Description

Replace the hard-coded SMB exploiter with a new and improved, fully tested, SMB exploiter plugin with high code quality.

Use the HadoopExploiter as a template.

Merge PRs to 2952-smb-exploiter-plugin.

Tasks

• options (pydantic) (0d) @ilija-lazoroski
  • determine what options SMB should have
  • create a pydantic model for SMB options
• Create plugin manifest (0d) @cakekoa
• Create config schema (0d) @cakekoa
• Create a Pipfile for dependencies(0d) @cakekoa
• Add a jenkins job to build the plugin (0d) @cakekoa
• plugin.py (0d) @cakekoa
• command builder (0d) @shreyamalviya
• exploiter (0d) @cakekoa
• exploit client (0d) @ilija-lazoroski @cakekoa
  • Don't forget to add MITRE tags
• Update the island build jobs on Jenkins to copy the artifacts from the SMB plugin build job (0d)
• Update ETE test configurations (0d) @shreyamalviya
• Remove the hard-coded SMB plugin (0d) @ilija-lazoroski
• Check preconditions in plugin.py (0d) @cakekoa
• Modify SMB command builder to include the OTP (moved here from Implement OTP compliance on the Agent #3077) (0.25d) @cakekoa
• Extra and ETE testing (0d)
• Remove generate_brute_force_credentials() from vulture_allowlist.py
• Determine if use_kerberos is of any use @shreyamalviya