Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create monkey bootloader for obsolete systems #479

Closed
6 tasks
ShayNehmad opened this issue Nov 7, 2019 · 1 comment · Fixed by #527
Closed
6 tasks

Create monkey bootloader for obsolete systems #479

ShayNehmad opened this issue Nov 7, 2019 · 1 comment · Fixed by #527
Assignees
Labels
Feature Issue that describes a new feature to be implemented.
Milestone

Comments

@ShayNehmad
Copy link
Contributor

Expected Behavior

When the Monkey successfully propagates to outdated systems (namely: Ubuntu 12< and Windows XP/2003<) we should report back that there a system that's very outdated.

Actual Behavior

After #393, we lost support for outdated systems since they don't support Python3. The Monkey fails to execute there.

This makes the monkey\infection_monkey\exploit\win_ms08_067.py exploit useless and some cases of SSH and SMB useless as well.

Specifications

Work plan:

  • Set up a testing env (Island on Ubuntu 18, victim is Windows 2003/XP. Use local ESX as no Cloud provides these OSes)
  • DDR
    • Pyinstaller Bootloading - write a small portable binary that will run before the Monkey using Pyinstaller bootloader. If it recognizes that it's on an outdated system - report back just that (perhaps with hostname and some basic info) and don't try to run the Monkey. We might have some licensing issues with that - https://github.com/pyinstaller/pyinstaller/wiki/FAQ#license
    • Bridgehead option - write a binary that is not the monkey that checks the OS and pulls a Monkey if it's compatible.
    • Try to have the Island figure out if the system is old, and don't run any code on it.
    • Think about more options.
@ShayNehmad ShayNehmad self-assigned this Nov 7, 2019
@ShayNehmad ShayNehmad added Feature Issue that describes a new feature to be implemented. Monkey labels Nov 7, 2019
@ShayNehmad ShayNehmad added this to the 1.7.1 milestone Nov 7, 2019
@danielguardicore
Copy link
Contributor

Licensing will be fine
If you modify also the bootloader, the answer is NO: in fact, by distributing the final product you are also distributing a binary version of the bootloader, so you are forced to release the source code for your modified version.

But we will be fine if it's in this repo

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature Issue that describes a new feature to be implemented.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants