Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement an SNMP exploiter #3234

Closed
20 tasks done
mssalvatore opened this issue Apr 20, 2023 · 3 comments · Fixed by #3348 or #3365
Closed
20 tasks done

Implement an SNMP exploiter #3234

mssalvatore opened this issue Apr 20, 2023 · 3 comments · Fixed by #3348 or #3365

Comments

@mssalvatore
Copy link
Collaborator

mssalvatore commented Apr 20, 2023

Description

Implement an exploiter that uses SNMP to propagate to Linux hosts.

Related: #3198

Tasks

  • Add a vulnerable machine to terraform/GCP (test2 environment) (0d) @cakekoa
  • Figure out how to replicate the PoC commands with pysnmp (0d) @cakekoa @mssalvatore
  • Create plugin manifest (0d) @cakekoa
  • Create a Pipfile for dependencies (0d) @cakekoa
  • plugin.py (0d) @cakekoa
  • Generate community strings by getting all usernames and passwords (0d) @cakekoa
  • command builder (0d) @cakekoa
  • exploiter (0d) @cakekoa
    • Don't forget to add MITRE tags
  • Add a jenkins job to build the plugin (0d) @mssalvatore
    • Update the island build jobs on Jenkins to copy the artifacts from the SNMP plugin build job
  • options (pydantic) (0d) @cakekoa
    • determine what options SNMP should have
    • create a pydantic model for SNMP options
    • create a config schema
  • Update ETE test configurations (0d) @ilija-lazoroski
  • Document the new exploiter (0d) @cakekoa
  • Add Bash Dropper (0.5d) @mssalvatore
  • Test (0d)
  • Fix InconsistentValueError (0d) @cakekoa
@cakekoa
Copy link
Contributor

cakekoa commented May 4, 2023

Examples:
http://www.pysnmp.com/pysnmp/examples/#high-level-snmp

Look at the Modifying variables and MIB walking operations sections, which seem to be analogs of snmpset and snmpwalk

@cakekoa
Copy link
Contributor

cakekoa commented May 4, 2023

Proof-of-concept: https://github.com/mxrch/snmp-shell.git

@cakekoa
Copy link
Contributor

cakekoa commented May 4, 2023

Here's some example code showing how to create, execute, and delete a command via SNMP:
snmp.txt

This was referenced May 4, 2023
cakekoa added a commit that referenced this issue May 4, 2023
cakekoa added a commit that referenced this issue May 4, 2023
mssalvatore pushed a commit that referenced this issue May 4, 2023
mssalvatore added a commit that referenced this issue May 5, 2023
mssalvatore pushed a commit that referenced this issue May 5, 2023
mssalvatore added a commit that referenced this issue May 5, 2023
mssalvatore pushed a commit that referenced this issue May 8, 2023
mssalvatore pushed a commit that referenced this issue May 8, 2023
mssalvatore added a commit that referenced this issue May 11, 2023
mssalvatore added a commit that referenced this issue May 16, 2023
@cakekoa cakekoa mentioned this issue May 16, 2023
10 tasks
@mssalvatore mssalvatore reopened this May 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants