Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added Cobalt Strike auth module, added http basic auth module with TOR support and timeout #8

Open
wants to merge 17 commits into
base: master
Choose a base branch
from

Conversation

Und3rf10w
Copy link

@Und3rf10w Und3rf10w commented Apr 25, 2022

  • Added a module to test Cobalt Strike teamserver authentication
  • Added a module to support http basic auth with an optional tor support. This also included adding a specifiable timeout option to the base engine.
    • The timeout option defaults to 8 seconds. By default a lambda timeout is 3 seconds. I have increased the default timeout
    • This should be a non-breaking change to other plugins.
    • Likely should force a check on the basic_auth module that if --tor is passed, the timeout value should be >= 40
      • This is required because the tor binary needs to set up its connection
      • A statically linked tor binary (likely out-of-date) is provided. You may want to enforce having a user provide their own, or have a job that compiles a fresh statically linked from the latest release.
    • The current maximum value is 300 900 (15 minutes). There is not a check for this. Providing a value greater than this, or lower than -1 may cause a crash.
      • It is suggested that a suggested_timeout property is added to plugins to help account for this
  • I can't remember why changes were done to the okta and gmail plugins. You may want to review those.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant