mitre / sandcat

A CALDERA plugin
https://caldera.mitre.org/
Apache License 2.0
60 stars 36 forks source link

[VIRTS-4690] Add Architecture Header to Sandcat #435

Closed bleepbop closed 8 months ago

bleepbop commented 10 months ago

Description

Allows users to supply an architecture header to sandcat. This will allow Darwin ARM64 users to successfully compile sandcat without emulation.

Additionally, an architecture key has been added to the sandcat ability file. The frontend can later be modified to use this, so that users can select platform and architecture on the agents page. Currently, all sandcat commands are being listed, but they have been labeled as (ARM64) or (AMD64).

Includes modifications to #423.

Type of change

How Has This Been Tested?

Ran all of new agent commands for ARM64, and ran a few abilities with each. Agents compiled successfully and were able to transmit data successfully as well. When running file splunkd, the output verified that the agent was compiled for ARM64.

Checklist:

elegantmoose commented 9 months ago

Code looked good but I could not test out ARM on my Mac.

sonarcloud[bot] commented 8 months ago

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication