Migrate the SMB exploiter to a plugin

[mssalvatore]

Description

Replace the hard-coded SMB exploiter with a new and improved, fully tested, SMB exploiter plugin with high code quality.

Use the HadoopExploiter as a template.

Merge PRs to 2952-smb-exploiter-plugin.

Tasks

• options (pydantic) (0d) @ilija-lazoroski
  • determine what options SMB should have
  • create a pydantic model for SMB options
• Create plugin manifest (0d) @cakekoa
• Create config schema (0d) @cakekoa
• Create a Pipfile for dependencies(0d) @cakekoa
• Add a jenkins job to build the plugin (0d) @cakekoa
• plugin.py (0d) @cakekoa
• command builder (0d) @shreyamalviya
• exploiter (0d) @cakekoa
• exploit client (0d) @ilija-lazoroski @cakekoa
  • Don't forget to add MITRE tags
• Update the island build jobs on Jenkins to copy the artifacts from the SMB plugin build job (0d)
• Update ETE test configurations (0d) @shreyamalviya
• Remove the hard-coded SMB plugin (0d) @ilija-lazoroski
• Check preconditions in plugin.py (0d) @cakekoa
• Modify SMB command builder to include the OTP (moved here from Implement OTP compliance on the Agent #3077) (0.25d) @cakekoa
• Extra and ETE testing (0d)
• Remove generate_brute_force_credentials() from vulture_allowlist.py
• Determine if use_kerberos is of any use @shreyamalviya

[shreyamalviya]

As suspected, we can't set Kerberos auth to true with our existing code.

Relevant Agent logs with Kerberos auth set to true:

2023-03-14 07:43:33,197 [3470:ExploiterThread-01:INFO] smbexec._exploit.146: Successfully logged in to 10.2.2.14 using SMB with username, password
2023-03-14 07:43:33,197 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a ExploitationEvent event to all_events_topic
2023-03-14 07:43:33,197 [3470:ExploiterThread-01:DEBUG] agent_event_forwarder.send_event.46: Adding event of type ExploitationEvent to the queue to send to the Island
2023-03-14 07:43:33,197 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a ExploitationEvent event to ExploitationEvent-type
2023-03-14 07:43:33,197 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a ExploitationEvent event to attack-t1021-tag
2023-03-14 07:43:33,197 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a ExploitationEvent event to attack-t1110-tag
2023-03-14 07:43:33,197 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a ExploitationEvent event to smbexec-exploiter-tag
2023-03-14 07:43:33,197 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a ExploitationEvent event to attack-t1210-tag
2023-03-14 07:43:33,201 [3470:ExploiterThread-01:DEBUG] smbexec._get_rpc_connection.217: Can't connect to SCM on exploited machine {'icmp': True,
 'ip': '10.2.2.14',
 'operating_system': 'windows',
 'ports_status': {'tcp_ports': {'22': {'banner': None,
                                       'port': 22,
                                       'protocol': 'unknown',
                                       'service': 'unknown',
                                       'status': 'closed'},
                                '445': {'banner': '',
                                        'port': 445,
                                        'protocol': 'unknown',
                                        'service': 'unknown',
                                        'status': 'open'}},
                  'udp_ports': {}}}, port 139 : Cannot request session (Called Name:10.2.2.14)
2023-03-14 07:43:33,207 [3470:ExploiterThread-01:CRITICAL] ccache.loadFile.578: CCache file is not found. Skipping...
2023-03-14 07:43:33,207 [3470:ExploiterThread-01:DEBUG] ccache.loadFile.579: The specified path is not correct or the KRB5CCNAME environment variable is not defined
2023-03-14 07:43:33,208 [3470:ExploiterThread-01:DEBUG] smbexec._get_rpc_connection.217: Can't connect to SCM on exploited machine {'icmp': True,
 'ip': '10.2.2.14',
 'operating_system': 'windows',
 'ports_status': {'tcp_ports': {'22': {'banner': None,
                                       'port': 22,
                                       'protocol': 'unknown',
                                       'service': 'unknown',
                                       'status': 'closed'},
                                '445': {'banner': '',
                                        'port': 445,
                                        'protocol': 'unknown',
                                        'service': 'unknown',
                                        'status': 'open'}},
                  'udp_ports': {}}}, port 445 : Empty Domain not allowed in Kerberos
2023-03-14 07:43:33,208 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a PropagationEvent event to all_events_topic
2023-03-14 07:43:33,208 [3470:ExploiterThread-01:DEBUG] agent_event_forwarder.send_event.46: Adding event of type PropagationEvent to the queue to send to the Island
2023-03-14 07:43:33,208 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a PropagationEvent event to PropagationEvent-type
2023-03-14 07:43:33,208 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a PropagationEvent event to attack-t1569-tag
2023-03-14 07:43:33,209 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a PropagationEvent event to attack-t1021-tag
2023-03-14 07:43:33,209 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a PropagationEvent event to attack-t1105-tag
2023-03-14 07:43:33,209 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a PropagationEvent event to smbexec-exploiter-tag
2023-03-14 07:43:33,209 [3470:ExploiterThread-01:DEBUG] pypubsub_agent_event_queue._publish_event.55: Publishing a PropagationEvent event to attack-t1210-tag
2023-03-14 07:43:33,209 [3470:ExploiterThread-01:WARNING] smbexec._exploit_host.86: Failed to establish an RPC connection over SMB
2023-03-14 07:43:33,209 [3470:ExploiterThread-01:INFO] propagator._process_exploit_attempts.229: Successfully exploited (but did not propagate to) {'icmp': True,
 'ip': '10.2.2.14',
 'operating_system': 'windows',
 'ports_status': {'tcp_ports': {'22': {'banner': None,
                                       'port': 22,
                                       'protocol': 'unknown',
                                       'service': 'unknown',
                                       'status': 'closed'},
                                '445': {'banner': '',
                                        'port': 445,
                                        'protocol': 'unknown',
                                        'service': 'unknown',
                                        'status': 'open'}},
                  'udp_ports': {}}} using SMBExploiter

Removed in #3106.