Skip to content

Conversation

shreyamalviya
Copy link
Contributor

What does this PR do?

Fixes #1075

PR Checklist

  • Have you added an explanation of what your changes do and why you'd like to include them?
  • Is the TravisCI build passing?
  • Was the CHANGELOG.md updated to reflect the changes?
  • Was the documentation framework updated to reflect the changes?

Testing Checklist

  • Added relevant unit tests?
  • Have you successfully tested your changes locally? Elaborate:

    Tested by {Running the Monkey locally with relevant config/running Island/...}

  • If applicable, add screenshots or log transcripts of the feature working

Explain Changes

Are the commit messages enough? If not, elaborate.

@@ -164,9 +165,10 @@ def start(self):
"monkey_commandline": inner_monkey_cmdline,
}

monkey_cmdline_split = shlex.split(monkey_cmdline)
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why do we need to split this up? Are you sure that without shell=True this works? Can the command still find environmental variables like %TEMP% or $HOME?

shreyamalviya and others added 14 commits April 28, 2021 10:44
Added comments to ignore some because:

"Python uses the Mersenne Twister as the core generator. However, being completely
deterministic, it is not suitable for all purposes, and is completely unsuitable for
cryptographic purposes. Because the generator is deterministic this means attackers
can predict future values given a sufficient amount of previous values.

Normal random use is acceptable if the relevant code is not used for security or
cryptographic purposes."
(Introduces a DUO116 warning)
- monkey/infection_monkey/dropper.py
- monkey/infection_monkey/system_info/windows_info_collector.py
- monkey/infection_monkey/utils/windows/users.py
- monkey/infection_monkey/windows_upgrader.py
@codecov
Copy link

codecov bot commented Apr 28, 2021

Codecov Report

Merging #1124 (e5935e4) into develop (0cb8fc8) will decrease coverage by 0.01%.
The diff coverage is 7.54%.

Impacted file tree graph

@@             Coverage Diff             @@
##           develop    #1124      +/-   ##
===========================================
- Coverage    28.73%   28.71%   -0.02%     
===========================================
  Files          410      410              
  Lines        12869    12877       +8     
===========================================
  Hits          3698     3698              
- Misses        9171     9179       +8     
Impacted Files Coverage Δ
monkey/infection_monkey/control.py 21.81% <0.00%> (ø)
monkey/infection_monkey/dropper.py 0.00% <0.00%> (ø)
monkey/infection_monkey/exploit/drupal.py 0.00% <0.00%> (ø)
monkey/infection_monkey/exploit/hadoop.py 0.00% <0.00%> (ø)
monkey/infection_monkey/exploit/shellshock.py 0.00% <0.00%> (ø)
monkey/infection_monkey/exploit/struts2.py 0.00% <ø> (ø)
monkey/infection_monkey/exploit/weblogic.py 0.00% <0.00%> (ø)
monkey/infection_monkey/network/tcp_scanner.py 0.00% <0.00%> (ø)
...onkey/post_breach/actions/clear_command_history.py 0.00% <0.00%> (ø)
...key/post_breach/actions/communicate_as_new_user.py 0.00% <ø> (ø)
... and 11 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0cb8fc8...e5935e4. Read the comment docs.

@mssalvatore mssalvatore merged commit c67ed63 into develop Apr 28, 2021
@mssalvatore mssalvatore deleted the dlint branch April 28, 2021 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Add dlint pre-commit and CI checks
3 participants