search

guardicore / monkey

Infection Monkey - An open-source adversary emulation platform
https://www.guardicore.com/infectionmonkey/
GNU General Public License v3.0
6.64k stars 777 forks source link

Infection Monkey & OSX #446

Closed khast3x closed 5 years ago

khast3x commented 5 years ago

Hello,

Thank you for this great project. Any chance you would know if the infection monkey works on OSX ? I would assume it does since its unix, but could be wrong.

Best regards,

VakarisZ commented 5 years ago

Hey. As our wiki states we don't support OSX :(

danielguardicore commented 5 years ago

Hey, We currently don't support OS X and have no plans to.

Can you explain what use case you're thinking up for the Monkey when attacking OS X machines? For example, what important remote code execution attacks exist on OS X machines, etc.

khast3x commented 5 years ago

Hey guys thank you for responding.

@danielguardicore I've been getting my firm to start trying out Infection Monkey, and have found it very useful for many situations. We're currently observing positive feedback from smaller firms who are vulnerable from common issues, as well as some of the hotter exploits. It's great because we're cutting costs for basic tests, especially for remote sites.

Some of the firms happen to use OSX too, sometimes entreprise-wide, and have open SSH ports and shared authorised_keys for administration purposes for example.

I'm not very familiar with OSX environments, but I'd imagine porting the linux variant to OSX must not be too complicated. I'll have a look into it for curiosity :eyes:

danielguardicore commented 5 years ago

Oh! Are we talking about OS X servers or laptops? Are you saying you have OS X laptops remotely managed over SSH?

If so, yeah, worth supporting.

However, I don't think any of the devs maintaining this have macbooks available to test the monkey on it.

khast3x commented 5 years ago

Laptops. Yes SSH sure is a thing for OSX. Yeah that was to be expected, they ain't cheap...

In case in tickles someone's curiosity, running OSX in a VM is pretty smooth!

Furthermore, I have additional questions about Infection Monkey since running our first trials. Is there an email address I can write to instead of opening issues?
Cheers!

danielguardicore commented 5 years ago

Feel free to join the slack and join the chats or DM one of us.