#2689 Initial draft of File exfiltration.

tests/conftest.py

@@ -462,6 +462,7 @@ def game_and_agent():
         {"type": "C2_SERVER_RANSOMWARE_LAUNCH"},
         {"type": "C2_SERVER_RANSOMWARE_CONFIGURE"},
         {"type": "C2_SERVER_TERMINAL_COMMAND"},
+        {"type": "C2_SERVER_DATA_EXFILTRATE"},
     ]
 
     action_space = ActionManager(

tests/integration_tests/game_layer/actions/test_c2_suite_actions.py

@@ -15,6 +15,8 @@ from primaite.simulator.network.transmission.transport_layer import Port
 from primaite.simulator.system.applications.red_applications.c2.c2_beacon import C2Beacon
 from primaite.simulator.system.applications.red_applications.c2.c2_server import C2Command, C2Server
 from primaite.simulator.system.services.database.database_service import DatabaseService
+from primaite.simulator.system.services.ftp.ftp_client import FTPClient
+from primaite.simulator.system.services.ftp.ftp_server import FTPServer
 from primaite.simulator.system.services.service import ServiceOperatingState
 
 
@@ -150,3 +152,52 @@ def test_c2_server_ransomware(game_and_agent_fixture: Tuple[PrimaiteGame, ProxyA
 
     database_file = server_2.software_manager.file_system.get_file("database", "database.db")
     assert database_file.health_status == FileSystemItemHealthStatus.CORRUPT
+
+
+def test_c2_server_data_exfiltration(game_and_agent_fixture: Tuple[PrimaiteGame, ProxyAgent]):
+    """Tests that a Red Agent can extract a database.db file via C2 Server actions."""
+    game, agent = game_and_agent_fixture
+
+    # Installing a C2 Beacon on server_1
+    server_1: Server = game.simulation.network.get_node_by_hostname("server_1")
+    server_1.software_manager.install(C2Beacon)
+
+    # Installing a database on Server_2 (creates a database.db file.)
+    server_2: Server = game.simulation.network.get_node_by_hostname("server_2")
+    server_2.software_manager.install(DatabaseService)
+    server_2.software_manager.software["DatabaseService"].start()
+
+    # Configuring the C2 to connect to client 1 (C2 Server)
+    c2_beacon: C2Beacon = server_1.software_manager.software["C2Beacon"]
+    c2_beacon.configure(c2_server_ip_address=IPv4Address("10.0.1.2"))
+    c2_beacon.establish()
+    assert c2_beacon.c2_connection_active == True
+
+    # Selecting a target file to steal: database.db
+    # Server 2 ip : 10.0.2.3
+    database_file = server_2.software_manager.file_system.get_file(folder_name="database", file_name="database.db")
+    assert database_file is not None
+
+    # C2 Action: Data exfiltrate.
+
+    action = (
+        "C2_SERVER_DATA_EXFILTRATE",
+        {
+            "node_id": 0,
+            "target_file_name": "database.db",
+            "target_folder_name": "database",
+            "exfiltration_folder_name": "spoils",
+            "target_ip_address": "10.0.2.3",
+            "account": {
+                "username": "admin",
+                "password": "admin",
+            },
+        },
+    )
+    agent.store_action(action)
+    game.step()
+
+    assert server_1.file_system.access_file(folder_name="spoils", file_name="database.db")
+
+    client_1 = game.simulation.network.get_node_by_hostname("client_1")
+    assert client_1.file_system.access_file(folder_name="spoils", file_name="database.db")

tests/integration_tests/system/red_applications/test_c2_suite_integration.py

@@ -22,6 +22,8 @@ from primaite.simulator.system.applications.red_applications.c2.c2_server import
 from primaite.simulator.system.applications.red_applications.ransomware_script import RansomwareScript
 from primaite.simulator.system.services.database.database_service import DatabaseService
 from primaite.simulator.system.services.dns.dns_server import DNSServer
+from primaite.simulator.system.services.ftp.ftp_client import FTPClient
+from primaite.simulator.system.services.ftp.ftp_server import FTPServer
 from primaite.simulator.system.services.web_server.web_server import WebServer
 from tests import TEST_ASSETS_ROOT
 
@@ -497,3 +499,42 @@ def test_c2_suite_yaml():
 
     assert c2_beacon.c2_connection_active is True
     assert c2_server.c2_connection_active is True
+
+
+def test_c2_suite_file_extraction(basic_network):
+    """Test that C2 Beacon can successfully exfiltrate a target file."""
+    network: Network = basic_network
+    network, computer_a, c2_server, computer_b, c2_beacon = setup_c2(network)
+    # Asserting that the c2 beacon has established a c2 connection
+    assert c2_beacon.c2_connection_active is True
+
+    # Asserting that the c2 server has established a c2 connection.
+    assert c2_server.c2_connection_active is True
+    assert c2_server.c2_remote_connection == IPv4Address("192.168.255.2")
+
+    # Creating the target file on computer_c
+    computer_c: Computer = network.get_node_by_hostname("node_c")
+    computer_c.file_system.create_folder("important_files")
+    computer_c.file_system.create_file(file_name="secret.txt", folder_name="important_files")
+    assert computer_c.file_system.access_file(folder_name="important_files", file_name="secret.txt")
+
+    # Installing an FTP Server on the same node as C2 Beacon via the terminal:
+
+    # Attempting to exfiltrate secret.txt from computer c to the C2 Server
+    c2_server.send_command(
+        given_command=C2Command.DATA_EXFILTRATION,
+        command_options={
+            "username": "admin",
+            "password": "admin",
+            "target_ip_address": "192.168.255.3",
+            "target_folder_name": "important_files",
+            "exfiltration_folder_name": "yoinked_files",
+            "target_file_name": "secret.txt",
+        },
+    )
+
+    # Asserting that C2 Beacon has managed to get the file
+    assert c2_beacon._host_file_system.access_file(folder_name="yoinked_files", file_name="secret.txt")
+
+    # Asserting that the C2 Beacon can relay it back to the C2 Server
+    assert c2_server._host_file_system.access_file(folder_name="yoinked_files", file_name="secret.txt")