guardicore / monkey

Infection Monkey - An open-source adversary emulation platform

https://www.guardicore.com/infectionmonkey/

GNU General Public License v3.0

6.56k stars 765 forks source link

Propagation via PsExec #1245

Closed mssalvatore closed 2 years ago

mssalvatore commented 3 years ago

Description

As a red team member, I want a ransomware simulation that propagates via PsExec, so that I can evaluate my segmentation policies against propagation techniques that are commonly used by ransomware.

Acceptance Criteria

Infection Monkey is able to propagate itself via PsExec.
A new blackbox test is added to verify the PsExec exploiter.
Unit tests are written and provide comprehensive coverage.
Documentation is written that describes how the new exploiter behaves.

mssalvatore commented 2 years ago

The SMB exploiter already exercises most of the same mechanisms as PSExec.