mitre / caldera

Automated Adversary Emulation Platform
https://caldera.mitre.org
Apache License 2.0
5.66k stars 1.08k forks source link

Red user missing abilities #2913

Closed ghvbn0 closed 5 months ago

ghvbn0 commented 8 months ago

Red user is missing any abilities, atomic plugin is enabled and loaded

To Reproduce Steps to reproduce the behavior:

  1. Deploy caldera, enable atomic plugin, login as red user

Expected behavior abilities should be avalaible

Screenshots

image

image

image

blue user: image

Desktop (please complete the following information):

github-actions[bot] commented 8 months ago

Looks like your first issue -- we aim to respond to issues as quickly as possible. In the meantime, check out our documentation here: http://caldera.readthedocs.io/

elegantmoose commented 8 months ago

Try pulling Master branch.

Clear local browser history.

If doesnt work, can you start the server with --log DEBUG and c/p output? Thanks

ghvbn0 commented 8 months ago

`2024-03-14 11:24:47 INFO Using main config from conf/local.yml server.py:225 2024-03-14 11:24:48 DEBUG Loaded 2 parsers learning_svc.py:20 DEBUG Collision in ability name detected for 10a9d979-e342-418a-a9b0-002c483e0fa6 and b1d41972-3ad9-4aa1-8f7f-05f049a2980e (Start 54ndc47). Modifying name of the second ability to Start 54ndc47 (2)... c_ability.py:103 DEBUG Collision in ability name detected for ab44803d5a9c299258efff185b0f70b5 and 9bd17863cd45f82002a6f011de139363 (rc.common). Modifying name of the second ability to rc.common (2)... c_ability.py:103 DEBUG Collision in ability name detected for 5e3512c73a461c17ddcb1cc0bbdbeef9 and 52928f462ea8f5fa617aa8c815f5598b (WinPwn - PowerSharpPack - Kerberoasting Using Rubeus). Modifying name of the second ability to WinPwn - PowerSharpPack - Kerberoasting Using Rubeus (2)... c_ability.py:103 DEBUG Collision in ability name detected for c84a57391dbc724dc51436deb3e0ca00 and e0c75b4cc32124ef4c61508694fd0808 (Get-DomainUser with PowerView). Modifying name of the second ability to Get-DomainUser with PowerView (2)... c_ability.py:103 DEBUG Collision in ability name detected for 1d3cb1429f530cb89f41c65e57f03db4 and 2488245e-bcbd-405d-920e-2de27db882b3 (Query Registry). Modifying name of the second ability to Query Registry (2)... c_ability.py:103 DEBUG Collision in ability name detected for 68a0a328719faa26fff5b92e18108b3f and 26d3702887944abcc64b406baf8f8e43 (Enumerate users and groups). Modifying name of the second ability to Enumerate users and groups (2)... c_ability.py:103 DEBUG Collision in ability name detected for 44705da4b28c8fa57fc2a2940b34565a and dca8b042fcdffcc1f5cddcff4122c434 (System Information Discovery). Modifying name of the second ability to System Information Discovery (2)... c_ability.py:103 DEBUG Collision in ability name detected for 4370001012f5f0df001269627b4737e9 and 942316dc6a362e44b248a872e5f42c92 (System Owner/User Discovery). Modifying name of the second ability to System Owner/User Discovery (2)... c_ability.py:103 DEBUG Collision in ability name detected for b73d58b20bcb138a26175f240cca9de2 and dca8b042fcdffcc1f5cddcff4122c434 (System Information Discovery). Modifying name of the second ability to System Information Discovery (2)... c_ability.py:103 DEBUG Collision in ability name detected for 5ac7f6ec1898d8d408f9cdc687262cc7 and 7db784562afbea0265fcafc4243b66de (Exfiltration Over Alternative Protocol - SSH). Modifying name of the second ability to Exfiltration Over Alternative Protocol - SSH (2)... c_ability.py:103 2024-03-14 11:24:49 DEBUG Collision in ability name detected for 3838447b079b302fe75b700a70163815 and fcf71ee3-d1a9-4136-b919-9e5f6da43608 (Clear Logs). Modifying name of the second ability to Clear Logs (2)... c_ability.py:103 DEBUG Collision in ability name detected for 9bd1997d793d0ac5b1aea4888c75c932 and 3bfd3a51f3c7352d7c6c6c785d01e5f7 (Loadable Kernel Module based Rootkit). Modifying name of the second ability to Loadable Kernel Module based Rootkit (2)... c_ability.py:103 DEBUG Collision in ability name detected for f674301b84ea3344f119270bf7bb97cd and 4d4b29abb6b1e580e33c0035c1fc37ad (rm -rf). Modifying name of the second ability to rm -rf (2)... c_ability.py:103 DEBUG Restored data from persistent storage data_svc.py:116 DEBUG There are 0 jobs in the scheduler data_svc.py:117 DEBUG Restored data from persistent storage base_knowledge_svc.py:308 DEBUG Registered contact: slack contact_svc.py:38 DEBUG Registered contact: ftp contact_svc.py:38 DEBUG Registered contact: gist contact_svc.py:38 DEBUG Registered contact: tcp contact_svc.py:38 DEBUG Registered contact: udp contact_svc.py:38 DEBUG Registered contact: dns contact_svc.py:38 DEBUG Registered contact: html contact_svc.py:38 DEBUG Registered contact: websocket contact_svc.py:38 DEBUG Registered contact: http contact_svc.py:38 DEBUG Registered contact tunnel: ssh_tunneling contact_svc.py:53 INFO Invalid Github Gist personal API token provided. Gist C2 contact will not be started. contact_gist.py:70 INFO Generating temporary SSH private key. Was unable to use provided SSH private key tunnel_ssh.py:26 DEBUG Loaded gocat extension module: slack sand_svc.py:94 DEBUG Loaded gocat extension module: dns_tunneling sand_svc.py:94 DEBUG Loaded gocat extension module: donut sand_svc.py:94 DEBUG Loaded gocat extension module: shells sand_svc.py:94 DEBUG Loaded gocat extension module: native sand_svc.py:94 DEBUG Loaded gocat extension module: shellcode sand_svc.py:94 DEBUG Loaded gocat extension module: proxy_http sand_svc.py:94 DEBUG Loaded gocat extension module: shared sand_svc.py:94 INFO Enabled plugin: sandcat app_svc.py:116 DEBUG Configuration (agents) update, setting deployments=['1837b43e-4fff-46b2-a604-a602f7540469', '356d1722-7784-40c4-822b-0cf864b0b36d', '2f34977d-9558-4c12-abad-349716777c6b', '0ab383be-b819-41bf-91b9-1bd4404d83bf'] base_world.py:46 INFO Enabled plugin: response app_svc.py:116 INFO Enabled plugin: manx app_svc.py:116 INFO Enabled plugin: stockpile app_svc.py:116 INFO Enabled plugin: fieldmanual app_svc.py:116 INFO Enabled plugin: debrief app_svc.py:116 2024-03-14 11:24:50 INFO Enabled plugin: training app_svc.py:116 INFO Enabled plugin: compass app_svc.py:116 INFO Enabled plugin: atomic app_svc.py:116 INFO Enabled plugin: access app_svc.py:116 INFO Creating SSH listener on 0.0.0.0, port 8022 logging.py:92 INFO serving on 0.0.0.0:2222 server.py:741 WARNING upx does not meet the minimum version of 0.0.0. Upx is an optional dependency which adds more functionality. app_svc.py:171 2024-03-14 11:24:59 WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: ff78708e0e18d31c0be7a2be295158ec c_adversary.py:90 WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: 6fdc9037290299164d52b65219d628ef c_adversary.py:90 WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: ae21aefd2d9933df45a4e55485fbc333 c_adversary.py:90 WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: d8f4e4e10f4d6da1b174bb18cb859e6c c_adversary.py:90 WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: 86ab6d7ecc05b7dabc7699a9e6a0a173 c_adversary.py:90 WARNING Ability referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: 5c922d92f383656401d5633ca23db497 c_adversary.py:90 WARNING Objective referenced in adversary ef4d997c-a0d1-4067-9efa-87c58682db71 but not found: c495a9828-cab1-44dd-a0ca-66e58177d8c. Setting default objective. c_adversary.py:95 INFO Docs built successfully. hook.py:58 DEBUG Using default login handler. auth_svc.py:209 DEBUG Created authentication group: blue auth_svc.py:72 DEBUG Created authentication group: red auth_svc.py:72 DEBUG = connection is CONNECTING protocol.py:255 DEBUG > GET /system/ready HTTP/1.1 client.py:115 DEBUG > Host: 0.0.0.0:7012 client.py:117 DEBUG > Upgrade: websocket client.py:117 DEBUG > Connection: Upgrade client.py:117 DEBUG > Sec-WebSocket-Key: HeUiKjWcBTCfVpjvCEkv+Q== client.py:117 DEBUG > Sec-WebSocket-Version: 13 client.py:117 DEBUG > Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits client.py:117 DEBUG > User-Agent: Python/3.10 websockets/11.0.3 client.py:117 DEBUG < HTTP/1.1 101 Switching Protocols client.py:148 DEBUG < Upgrade: websocket client.py:150 DEBUG < Connection: Upgrade client.py:150 DEBUG < Sec-WebSocket-Accept: 0K1KjxSpnNSDc+PzXhfscZfXsJI= client.py:150 DEBUG < Sec-WebSocket-Extensions: permessage-deflate; server_max_window_bits=12; client_max_window_bits=12 client.py:150 DEBUG < Date: Thu, 14 Mar 2024 11:24:59 GMT client.py:150 DEBUG < Server: Python/3.10 websockets/11.0.3 client.py:150 DEBUG = connection is OPEN protocol.py:356 DEBUG < CLOSE 1000 (OK) [2 bytes] protocol.py:1168 DEBUG = connection is CLOSING protocol.py:1223 DEBUG > CLOSE 1000 (OK) [2 bytes] protocol.py:1174 DEBUG = connection is CLOSED protocol.py:1494 INFO All systems ready. server.py:101

██████╗ █████╗ ██╗ ██████╗ ███████╗██████╗ █████╗ ██╔════╝██╔══██╗██║ ██╔══██╗██╔════╝██╔══██╗██╔══██╗ ██║ ███████║██║ ██║ ██║█████╗ ██████╔╝███████║ ██║ ██╔══██║██║ ██║ ██║██╔══╝ ██╔══██╗██╔══██║ ╚██████╗██║ ██║███████╗██████╔╝███████╗██║ ██║██║ ██║ ╚═════╝╚═╝ ╚═╝╚══════╝╚═════╝ ╚══════╝╚═╝ ╚═╝╚═╝ ╚═╝

                INFO     None                                                                                                                                                                                                                                                                                                                             server.py:102

2024-03-14 11:25:25 DEBUG Using login handler "Default Login Handler" for login auth_svc.py:101 DEBUG red logging in auth_svc.py:155 2024-03-14 11:25:28 DEBUG Using login handler "Default Login Handler" for login auth_svc.py:101 DEBUG red logging in auth_svc.py:155 2024-03-14 11:25:33 DEBUG Deregistered contact: slack contact_svc.py:46 DEBUG Deregistered contact: ftp contact_svc.py:46 DEBUG Deregistered contact: gist contact_svc.py:46 DEBUG Deregistered contact: tcp contact_svc.py:46 DEBUG Deregistered contact: udp contact_svc.py:46 DEBUG Deregistered contact: dns contact_svc.py:46 DEBUG Deregistered contact: html contact_svc.py:46 DEBUG Deregistered contact: websocket contact_svc.py:46 DEBUG Deregistered contact: http contact_svc.py:46 DEBUG [!] shutting down server...good-bye app_svc.py:142 DEBUG waiting for 1 tasks server.py:790`

elegantmoose commented 7 months ago

Any luck?

*Im stumped at the moment. Cannot replicate.

ghvbn0 commented 7 months ago

Nah, I reverted to 4.2.0 version and it works

github-actions[bot] commented 6 months ago

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days