facebookincubator / TTPForge

The TTPForge is a Cybersecurity Framework for developing, automating, and executing attacker Tactics, Techniques, and Procedures (TTPs).
MIT License
344 stars 34 forks source link

💡 [REQUEST] - Incorporate support for cli interaction during ttpforge execution. #497

Open cedowens opened 6 months ago

cedowens commented 6 months ago

Implementation PR

No response

Reference Issues

No response

Summary

When running TTPs via ttpforge using an expect routine that requires user command interaction (ex: running a ttpforge that ssh's into another machine using password-based auth), TTPForge hangs at the point in the expect script where the user input is captured. TTPForge hangs indefinitely which essentially breaks the TTP.

Recommendation will be to add support for routines such as expect routines that need user interaction during execution.

Basic Example

Here is an example of an expect script (which could be executed by ttpforge) where this currently hangs:

steps:

Specifically, forge hangs right at the "send -- "$pword\r" command.

Drawbacks

none

Unresolved questions

No response