022-10-04 15:41:07 -0400
  • 2bea619786 BB: Removed unused method and endpoint Kekoa Kaaikala 2022-10-03 17:13:27 +0000
  • e0c9717da9 BB: Update test_compabitiblity to use new api Kekoa Kaaikala 2022-10-03 17:11:37 +0000
  • 73fbc22e3d BB: Remove find_monkeys_in_db Kekoa Kaaikala 2022-10-03 17:04:27 +0000
  • a691a16625
    Merge pull request #2393 from guardicore/2269-update-hostexploiter Mike Salvatore 2022-10-04 15:34:08 -0400
  • 3172433410 Agent: Swap order of _publish_{propagation,exploitation}_event() Mike Salvatore 2022-10-04 15:19:11 -0400
  • 8e6a098a2e Project: Add HostExploiter methods to vulture_allowlist.py Mike Salvatore 2022-10-04 15:18:12 -0400
  • a07eadce60 Common: Add T1570 attack technique Kekoa Kaaikala 2022-10-04 18:00:41 +0000
  • d1a8ce2082 Common: Add T1210 tag Kekoa Kaaikala 2022-10-04 16:39:21 +0000
  • 6a100105be Common: Order attack tags alphanumerically Kekoa Kaaikala 2022-10-04 16:16:50 +0000
  • 8b4af5c349 Common: Fix typo in attack tags Ilija Lazoroski 2022-10-04 16:37:01 +0200
  • dd35bebb3e Common: Add T1203 attack technique tag Ilija Lazoroski 2022-10-04 16:23:17 +0200
  • bb11ea7857 Common: Add attack tags Ilija Lazoroski 2022-10-04 16:09:42 +0200
  • ee77eddaab Agent: Fix tuple type hint Kekoa Kaaikala 2022-10-04 17:50:39 +0000
  • 116ae90f3d UT: Remove host exploiter tests Kekoa Kaaikala 2022-10-04 16:13:48 +0000
  • b94002a984 Agent: Make publish methods private Kekoa Kaaikala 2022-10-04 14:56:57 +0000
  • 8e161f0fd9 Agent: Accept tuple as tags to HostExploiter publish events methods Ilija Lazoroski 2022-10-04 15:45:41 +0200