Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Replaced ping with curl/wget and Invoke-WebRequest #517

Merged
merged 3 commits into from
Dec 25, 2019

Conversation

ShayNehmad
Copy link
Contributor

@ShayNehmad ShayNehmad commented Dec 23, 2019

What is this?

Fixes #515: Use HTTP instead of ICMP for the Zero Trust people test.

Checklist

  • Have you added an explanation of what your changes do and why you'd like to include them?
  • Have you successfully tested your changes locally?
    • Windows - works
    • Windows - fails
    • Linux - works with curl x wget
    • Linux - fails with curl x wget
    • Linux - fails - one or both missing
  • Is the TravisCI build passing?

Proof that it works

Windows: fails

2019-12-24 19:09:28,876 [25444:22012:DEBUG] base_telem.send.25: Sending post_breach telemetry. Data: {"command": "", "result": ["Created process 'powershell.exe -command \"Invoke-WebRequest https://infectiokjl;adfkjl;dsfjklsdfkj;ladfjkl;adfsjkldsfnmonkey.com/\" -UseBasicParsing' as user 'somenewuservfulk', but the process failed (exit status 1:0x1).", false], "name": "Communicate as new user", "hostname": "gc-pc-169", "ip": "10.15.1.75"}

Windows: works

2019-12-24 19:11:28,905 [30116:12880:DEBUG] base_telem.send.25: Sending post_breach telemetry. Data: {"command": "", "result": ["Created process 'powershell.exe -command \"Invoke-WebRequest https://infectionmonkey.com/\" -UseBasicParsing' as user 'somenewuserbdfjo' and the process succeeded.", true], "name": "Communicate as new user", "hostname": "gc-pc-169", "ip": "10.15.1.75"}

Changes

Are the commit messages enough? If not, elaborate.

@ShayNehmad ShayNehmad added Monkey Feature Issue that describes a new feature to be implemented. labels Dec 23, 2019
@ShayNehmad ShayNehmad added this to the 1.8.0 milestone Dec 23, 2019
@ShayNehmad ShayNehmad self-assigned this Dec 23, 2019
… the "0xc0000142" error code and added -UseBasicParsing to get over the IE Engine inconfigured error

This will be heavily documented in a tweet sometime
@ShayNehmad ShayNehmad merged commit 52eced3 into develop Dec 25, 2019
@ShayNehmad ShayNehmad deleted the feature/515-add-curl-pba branch December 25, 2019 10:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Feature Issue that describes a new feature to be implemented.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add curl PBA for Users Zero Trust test
2 participants