Adding Drupal CMS version & plugin scan attack - Githubissues

tklab-tud / ID2T

Official ID2T repository. ID2T creates labeled IT network datasets that contain user defined synthetic attacks.

MIT License

58 stars 23 forks source link

Adding Drupal CMS version & plugin scan attack #123

Closed Abdiiir closed 8 months ago

Abdiiir commented 1 year ago

Added common functionalities to BaseAttack.

A function to generate unique random IPv4 address within the specified IP network
A function to generate and track ephemeral port for convos.

Added drupal CMS version and plugin scan attack.

Itget_unique_random_ipv4_from_ip_network() is used to get a unique random IPv4 address within the specified IP network of the victim server,
generate_ephemeral_ports() is used to generate ephemeral ports for the convo.

This two features contribute to the "realness" of the attack traffic generated.

Supersedes #118

Abdiiir commented 1 year ago

Hi @pepper-jk, I implemented the changes from #118 in this PR - if you find the time to have a look