Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sensitive information is leaked when sending System Information telemtry. #613

Closed
acepace opened this issue Apr 12, 2020 · 0 comments · Fixed by #614
Closed

Sensitive information is leaked when sending System Information telemtry. #613

acepace opened this issue Apr 12, 2020 · 0 comments · Fixed by #614

Comments

@acepace
Copy link
Contributor

acepace commented Apr 12, 2020

Describe the bug

When logging system information telemetry, it is not cleared of sensitive information such as hashes or keys.

Screenshots

Start part

2020-04-12 14:53:07,273 [6247:139736323811136:INFO] SSH_info_collector.get_info.26: Scanned for ssh keys
2020-04-12 14:53:07,273 [6247:139736323811136:DEBUG] base_telem.send.25: Sending system_info telemetry. Data: {"network_info": {"networks": [{"addr": "172.27.87.158", "netmask": "255.255.240.0"}], "netstat": [{"proto": "tcp", "local_address": "127.0.0.1", "local_port": 27
017, "remote_address": "127.0.0.1", "remote_port": 39714, "status": "ESTABLISHED", "pid": null}, {"prot

Continues with

 "private_key": "-----BEGIN RSA PRIVATE KEY-----\nMIIJKgIBAAKCAgEAx+78D9tEk16lkXC6uh

Machine version (please complete the following information):

  • OS: Develop branch
acepace pushed a commit to acepace/monkey that referenced this issue Apr 12, 2020
@acepace acepace mentioned this issue Apr 12, 2020
3 tasks
ShayNehmad added a commit that referenced this issue Apr 13, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants