Charlie Crane
|
5f5ea5e524
|
#2718 - Updates to Terminal following discussion about implementation with actions.
|
2024-08-08 14:20:23 +01:00 |
|
Charlie Crane
|
ff054830bc
|
#2781 - Correcting some typos in Terminal notebook and elaborating the data in _remote_login request
|
2024-08-08 11:57:30 +01:00 |
|
Charlie Crane
|
93ef3076f5
|
#2781 - user_session_manager._timeout_session() now sends a user_timeout command when closing remote sessions. Corrected source_ip in Terminal.receive()
|
2024-08-08 11:33:42 +01:00 |
|
Archer Bowen
|
9249447ea6
|
Merge branch 'dev' into feature/2689-command-and-control
|
2024-08-07 14:18:40 +01:00 |
|
Archer Bowen
|
b1baf023d6
|
#2689 Fixed up Pytests and confirmed functionality before merging from dev.
|
2024-08-07 14:16:50 +01:00 |
|
Charlie Crane
|
9fea34bb43
|
#2781 - Correcting terminal tests and fixing a typo in base.py
|
2024-08-07 11:58:17 +01:00 |
|
Charlie Crane
|
1802648436
|
#2781 - Initial commit with changes to Terminal to integrate with user_session_manager. Login and logout are now talking to the monitored user session
|
2024-08-07 11:31:51 +01:00 |
|
Archer.Bowen
|
afa4d2b946
|
#2689 Address a couple of TODOs and other misc changes.
|
2024-08-07 10:34:30 +01:00 |
|
Charlie Crane
|
bd91b4be1d
|
#2706 - Merge branch 'dev' into feature/2706-Terminal_Sim_Component
|
2024-08-07 09:08:43 +01:00 |
|
Charlie Crane
|
6d6f21a20a
|
#2706 - Additional assert on new test and a guard clause on LocalTerminalConnection.execute() to check that the Terminal service is running before sending a command
|
2024-08-06 19:14:53 +01:00 |
|
Charlie Crane
|
d05fd00594
|
#2706 - Resolving an issue that saw disconnected terminal connections still able to send execute commands that were also then processed by the target node. Created a new class: LocalterminalConnection, for local connection objects to terminal. Calling terminal.show() when there is a local connection will have 'Local Connection' as the IP address. Receive and execute will check that the provided connection uuid is valid before actioning any commands. TerminalClientConnection objects now have an is_active flag similar to DatabaseClientConnection. Added a new test to check that terminals will reject commands from disconnected clientconnection objects.
|
2024-08-06 19:09:23 +01:00 |
|
Archer.Bowen
|
9c68cd4bd0
|
#2689 Agent Actions Implemented, E2E Demo notebook started and a couple of general fixes and improvements.
|
2024-08-06 17:05:00 +01:00 |
|
Charlie Crane
|
df49b3b5bb
|
#2706 - Actioning Review Comments
|
2024-08-06 14:10:10 +01:00 |
|
Charlie Crane
|
89107f2c4b
|
#2706 - Type-hint changes following review
|
2024-08-06 10:37:11 +01:00 |
|
Chris McCarthy
|
d2011ff327
|
#2811 - Updated syslog messaging around DatabaseClient and DatabaseService connection request and password authentication
|
2024-08-05 22:23:54 +01:00 |
|
Archer.Bowen
|
4ae0275dc9
|
#2689 Implemented initial agent actions and started on documentations. A few TODO's left to do such as validation and expanding unit tests.
|
2024-08-05 16:53:48 +01:00 |
|
Charlie Crane
|
63a689d94a
|
#2706 - correcting test failures
|
2024-08-05 16:25:35 +01:00 |
|
Charlie Crane
|
4fe9753fcf
|
#2706 - Updated terminal.receive() to work with SSHPacket class, fixed some tests and updated RemoteTerminalConnection to hold Source_IP for easier reading
|
2024-08-05 15:44:52 +01:00 |
|
Charlie Crane
|
22c84d35d7
|
Merge branch 'dev' into feature/2706-Terminal_Sim_Component
|
2024-08-05 09:52:53 +01:00 |
|
Charlie Crane
|
4bddf72cd3
|
#2706 - Initial refactor of Terminal Class following review discussion on Friday. Terminal will now return a TerminalConnection/RemoteTerminalConnection object on login.
The new connection object can then be used to pass commands to the target node, without needing to form a full payload item.
|
2024-08-05 09:29:17 +01:00 |
|
Chris McCarthy
|
322a691e53
|
#2768 - Added listen_on_ports attribute to IOSoftware. updated software manager so that it sends copies of payloads to listening ports too. Added integration test that installs a listening service to snoop on DB traffic.
|
2024-08-02 23:21:35 +01:00 |
|
Archer.Bowen
|
1933522e89
|
#2689 Updated docustrings and general quality improvements.
|
2024-08-02 16:13:59 +01:00 |
|
Charlie Crane
|
d9faa1a5da
|
Merge branch 'dev' into feature/2706-Terminal_Sim_Component
|
2024-08-02 13:34:00 +01:00 |
|
Charlie Crane
|
e132c52121
|
#2706 - Removed the LoginValidator. Will be handled by UserSessionManager. Updated some missing variables in method definitions/
|
2024-08-02 13:32:34 +01:00 |
|
Archer.Bowen
|
2339dabac1
|
#2689 Overhauled .receive method. Keep Alive and initial implementation of commands working. (also Updated docustrings + pre-commit)
|
2024-08-02 13:25:08 +01:00 |
|
Charlie Crane
|
ab4931463f
|
#2706 - Minor change following the session_id changes as local_login failed to pass a session_id when creating a new TerminalClientConnection object
|
2024-08-02 09:21:55 +01:00 |
|
Charlie Crane
|
0fe61576c7
|
#2706 - Removed source and target ip_address attributes from the SSHPacket Class. Terminal now uses session_id to send login outcome. No more network_interface[1].ip_address.
|
2024-08-02 09:13:31 +01:00 |
|
Archer.Bowen
|
e554a2d224
|
#2689 Remote connections now successfully establishing however current issues with keep alive inactivity causing the c2 beacon to close even when it does have connection to the c2 server.
|
2024-08-01 17:18:10 +01:00 |
|
Marek Wolan
|
a719b24cfc
|
Merge branch 'dev' into feature/2735-usermanager-fixes
|
2024-08-01 13:23:03 +01:00 |
|
Charlie Crane
|
19d7774440
|
#2706 - Changed how Terminal Class handles its connections. Terminal now has a list of TerminalClientConnection objects that holds all active connections. Corrected a typo in ssh.py
|
2024-08-01 12:34:21 +01:00 |
|
Archer.Bowen
|
e09c0ad4ac
|
#2689 added test template and fixed class instancing issues.
|
2024-08-01 10:11:03 +01:00 |
|
Charlie Crane
|
e4e3e17f51
|
#2706 - commit minor changes from review comments
|
2024-08-01 07:57:01 +01:00 |
|
Archer.Bowen
|
4c7e465f0d
|
#2689 Initial Implementation of C2 Server.
|
2024-07-31 16:43:17 +01:00 |
|
Marek Wolan
|
2abd1969fe
|
#2800 - Consolidate software install and uninstall to a single method
|
2024-07-31 16:41:59 +01:00 |
|
Charlie Crane
|
0f3fa79ffe
|
#2706 - Actioning review comments on example notebook and terminal class
|
2024-07-31 15:47:18 +01:00 |
|
Archer.Bowen
|
f097ed575d
|
#2689 minor docustring and type hint change
|
2024-07-31 10:26:58 +01:00 |
|
Archer.Bowen
|
e4358b02bc
|
#2689 Improving comments in abstract c2
|
2024-07-30 17:18:28 +01:00 |
|
Archer.Bowen
|
4c03a20154
|
#2689 C2 Beacon command methods implemented. Additional docustrings also added.
|
2024-07-30 16:24:36 +01:00 |
|
Charlie Crane
|
3698e6ff5f
|
#2706 - Commented out references to UserSessionManager to remove the dependency.
|
2024-07-30 15:24:37 +01:00 |
|
Archer.Bowen
|
8a00a2a29d
|
#2689 Added TODOs for future reference.
|
2024-07-30 13:10:23 +01:00 |
|
Archer.Bowen
|
8320ec524b
|
#2689 Initial C2 Beacon command handling functionality implemented.
|
2024-07-30 13:04:20 +01:00 |
|
Charlie Crane
|
09084574a8
|
#2706 - Inclusion of health_state_actual attribute to the Terminal class. Started fleshing out a walkthrough notebook showing how to use the new component.
|
2024-07-30 12:15:37 +01:00 |
|
Archer.Bowen
|
556239a535
|
#2689 Initial base class implementation
|
2024-07-30 11:17:10 +01:00 |
|
Charlie Crane
|
bb0ecb93a4
|
#2706 - Correcting whitespace change in database_service.py and actioning some review comments
|
2024-07-30 09:57:47 +01:00 |
|
Charlie Crane
|
e492f19a43
|
#2706 - Small change to execute method following feedback
|
2024-07-29 17:10:13 +01:00 |
|
Charlie Crane
|
f78cb24150
|
#2706 - Removed some un-necessary comments and changes to network used in terminal ACL unit test
|
2024-07-29 14:20:29 +01:00 |
|
Charlie Crane
|
cf7341a4fd
|
#2713 - Minor changes before merging into main Terminal branch
|
2024-07-29 10:50:32 +01:00 |
|
Charlie Crane
|
0ac1c6702c
|
#2713 - eod commit. Initial RequestManager Test implemented, along with an initial setup of the additional Request Manager methods.
|
2024-07-26 16:56:03 +01:00 |
|
Charlie Crane
|
a0e675a09a
|
#2712 - Minor changes to login Validator
|
2024-07-24 11:20:01 +01:00 |
|
Charlie Crane
|
1cb6ce02e0
|
#2712 - Correcting the use of TerminalClientConnection for remote connections. Terminal should hold a list of active remote connections to itself with connection uuid for validation
|
2024-07-24 10:38:12 +01:00 |
|