praetorian-inc / chariot-ui

Chariot Offensive Security Platform
https://preview.chariot.praetorian.com
MIT License
15 stars 6 forks source link

Enhanced Attributes UI #207

Open josephwhenry opened 2 days ago

josephwhenry commented 2 days ago

Feature Description

  1. Place the Attributes page in a more prominent position in the UI (e.g., by adding it to the Attack Surface menu drop-down).
  2. Show counts of all attributes in the user's environment.

2 is possible through the CLI with a bit of grep-fu:

praetorian chariot list attributes --page all | cut -d '#' -f 5 | sort | uniq -c
   1 dns
   9 expiration
  25 ftp
2288 http
1420 https
  10 imaps
   3 mysql
   7 pop3
   3 postgresql
   9 purchased
   2 rdp
  12 registrar
  19 rpc
4909 seed
   3 smb
  13 smtp
  31 ssh
1236 tcp

But it would be great to have this data in the UI too.

Problem I believe Attributes are the most powerful feature of Chariot. Unfortunately, this feature is not intuitive to use and is hidden in the UI. For example, we had an entire PS engagement complete without the team even knowing they were there. I didn't even know how useful Attributes were until I started digging into them for an MSP trial closeout. I was blown away by how much data we currently collect. It's sad to see it all tucked away in a lonely corner of the UI 🥲

privateducky commented 2 days ago

I agree.