-
Notifications
You must be signed in to change notification settings - Fork 807
Closed
Description
Infection Monkey stores very sensitive information (passwords, NTLM hashes, SSH keys, etc.) that could give someone access to large portions of the network. Further more, Infection Monkey allows you to configure it to run arbitrary scripts or executables on any system it can breach. This means Infection Monkey is a very dangerous tool for someone malicious to be able to access. For this reason, we should not allow users to configure unsecured Monkey Islands.
The "I want anyone to access the island" option should be removed.
Tasks
- Remove StandardEnvironment in the agent and fix unit tests. (0d) - @shreyamalviya
- Remove "I want anyone to access" in the frontend (button and
setNoAuth()
). (0d) - @shreyamalviya - Fix blackbox tests to use credentials. (0d) @ilija-lazoroski
- Thorough testing. (0d)