Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Migrate the Log4Shell exploiter to a plugin #3388

Closed
22 of 24 tasks
mssalvatore opened this issue May 30, 2023 · 0 comments · Fixed by #3457
Closed
22 of 24 tasks

Migrate the Log4Shell exploiter to a plugin #3388

mssalvatore opened this issue May 30, 2023 · 0 comments · Fixed by #3457
Assignees
@cakekoa
Labels
Complexity: High Exploit Impact: High Plugins sp/13
Milestone
v2.3.0

Comments

@mssalvatore
Copy link
Collaborator

mssalvatore commented May 30, 2023 •
edited by ilija-lazoroski
Loading

Description

Replace the hard-coded Log4Shell exploiter with a new and improved, fully tested, Log4Shell exploiter plugin.

Tasks

  • Create plugin skeleton (0d) @cakekoa
    • options (pydantic)
      • determine what options Log4Shell should have
      • create a pydantic model for Log4Shell options
    • Create plugin manifest
    • Create config schema
  • Create a Pipfile for dependencies (0d) @ilija-lazoroski
  • Migrate the LDAPServer from multiprocessing to multithreading (0d) - @shreyamalviya
  • migrate the log4shell exploiter to a plugin (0d)
  • Update Jenkins (0d)
    • Add a jenkins job to build the plugin (needs to build windows dependencies) - @shreyamalviya
    • Update the island build jobs on Jenkins to copy the artifacts from the Log4Shell plugin build job
  • Update ETE test configurations (0d) - @shreyamalviya
  • Remove the hard-coded Log4Shell plugin (0d) - @shreyamalviya
    • Don't forget to remove the dependencies from the agent's Pipfile
    • Remove WebRCE
    • Remove vulture entries
  • Extra and ETE testing (0.25d) @ilija-lazoroski
  • consolidate from twisted.internet import reactor imports and test; see this
@mssalvatore mssalvatore added this to the v2.3.0 milestone May 30, 2023
@cakekoa cakekoa self-assigned this Jun 22, 2023
@cakekoa cakekoa mentioned this issue Jun 22, 2023
Merged
10 tasks
cakekoa added a commit that referenced this issue Jun 22, 2023
@cakekoa
Log4Shell: Add plugin manifest
3de551d 
Issue #3388
PR #3434
@cakekoa cakekoa mentioned this issue Jun 22, 2023
Merged
10 tasks
cakekoa added a commit that referenced this issue Jun 22, 2023
@cakekoa
Log4Shell: Add options
c8eb2ad 
Issue #3388
PR #3435
cakekoa added a commit that referenced this issue Jun 22, 2023
@cakekoa
Log4Shell: Add options
7381f39 
Issue #3388
PR #3435
@cakekoa cakekoa mentioned this issue Jun 22, 2023
Merged
10 tasks
mssalvatore pushed a commit that referenced this issue Jun 22, 2023
@cakekoa @mssalvatore
Log4Shell: Add config schema
86318b2 
Issue #3388
PR #3436
mssalvatore pushed a commit that referenced this issue Jun 22, 2023
@cakekoa @mssalvatore
Log4Shell: Add config schema
b42af4b 
Issue #3388
PR #3436
ilija-lazoroski pushed a commit that referenced this issue Jun 23, 2023
@VakarisZ
Log4Shell: Add Pipfile to Log4Shell
f59d219 
Issue: #3388
PR:
@ilija-lazoroski ilija-lazoroski mentioned this issue Jun 23, 2023
Merged
10 tasks
ilija-lazoroski pushed a commit that referenced this issue Jun 23, 2023
@VakarisZ
Log4Shell: Add Pipfile to Log4Shell
665493d 
Issue: #3388
PR: #3438
@shreyamalviya shreyamalviya mentioned this issue Jun 23, 2023
Merged
10 tasks
mssalvatore added a commit that referenced this issue Jun 23, 2023
@mssalvatore
Merge branch '3388-log4shell-pipfile' into develop
187be59 
Issue #3388
PR #3438
@shreyamalviya shreyamalviya mentioned this issue Jun 26, 2023
Merged
10 tasks
ilija-lazoroski added a commit that referenced this issue Jun 26, 2023
@ilija-lazoroski
Log4Shell: Add log4shell command builder
7563a57 
Issue: #3388
PR:
@ilija-lazoroski ilija-lazoroski mentioned this issue Jun 26, 2023
Merged
10 tasks
ilija-lazoroski added a commit that referenced this issue Jun 26, 2023
@ilija-lazoroski
Log4Shell: Add log4shell command builder
466b5ce 
Issue: #3388
PR:
mssalvatore added a commit that referenced this issue Jun 26, 2023
@mssalvatore
Merge branch '3388-log4shell-plugin-dot-py' into develop
01759d9 
Issue #3388
PR #3440
mssalvatore added a commit that referenced this issue Jun 26, 2023
@mssalvatore
Merge branch '3388-migrate-ldapserver-from-processes-to-threads' into…
515bbc4 
… develop

Issue #3388
PR #3439
ilija-lazoroski added a commit that referenced this issue Jun 26, 2023
@ilija-lazoroski
Log4Shell: Add log4shell command builder
1e2efb5 
Issue: #3388
PR:
mssalvatore added a commit that referenced this issue Jun 26, 2023
@mssalvatore
Merge branch '3388-log4shell-command-builder' into develop
a1fd1c4 
Issue #3388
PR #3441
@shreyamalviya shreyamalviya mentioned this issue Jun 27, 2023
Merged
10 tasks
@ilija-lazoroski ilija-lazoroski mentioned this issue Jun 29, 2023
Merged
10 tasks
shreyamalviya added a commit that referenced this issue Jul 3, 2023
@shreyamalviya
BB: Update EtE test configurations to work with Log4Shell plugin
2ce5ee1 
Issue #3388
PR #3450
This was referenced Jul 3, 2023
Merged
Merged
mssalvatore added a commit that referenced this issue Jul 3, 2023
@mssalvatore
Merge branch '3388-log4shell-exploit-client' into 3388-log4shell-plug…
d06715e 
…in-exploiter

Issue #3388
PR #3448
shreyamalviya added a commit that referenced this issue Jul 4, 2023
@shreyamalviya
Merge branch '3388-log4shell-plugin-exploiter' into develop
b0074a0 
Issue #3388
PR #3442
ilija-lazoroski added a commit that referenced this issue Jul 4, 2023
@ilija-lazoroski
Merge branch '3388-remove-hardcoded-log4shell' into develop
4cb6b5c 
Issue #3388
PR #3451
ilija-lazoroski pushed a commit that referenced this issue Jul 4, 2023
@shreyamalviya @ilija-lazoroski
BB: Update EtE test configurations to work with Log4Shell plugin
51b9617 
Issue #3388
PR #3450
ilija-lazoroski pushed a commit that referenced this issue Jul 4, 2023
@shreyamalviya @ilija-lazoroski
BB: Update EtE test configurations to work with Log4Shell plugin
6ba1562 
Issue #3388
PR #3450
ilija-lazoroski pushed a commit that referenced this issue Jul 4, 2023
@shreyamalviya @ilija-lazoroski
BB: Update EtE test configurations to work with Log4Shell plugin
9fc8170 
Issue #3388
PR #3450
@ilija-lazoroski ilija-lazoroski mentioned this issue Jul 4, 2023
Merged
10 tasks
ilija-lazoroski added a commit that referenced this issue Jul 4, 2023
@ilija-lazoroski
Log4Shell: Import twisted reactor at top level
0d5699a 
Issue: #3388
PR: #3457
mssalvatore pushed a commit that referenced this issue Jul 5, 2023
@ilija-lazoroski @mssalvatore
Log4Shell: Import twisted reactor at top level
1b12680 
Issue: #3388
PR: #3457
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@cakekoa cakekoa

Labels
Complexity: High Exploit Impact: High Plugins sp/13
Projects
None yet
Milestone
v2.3.0
Development

Successfully merging a pull request may close this issue.

Log4Shell: Import twisted reactor at top level guardicore/monkey
2 participants
@cakekoa @mssalvatore