search

splunk / attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
Apache License 2.0
2.02k stars 340 forks source link

Purplesharp Playbook Failing #844

Open TrashMaster112 opened 10 months ago

TrashMaster112 commented 10 months ago

I am getting an error everytime I try running the default Purplesharp playbook. I have currently configured the range in a local installation The command I am running is as follows:

python attack_range.py simulate -e PurpleSharp -t ar-win-attack-range-key-pair-ar-0 -p configs/purplesharp_playbook_T1003.pb

The error I am getting is as follows:

An exception occurred during task execution. To see the full traceback, use -vvv. The error was: If you are using a module and expect the file to exist on the remote, see the remote_src option
fatal: [localhost]: FAILED! => {"changed": false, "dest": "C:\\Tools\\PurpleSharp\\playbook.pb", "msg": "Could not find or access '././configs/purplesharp_playbook_T1003.pb'\nSearched in:\n\t/home/forensics/attack_range/modules/ansible/roles/purplesharp/files/././configs/purplesharp_playbook_T1003.pb\n\t/home/forensics/attack_range/modules/ansible/roles/purplesharp/././configs/purplesharp_playbook_T1003.pb\n\t/home/forensics/attack_range/modules/ansible/roles/purplesharp/tasks/files/././configs/purplesharp_playbook_T1003.pb\n\t/home/forensics/attack_range/modules/ansible/roles/purplesharp/tasks/././configs/purplesharp_playbook_T1003.pb\n\t/home/forensics/attack_range/modules/ansible/files/././configs/purplesharp_playbook_T1003.pb\n\t/home/forensics/attack_range/modules/ansible/././configs/purplesharp_playbook_T1003.pb on the Ansible Controller.\nIf you are using a module and expect the file to exist on the remote, see the remote_src option", "src": "././configs/purplesharp_playbook_T1003.pb"}
TrashMaster112 commented 10 months ago

Additionally I tried an absolute path vs the relative one referenced in run_simulation_playbook.yml with no success.