oxbrbtx/PrimAITE
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add repeat option to data manipulation bot

Browse Source
This commit is contained in:
Jake Walker
2023-11-22 16:24:17 +00:00
parent aa65c53a95
commit 061e508187
1 changed files with 20 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
src/primaite/simulator/system/services/red_services/data_manipulation_bot.py
View File

@@ -38,13 +38,19 @@ class DataManipulationBot(DatabaseClient):
server_password: Optional[str] = None server_password: Optional[str] = None
attack_stage: DataManipulationAttackStage = DataManipulationAttackStage.NOT_STARTED attack_stage: DataManipulationAttackStage = DataManipulationAttackStage.NOT_STARTED
execution_definition: AgentExecutionDefinition = AgentExecutionDefinition() execution_definition: AgentExecutionDefinition = AgentExecutionDefinition()
repeat: bool = False
"Whether to repeat attacking once finished."
def __init__(self, **kwargs): def __init__(self, **kwargs):
super().__init__(**kwargs) super().__init__(**kwargs)
self.name = "DataManipulationBot" self.name = "DataManipulationBot"
def configure( def configure(
self, server_ip_address: IPv4Address, server_password: Optional[str] = None, payload: Optional[str] = None self,
server_ip_address: IPv4Address,
server_password: Optional[str] = None,
payload: Optional[str] = None,
repeat: bool = False,
): ):
""" """
Configure the DataManipulatorBot to communicate with a DatabaseService. Configure the DataManipulatorBot to communicate with a DatabaseService.
@@ -52,12 +58,15 @@ class DataManipulationBot(DatabaseClient):
:param server_ip_address: The IP address of the Node the DatabaseService is on. :param server_ip_address: The IP address of the Node the DatabaseService is on.
:param server_password: The password on the DatabaseService. :param server_password: The password on the DatabaseService.
:param payload: The data manipulation query payload. :param payload: The data manipulation query payload.
:param repeat: Whether to repeat attacking once finished.
""" """
self.server_ip_address = server_ip_address self.server_ip_address = server_ip_address
self.payload = payload self.payload = payload
self.server_password = server_password self.server_password = server_password
self.repeat = repeat
self.sys_log.info( self.sys_log.info(
f"{self.name}: Configured the {self.name} with {server_ip_address=}, {payload=}, {server_password=}." f"{self.name}: Configured the {self.name} with {server_ip_address=}, {payload=}, {server_password=}, "
f"{repeat=}."
) )
def _logon(self): def _logon(self):
@@ -100,7 +109,7 @@ class DataManipulationBot(DatabaseClient):
if self.attack_stage == DataManipulationAttackStage.PORT_SCAN: if self.attack_stage == DataManipulationAttackStage.PORT_SCAN:
# perform the actual data manipulation attack # perform the actual data manipulation attack
if simulate_trial(p_of_success): if simulate_trial(p_of_success):
self.sys_log.info(f"{self.name}: Performing port scan") self.sys_log.info(f"{self.name}: Performing data manipulation")
# perform the attack # perform the attack
if not self.connected: if not self.connected:
self.connect() self.connect()
@@ -109,10 +118,10 @@ class DataManipulationBot(DatabaseClient):
self.sys_log.info(f"{self.name} payload delivered: {self.payload}") self.sys_log.info(f"{self.name} payload delivered: {self.payload}")
attack_successful = True attack_successful = True
if attack_successful: if attack_successful:
self.sys_log.info(f"{self.name}: Performing port scan") self.sys_log.info(f"{self.name}: Data manipulation successful")
self.attack_stage = DataManipulationAttackStage.COMPLETE self.attack_stage = DataManipulationAttackStage.COMPLETE
else: else:
self.sys_log.info(f"{self.name}: Performing port scan") self.sys_log.info(f"{self.name}: Data manipulation failed")
self.attack_stage = DataManipulationAttackStage.FAILED self.attack_stage = DataManipulationAttackStage.FAILED
def execute(self): def execute(self):
@@ -137,6 +146,12 @@ class DataManipulationBot(DatabaseClient):
self._logon() self._logon()
self._perform_port_scan(p_of_success=self.execution_definition.port_scan_p_of_success) self._perform_port_scan(p_of_success=self.execution_definition.port_scan_p_of_success)
self._perform_data_manipulation(p_of_success=self.execution_definition.data_manipulation_p_of_success) self._perform_data_manipulation(p_of_success=self.execution_definition.data_manipulation_p_of_success)
if self.repeat and self.attack_stage in (
DataManipulationAttackStage.COMPLETE,
DataManipulationAttackStage.FAILED,
):
self.attack_stage = DataManipulationAttackStage.NOT_STARTED
else: else:
self.sys_log.error(f"{self.name}: Failed to start as it requires both a target_ip_address and payload.") self.sys_log.error(f"{self.name}: Failed to start as it requires both a target_ip_address and payload.")