search

GhostManager / Ghostwriter

The SpecterOps project management and reporting engine
https://ghostwriter.wiki
BSD 3-Clause "New" or "Revised" License
1.33k stars 182 forks source link

Mange personas like you manage domains. #47

Closed dmaynor closed 2 months ago

dmaynor commented 4 years ago

This is an idea for further usability.

Give the user the ability to populate their personas used on engagements. For instance when simulating multiple attacks I create an individual character for each team member on the attacking team. It’s kinda like building a DnD character. How I respond to certain situations depends on which persona is on keyboard.

Some stats I track: Best OS nano vs vim vs emacs Sysadmin skill Developer skill Operator skill Self taught or military or college Keep updated on TTP? Go-to attack Are they moonlighting? Typing ticks.

The idea would be to track personas in use on each test so operators can check them in and out like a domain. If a persona gets caught to many times he gets blown like domain names do.

dmaynor commented 4 years ago

Added note about this being an idea for future visibility.

er4z0r commented 3 years ago

I like the idea, though I have a slightly different "angle" on personas. I look at them as sleeves that can be used as part of SE campaigns. They have attributes like any regular person (name, age, sex, date and place of birth), picture and a backstory/vita. They might also have accounts on public services (free-mail providers, twitter, LinkedIn etc.) with associated mobile numbers.

github-actions[bot] commented 3 months ago

This issue has been labeled as stale because it has been open for 30 days with no activity.

github-actions[bot] commented 2 months ago

This issue is closed because it has been inactive for 14 days since being labeled stale. Feel free to re-open the issue with a comment. If this needs further discussion (e.g., a feature request), it might be better to open a topic under the Discussions tab.