SOCBED v1.3.4

Fixes:

• Update binutils to prevent version conflicts on Attacker VM

SOCBED v1.3.3

Fixes:

• Update deprecating versions for GitHub actions retry and checkout

SOCBED v1.3.2

Fixes:

• Update Ansible script URL due to change in Ansible repositories
• Increase timeout for Ansible task spark

Misc:

• Use newer Windows 10 version by default (22H2)
• Add tox to CI requirements in docs

SOCBED v1.3.1

Fixes:

• Download Kali public key during setup
• Explicitly set time zone to CET on the Client to fix NTP time sync
• Include nmap attacks in system tests

SOCBED v1.3.0

Features:

• Add nmap attacks
• Add grc (color output)
• Add tab completion for attack options

Fixes:

• Use checkout@v3 instead of v2 to fix pipelines

Misc:

• Upgrade paramiko from 2.10.1 to 2.11.0
• Cleanup code
  • Impose PEP 8 in various files
  • Remove unused imports in various files
  • Use f-string instead of older str.format() syntax where appropriate

SOCBED v1.2.0

Features:

• Add user emulation code to repo (was encapsulated in a hardly editable PEX file before)
• Add support for keyboard interrupt (Ctrl-C) in attackconsole while attacks are running
• Show executed commands in attackconsole
• Change execute_malware attack to run exe as current user instead of SYSTEM

Fixes:

• Update deprecated Kali image URL and switch to version 2021.4a (from 2021.4)
• Fix race condition in attacks system test (sometimes resulted in failed tests)
• Fix kill_reverse_connection attack to only kill actual meterpreter binaries (not the browser)
• Increase system test timeouts

Misc:

• Add Python version to requirements
• Add longtest tox marker to unit tests that take >10 seconds to complete
• Improve some code formatting and add license where missing

SOCBED v1.1.7

• [attackconsole] Add KeyboardInterrupt propagation to remote host and continuous console output
• [attackconsole] Add more specific output on timeout errors
• [pipeline] Increase certain runner timeout values
• [documentation] Improve description of Windows ISO download

SOCBED v1.1.6

• Increase timeout for certain attacker provisioning steps to prevent cancellation on slower machines
• Increase timeout for systests running on the dev pipeline to prevent cancellation on slower machines

SOCBED v1.1.5

• Add systest to check if userbehavior is running
• Include logging systests in default test runs (including nightly build)
• Improve error handling of attack console
• Update paramiko version
• Update license
• Update some comments

SOCBED v1.1.4

• Fix occasionally failing downloads from artifacts.elastic.co
• Increase Packer's "boot_keygroup_interval" on the Attacker to avoid build errors on slower runners
• Increase workflow timeout values to prevent unnecessary cancellation
• Fix minor mistakes in the runner setup documentation
• Update network documentation
• Update Ansible from 2.8.0 to 5.1.0
• Delete deprecated files