Skip to content

Conversation

@Und3rf10w
Copy link

@Und3rf10w Und3rf10w commented Apr 25, 2022

  • Added a module to test Cobalt Strike teamserver authentication
  • Added a module to support http basic auth with an optional tor support. This also included adding a specifiable timeout option to the base engine.
    • The timeout option defaults to 8 seconds. By default a lambda timeout is 3 seconds. I have increased the default timeout
    • This should be a non-breaking change to other plugins.
    • Likely should force a check on the basic_auth module that if --tor is passed, the timeout value should be >= 40
      • This is required because the tor binary needs to set up its connection
      • A statically linked tor binary (likely out-of-date) is provided. You may want to enforce having a user provide their own, or have a job that compiles a fresh statically linked from the latest release.
    • The current maximum value is 300 900 (15 minutes). There is not a check for this. Providing a value greater than this, or lower than -1 may cause a crash.
      • It is suggested that a suggested_timeout property is added to plugins to help account for this
  • I can't remember why changes were done to the okta and gmail plugins. Other plugins (gmail, okta) fell victim to the linter, so those changes are included as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant