Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

WannaCry and SambaCry #104

Merged
merged 11 commits into from Jun 4, 2017
Merged

WannaCry and SambaCry #104

merged 11 commits into from Jun 4, 2017

Commits on May 31, 2017

  1. pythom/smb - Additional config options 

    - Use config to change OS, LAN Manager, Domain and Servername
    @phibos
    phibos committed May 31, 2017
    Configuration menu
    Copy the full SHA
    2285b5d View commit details
    Browse the repository at this point in the history

  2. pythom/smb - let dionaea talk to WannaCry, MS17-010 honeypot and coll… 

    …ect Double Pulsar payload

Merged from gento/dionaea@d17ebf3
    @phibos
    phibos committed May 31, 2017
    Configuration menu
    Copy the full SHA
    5191862 View commit details
    Browse the repository at this point in the history

  3. pythom/smb - let dionaea understand DoublePulsar's opcode and commands 

    - dionaea will interpret the inbound DoublePulsar opcode and commands (e.g. ping, exec, kill)
- make sure dionaea store only the final payload/executable as the collection on disk

Merged from gento/dionaea@17da8e1
    @phibos
    phibos committed May 31, 2017
    Configuration menu
    Copy the full SHA
    52d904d View commit details
    Browse the repository at this point in the history

  4. pythom/smb - Dionaea will detect WannaCry and CVE-2017-7494 Samba SMB… 

    … RCE wormable exploit (SambaCry) in once

- dionaea will dance with the wormable Samba RCE exploit, and capture the payload
- improve the detection flow to capture WannaCry and SambaCry together
- add new classes : SMB_Trans2_FIND_FIRST2_Response, SMB_Close_Response

Parts merged from gento/dionaea@39d64ab
    @phibos
    phibos committed May 31, 2017
    Configuration menu
    Copy the full SHA
    2620738 View commit details
    Browse the repository at this point in the history

  5. pythom/smb - New config option to set OS_TYPE

    @phibos
    phibos committed May 31, 2017
    Configuration menu
    Copy the full SHA
    663c7d1 View commit details
    Browse the repository at this point in the history

  6. conf - Update config example for smb service

    @phibos
    phibos committed May 31, 2017
    Configuration menu
    Copy the full SHA
    fa5ad4a View commit details
    Browse the repository at this point in the history

Commits on Jun 1, 2017

  1. python/smb - Dump files to disk

    @phibos
    phibos committed Jun 1, 2017
    Configuration menu
    Copy the full SHA
    b35ff38 View commit details
    Browse the repository at this point in the history

Commits on Jun 2, 2017

  1. python/smb - Remove debug print()

    @phibos
    phibos committed Jun 2, 2017
    Configuration menu
    Copy the full SHA
    84cd6b8 View commit details
    Browse the repository at this point in the history

  2. python/smb - Fix null termination

    @phibos
    phibos committed Jun 2, 2017
    Configuration menu
    Copy the full SHA
    0037758 View commit details
    Browse the repository at this point in the history

  3. python/smb - Load shares from config

    @phibos
    phibos committed Jun 2, 2017
    Configuration menu
    Copy the full SHA
    547d0d5 View commit details
    Browse the repository at this point in the history

  4. conf - Update config example for smb service

    @phibos
    phibos committed Jun 2, 2017
    Configuration menu
    Copy the full SHA
    d4ca10a View commit details
    Browse the repository at this point in the history