"description":kwargs.get("description",None),# Generic description for this attack. Set by the attack
"description":kwargs.get("description",None),# Generic description for this attack. Set by the attack
"situation_description":kwargs.get("situation_description",None),# Description for the situation this attack was run in. Set by the plugin or attacker emulation
"situation_description":kwargs.get("situation_description",None),# Description for the situation this attack was run in. Set by the plugin or attacker emulation
"countermeasure":kwargs.get("countermeasure",None),# Set by the attack
"countermeasure":kwargs.get("countermeasure",None),# Set by the attack
"description":kwargs.get("description",None),# Generic description for this attack. Set by the attack
"description":kwargs.get("description",None),# Generic description for this attack. Set by the attack
"situation_description":kwargs.get("situation_description",None),# Description for the situation this attack was run in. Set by the plugin or attacker emulation
"situation_description":kwargs.get("situation_description",None),# Description for the situation this attack was run in. Set by the plugin or attacker emulation
"countermeasure":kwargs.get("countermeasure",None),# Set by the attack
"countermeasure":kwargs.get("countermeasure",None),# Set by the attack
self.attack_logger.vprint(f"{CommandlineColors.FAIL}Failed getting operation data. We just have: {output} from get_operation_by_id{CommandlineColors.ENDC}",0)
self.attack_logger.vprint(f"{CommandlineColors.FAIL}Failed getting operation data. We just have: {outp} from get_operation_by_id{CommandlineColors.ENDC}",0)
The file {{ e.file_name }} is dropped to the target {{ e.target }}.
~~~~~~~~~~~~
{% endif %}
{% endif %} {# end attack_step #}
{% if e.type is eq("execute_payload") %}
{% if e.type is eq("dropping_file") %}
Executing payload on target
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Dropping file to target
At {{ e.timestamp }}
_______________________
The command {{ e.command }} is used to start a file on the target {{ e.target }}.
At {{ e.timestamp }}
{% endif %}
The file {{ e.file_name }} is dropped to the target {{ e.target }}.
{% if e.type is eq("narration") %}
{% endif %}
{{ e.text }}
{% if e.type is eq("execute_payload") %}
{% endif %}
{% if e.sub_type is eq("metasploit") %}
Executing payload on target
Metasploit attack {{ e.name }}
___________________________
~~~~~~~~~~~~~~~~~~~~~~~~~~
At {{ e.timestamp }}
Tactics: {{ e.tactics }}
The command {{ e.command }} is used to start a file on the target {{ e.target }}.
Tactics ID: {{ e.tactics_id }}
{% endif %}
Hunting Tag: {{ e.hunting_tag}}
{% if e.type is eq("narration") %}
At {{ e.timestamp }} a Metasploit command {{ e.name }} was used to attack {{ e.target }} from {{ e.source }}.
{{ e.text }}
{{ e.description }}
{% endif %}
{% if e.metasploit_command is string() %}
{% if e.sub_type is eq("metasploit") %}
Metasploit command: {{ e.metasploit_command }}
{% endif %}
Metasploit attack {{ e.name }}
{% if e.situation_description is string() %}
______________________________
Situation: {{ e.situation_description }}
+ Tactics: {{ e.tactics }}
{% endif %}
+ Tactics ID: {{ e.tactics_id }}
{% if e.countermeasure is string() %}
+ Hunting Tag: {{ e.hunting_tag}}
Countermeasure: {{ e.countermeasure }}
+ At {{ e.timestamp }} a Metasploit command {{ e.name }} was used to attack {{ e.target }} from {{ e.source }}.
{% endif %}
+ Description: {{ e.description }}
{% endif %}
{% if e.metasploit_command is string() %}
{% if e.sub_type is eq("kali") %}
+ Metasploit command: {{ e.metasploit_command }}
Kali attack {{ e.name }}
{% endif %}
~~~~~~~~~~~~~~~~~~~~~~~~~~
{% if e.situation_description is string() %}
Tactics: {{ e.tactics }}
+ Situation: {{ e.situation_description }}
Tactics ID: {{ e.tactics_id }}
{% endif %}
Hunting Tag: {{ e.hunting_tag}}
{% if e.countermeasure is string() %}
At {{ e.timestamp }} a Kali command {{ e.kali_name }} was used to attack {{ e.target }} from {{ e.source }}.
+ Countermeasure: {{ e.countermeasure }}
{{ e.description }}
{% endif %}
{% if e.kali_command is string() %}
{% if e.result is string() %}
Kali command: {{ e.kali_command }}
Attack result::
{% endif %}
{% if e.situation_description is string() %}
{{ e.result }}
Situation: {{ e.situation_description }}
{% endif %}
{% endif %}
{% if e.result is iterable() %}
{% if e.countermeasure is string() %}
Attack result::
Countermeasure: {{ e.countermeasure }}
{% endif %}
{% for item in e.result %}
{% endif %}
{{ item|trim()|indent(4) }}
{% if e.sub_type is eq("caldera") %}
{% endfor %}
Caldera attack {{ e.name }}
{% endif %}
~~~~~~~~~~~~~~~~~~~~~~~~~~
{% endif %}
Tactics: {{ e.tactics }}
{% if e.sub_type is eq("kali") %}
Tactics ID: {{ e.tactics_id }}
Hunting Tag: {{ e.hunting_tag}}
Kali attack {{ e.name }}
At {{ e.timestamp }} a Caldera ability {{ e.ability_id }}/"{{ e.name }}" was used to attack the group {{ e.target_group }} from {{ e.source }}.
________________________
{{ e.description }}
+ Tactics: {{ e.tactics }}
{% if e.situation_description is string() %}
+ Tactics ID: {{ e.tactics_id }}
Situation: {{ e.situation_description }}
+ Hunting Tag: {{ e.hunting_tag}}
{% endif %}
+ At {{ e.timestamp }} a Kali command {{ e.kali_name }} was used to attack {{ e.target }} from {{ e.source }}.
{% if e.countermeasure is string() %}
+ Description: {{ e.description }}
Countermeasure: {{ e.countermeasure }}
{% if e.kali_command is string() %}
{% endif %}
+ Kali command: {{ e.kali_command }}
{% endif %}
{% endif %}
{% endif %} {# event equal start #}
{% if e.situation_description is string() %}
+ Situation: {{ e.situation_description }}
{% endif %}
{% if e.countermeasure is string() %}
+ Countermeasure: {{ e.countermeasure }}
{% endif %}
{% if e.result is string() %}
Attack result::
{{ e.result }}
{% endif %}
{% if e.result is iterable() %}
Attack result::
{% for item in e.result %}
{{ item|trim()|indent(4) }}
{% endfor %}
{% endif %}
{% endif %}
{% if e.sub_type is eq("caldera") %}
Caldera attack {{ e.name }}
___________________________
+ Tactics: {{ e.tactics }}
+ Tactics ID: {{ e.tactics_id }}
+ Hunting Tag: {{ e.hunting_tag}}
+ At {{ e.timestamp }} a Caldera ability {{ e.ability_id }}/"{{ e.name }}" was used to attack the group {{ e.target_group }} from {{ e.source }}.
+ Description: {{ e.description }}
{% if e.situation_description is string() %}
+ Situation: {{ e.situation_description }}
{% endif %}
{% if e.countermeasure is string() %}
+ Countermeasure: {{ e.countermeasure }}
{% endif %}
{% if e.result is string() %}
Attack result::
{{ e.result }}
{% endif %}
{% if e.result is iterable() %}
Attack result::
{% for item in e.result %}
{{ item|trim()|indent(4) }}
{% endfor %}
{% endif %}
{% endif %}
{% endif %} {# event equal start #}
{% endfor %}
{% endfor %}
Tools
Tools
-----
-----
{% for e in events %}
{% for e in events %}
{% if e.event is eq("start") %}
{% if e.event is eq("start") %}
{% if e.type is eq("build") %}
{% if e.type is eq("build") %}
Building tool {{ e.filename }}
Building tool {{ e.filename }}
~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The file {{ e.filename }} is built
The file {{ e.filename }} is built
{% if e.for_step %}
{% if e.for_step %}
It will be used in Step {{ e.for_step }}
It will be used in Step {{ e.for_step }}
{% endif %}
{% endif %}
Build time is between {{ e.timestamp }} and {{ e.timestamp_end }}
Build time is between {{ e.timestamp }} and {{ e.timestamp_end }}
{% if e.dl_uri is string() %}
{% if e.dl_uri is string() %}
Built from source downloaded from {{ e.dl_uri }}
Built from source downloaded from {{ e.dl_uri }}
{% endif %}
{% endif %}
{% if e.dl_uris %}
{% if e.dl_uris %}
Built from sources downloaded from
Built from sources downloaded from
{% for i in e.dl_uris %}
{% for i in e.dl_uris %}
* {{ i }}
* {{ i }}
{% endfor %}
{% endfor %}
{% endif %}
{% endif %}
{% if e.payload is string() %}
{% if e.payload is string() %}
The attack tool uses a Meterpreter payload. The payload is {{ e.payload }}. The payload is built for the {{ e.platform }} platform and the {{ e.architecture }} architecture.
The attack tool uses a Meterpreter payload. The payload is {{ e.payload }}. The payload is built for the {{ e.platform }} platform and the {{ e.architecture }} architecture.
The settings for lhost and lport are {{ e.lhost }}/{{ e.lport }}.
The settings for lhost and lport are {{ e.lhost }}/{{ e.lport }}.
{% endif %}
{% endif %}
{% if e.encoding is string() %}
{% if e.encoding is string() %}
The file was encoded using {{ e.encoding }} after compilation.
The file was encoded using {{ e.encoding }} after compilation.
{% endif %}
{% endif %}
{% if e.encoded_filename is string() %}
{% if e.encoded_filename is string() %}
The encoded version is named {{ e.encoded_filename }}.
The encoded version is named {{ e.encoded_filename }}.
{% endif %}
{% endif %}
{% if e.SRDI_conversion %}
{% if e.SRDI_conversion %}
The attack tool was converted to position independent shellcode. See: https://github.com/monoxgas/sRDI
The attack tool was converted to position independent shellcode. See: https://github.com/monoxgas/sRDI
Thorsten Sick
3 years ago