(OLD) Recycle Script - Githubissues

aosei37 commented 3 years ago

This issue describes the progress and any changes to our recycle script

alexishp80 commented 3 years ago

If we find that we are not collecting enough data, we will shift from recycling all containers every hour to recycling one container after an attacker leaves.

aosei37 commented 3 years ago

The recycle script stopped all running containers, destroyed them, created new ones based on our four templates (control, files, database, and resources), and started them up again

aosei37 commented 3 years ago

UPDATE AS OF 10/21/2021

We realized that many things would need to be installed on the containers once recycled and certain services and the MITM had to be restarted as well. So for the final recycle script, we created:

A MITM script that killed all running nodes and started it back up
A create script that created the containers and added the correct IP table rules for each one
A routing script that add the necessary routing rules to the IP table
A hostname script that changes the name of the container on the attacker side to reflect the fake business we came up with (KATRA electronics) instead of our actual names like main_control, main_files, etc
A section that flushed the iptables to make it empty and to restore the ipset blackist of the blocked IP addresses
Installing wget and curl and poisoning the commands ( Decided to not use them for now as nothing was being saved to the .downloads folder)

So the final recycle script destroys the running containers and calls the new scripts to complete the full task

aosei37 / Group1F-Ctrl-Alt-Elite

(OLD) Recycle Script #3