Context

The agent's master component needs to be able to determine whether or not a plugin is compatible with the target. Some examples are:

• The WMI exploiter can only be used to attack a target running Windows
• The mimikatz credentials collector can only be used if the host OS is Windows

Descriptions

I often think we'd be better off with a GraphQL API. Maybe for Infection Monkey 3.0 🤷‍♂️

In order for the master to determine whether or not a plugin is compatible with a given OS, it needs access to the plugin's manifest. Right now, only the puppet (via the plugin registry) has access to the plugin's manifest. Since plugins could be large, we don't want the master to download the entire plugin. Add a new endpoint that allows only a plugin manifest to be requested from the Island.

Tasks

• Add a /api/agent-plugins/<string:plugin_type>/<string:name>/manifest endpoint that returns only the plugin's manifest. (0d) @ilija-lazoroski