cyanide-framework 1.0.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (495) hide show
  1. cyanide/__init__.py +12 -0
  2. cyanide/assets/branding/logo.png +0 -0
  3. cyanide/assets/branding/logo.txt +13 -0
  4. cyanide/assets/branding/name.png +0 -0
  5. cyanide/assets/models/cyanideML.pkl +0 -0
  6. cyanide/assets/models/knowledge_base.pkl +0 -0
  7. cyanide/configs/app.yaml +207 -0
  8. cyanide/configs/profiles/debian/base.yaml +108 -0
  9. cyanide/configs/profiles/debian/static.yaml +206 -0
  10. cyanide/configs/profiles/rhel/base.yaml +122 -0
  11. cyanide/configs/profiles/rhel/rootfs/bin/bash +0 -0
  12. cyanide/configs/profiles/rhel/rootfs/bin/cat +0 -0
  13. cyanide/configs/profiles/rhel/rootfs/bin/chmod +0 -0
  14. cyanide/configs/profiles/rhel/rootfs/bin/chown +0 -0
  15. cyanide/configs/profiles/rhel/rootfs/bin/cp +0 -0
  16. cyanide/configs/profiles/rhel/rootfs/bin/date +0 -0
  17. cyanide/configs/profiles/rhel/rootfs/bin/dd +0 -0
  18. cyanide/configs/profiles/rhel/rootfs/bin/df +0 -0
  19. cyanide/configs/profiles/rhel/rootfs/bin/dmesg +0 -0
  20. cyanide/configs/profiles/rhel/rootfs/bin/echo +0 -0
  21. cyanide/configs/profiles/rhel/rootfs/bin/egrep +0 -0
  22. cyanide/configs/profiles/rhel/rootfs/bin/false +0 -0
  23. cyanide/configs/profiles/rhel/rootfs/bin/fgrep +0 -0
  24. cyanide/configs/profiles/rhel/rootfs/bin/grep +0 -0
  25. cyanide/configs/profiles/rhel/rootfs/bin/gunzip +0 -0
  26. cyanide/configs/profiles/rhel/rootfs/bin/gzip +0 -0
  27. cyanide/configs/profiles/rhel/rootfs/bin/kill +0 -0
  28. cyanide/configs/profiles/rhel/rootfs/bin/ln +0 -0
  29. cyanide/configs/profiles/rhel/rootfs/bin/ls +0 -0
  30. cyanide/configs/profiles/rhel/rootfs/bin/mkdir +0 -0
  31. cyanide/configs/profiles/rhel/rootfs/bin/more +0 -0
  32. cyanide/configs/profiles/rhel/rootfs/bin/mount +0 -0
  33. cyanide/configs/profiles/rhel/rootfs/bin/mv +0 -0
  34. cyanide/configs/profiles/rhel/rootfs/bin/ps +0 -0
  35. cyanide/configs/profiles/rhel/rootfs/bin/rm +0 -0
  36. cyanide/configs/profiles/rhel/rootfs/bin/rmdir +0 -0
  37. cyanide/configs/profiles/rhel/rootfs/bin/sed +0 -0
  38. cyanide/configs/profiles/rhel/rootfs/bin/sh +0 -0
  39. cyanide/configs/profiles/rhel/rootfs/bin/sleep +0 -0
  40. cyanide/configs/profiles/rhel/rootfs/bin/su +0 -0
  41. cyanide/configs/profiles/rhel/rootfs/bin/sync +0 -0
  42. cyanide/configs/profiles/rhel/rootfs/bin/test +0 -0
  43. cyanide/configs/profiles/rhel/rootfs/bin/touch +0 -0
  44. cyanide/configs/profiles/rhel/rootfs/bin/true +0 -0
  45. cyanide/configs/profiles/rhel/rootfs/bin/umount +0 -0
  46. cyanide/configs/profiles/rhel/rootfs/bin/uname +0 -0
  47. cyanide/configs/profiles/rhel/rootfs/bin/zcat +0 -0
  48. cyanide/configs/profiles/rhel/rootfs/boot/grub2/grub.cfg +25 -0
  49. cyanide/configs/profiles/rhel/rootfs/etc/NetworkManager/NetworkManager.conf +5 -0
  50. cyanide/configs/profiles/rhel/rootfs/etc/bashrc +83 -0
  51. cyanide/configs/profiles/rhel/rootfs/etc/crontab +17 -0
  52. cyanide/configs/profiles/rhel/rootfs/etc/default/grub +8 -0
  53. cyanide/configs/profiles/rhel/rootfs/etc/dnf/dnf.conf +6 -0
  54. cyanide/configs/profiles/rhel/rootfs/etc/environment +7 -0
  55. cyanide/configs/profiles/rhel/rootfs/etc/fstab +14 -0
  56. cyanide/configs/profiles/rhel/rootfs/etc/group +30 -0
  57. cyanide/configs/profiles/rhel/rootfs/etc/gshadow +6 -0
  58. cyanide/configs/profiles/rhel/rootfs/etc/hostname +1 -0
  59. cyanide/configs/profiles/rhel/rootfs/etc/hosts +3 -0
  60. cyanide/configs/profiles/rhel/rootfs/etc/hosts.allow +2 -0
  61. cyanide/configs/profiles/rhel/rootfs/etc/hosts.deny +1 -0
  62. cyanide/configs/profiles/rhel/rootfs/etc/locale.conf +1 -0
  63. cyanide/configs/profiles/rhel/rootfs/etc/logrotate.conf +35 -0
  64. cyanide/configs/profiles/rhel/rootfs/etc/logrotate.d/syslog +11 -0
  65. cyanide/configs/profiles/rhel/rootfs/etc/machine-id +1 -0
  66. cyanide/configs/profiles/rhel/rootfs/etc/os-release +17 -0
  67. cyanide/configs/profiles/rhel/rootfs/etc/pam.d/password-auth +29 -0
  68. cyanide/configs/profiles/rhel/rootfs/etc/pam.d/sshd +17 -0
  69. cyanide/configs/profiles/rhel/rootfs/etc/pam.d/system-auth +29 -0
  70. cyanide/configs/profiles/rhel/rootfs/etc/passwd +20 -0
  71. cyanide/configs/profiles/rhel/rootfs/etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release +3 -0
  72. cyanide/configs/profiles/rhel/rootfs/etc/pki/tls/certs/localhost.crt +3 -0
  73. cyanide/configs/profiles/rhel/rootfs/etc/pki/tls/private/localhost.key +3 -0
  74. cyanide/configs/profiles/rhel/rootfs/etc/profile +74 -0
  75. cyanide/configs/profiles/rhel/rootfs/etc/profile.d/aliases.sh +16 -0
  76. cyanide/configs/profiles/rhel/rootfs/etc/profile.d/lang.sh +3 -0
  77. cyanide/configs/profiles/rhel/rootfs/etc/redhat-release +1 -0
  78. cyanide/configs/profiles/rhel/rootfs/etc/resolv.conf +4 -0
  79. cyanide/configs/profiles/rhel/rootfs/etc/rhsm/rhsm.conf +34 -0
  80. cyanide/configs/profiles/rhel/rootfs/etc/rsyslog.conf +8 -0
  81. cyanide/configs/profiles/rhel/rootfs/etc/security/limits.conf +43 -0
  82. cyanide/configs/profiles/rhel/rootfs/etc/selinux/config +2 -0
  83. cyanide/configs/profiles/rhel/rootfs/etc/shadow +20 -0
  84. cyanide/configs/profiles/rhel/rootfs/etc/ssh/ssh_config +12 -0
  85. cyanide/configs/profiles/rhel/rootfs/etc/ssh/ssh_host_ecdsa_key.pub +2 -0
  86. cyanide/configs/profiles/rhel/rootfs/etc/ssh/ssh_host_ed25519_key.pub +1 -0
  87. cyanide/configs/profiles/rhel/rootfs/etc/ssh/ssh_host_rsa_key.pub +5 -0
  88. cyanide/configs/profiles/rhel/rootfs/etc/ssh/sshd_config +103 -0
  89. cyanide/configs/profiles/rhel/rootfs/etc/sudoers +35 -0
  90. cyanide/configs/profiles/rhel/rootfs/etc/sudoers.d/10-wheel +1 -0
  91. cyanide/configs/profiles/rhel/rootfs/etc/sysconfig/clock +2 -0
  92. cyanide/configs/profiles/rhel/rootfs/etc/sysconfig/crond +1 -0
  93. cyanide/configs/profiles/rhel/rootfs/etc/sysconfig/network +3 -0
  94. cyanide/configs/profiles/rhel/rootfs/etc/sysconfig/network-scripts/ifcfg-eth0 +19 -0
  95. cyanide/configs/profiles/rhel/rootfs/etc/sysconfig/network-scripts/ifcfg-lo +14 -0
  96. cyanide/configs/profiles/rhel/rootfs/etc/sysconfig/ntpdate +4 -0
  97. cyanide/configs/profiles/rhel/rootfs/etc/sysctl.conf +19 -0
  98. cyanide/configs/profiles/rhel/rootfs/etc/sysctl.d/99-rhel.conf +2 -0
  99. cyanide/configs/profiles/rhel/rootfs/etc/systemd/system/sshd.service +13 -0
  100. cyanide/configs/profiles/rhel/rootfs/etc/systemd/timesyncd.conf +6 -0
  101. cyanide/configs/profiles/rhel/rootfs/etc/timezone +1 -0
  102. cyanide/configs/profiles/rhel/rootfs/etc/yum.repos.d/redhat.repo +21 -0
  103. cyanide/configs/profiles/rhel/rootfs/root/anaconda-ks.cfg +33 -0
  104. cyanide/configs/profiles/rhel/rootfs/root/notes.txt +4 -0
  105. cyanide/configs/profiles/rhel/rootfs/run/NetworkManager/NetworkManager.pid +1 -0
  106. cyanide/configs/profiles/rhel/rootfs/run/sshd.pid +1 -0
  107. cyanide/configs/profiles/rhel/rootfs/sbin/auditd +0 -0
  108. cyanide/configs/profiles/rhel/rootfs/sbin/firewalld +0 -0
  109. cyanide/configs/profiles/rhel/rootfs/sbin/groupadd +0 -0
  110. cyanide/configs/profiles/rhel/rootfs/sbin/ip +0 -0
  111. cyanide/configs/profiles/rhel/rootfs/sbin/iptables +0 -0
  112. cyanide/configs/profiles/rhel/rootfs/sbin/reboot +0 -0
  113. cyanide/configs/profiles/rhel/rootfs/sbin/shutdown +0 -0
  114. cyanide/configs/profiles/rhel/rootfs/sbin/ss +0 -0
  115. cyanide/configs/profiles/rhel/rootfs/sbin/sshd +0 -0
  116. cyanide/configs/profiles/rhel/rootfs/sbin/systemctl +0 -0
  117. cyanide/configs/profiles/rhel/rootfs/sbin/useradd +0 -0
  118. cyanide/configs/profiles/rhel/rootfs/sbin/usermod +0 -0
  119. cyanide/configs/profiles/rhel/rootfs/sbin/visudo +0 -0
  120. cyanide/configs/profiles/rhel/rootfs/srv/www/html/index.html +1 -0
  121. cyanide/configs/profiles/rhel/rootfs/tmp/dnf_payload_d34b2.tmp +15 -0
  122. cyanide/configs/profiles/rhel/rootfs/tmp/yum_save_tx.2024-03-24.14.32.10.root.cron +3 -0
  123. cyanide/configs/profiles/rhel/rootfs/usr/bin/awk +0 -0
  124. cyanide/configs/profiles/rhel/rootfs/usr/bin/basename +0 -0
  125. cyanide/configs/profiles/rhel/rootfs/usr/bin/bash +0 -0
  126. cyanide/configs/profiles/rhel/rootfs/usr/bin/blkid +0 -0
  127. cyanide/configs/profiles/rhel/rootfs/usr/bin/bzip2 +0 -0
  128. cyanide/configs/profiles/rhel/rootfs/usr/bin/cat +0 -0
  129. cyanide/configs/profiles/rhel/rootfs/usr/bin/chgrp +0 -0
  130. cyanide/configs/profiles/rhel/rootfs/usr/bin/chmod +0 -0
  131. cyanide/configs/profiles/rhel/rootfs/usr/bin/chown +0 -0
  132. cyanide/configs/profiles/rhel/rootfs/usr/bin/cp +0 -0
  133. cyanide/configs/profiles/rhel/rootfs/usr/bin/cut +0 -0
  134. cyanide/configs/profiles/rhel/rootfs/usr/bin/date +0 -0
  135. cyanide/configs/profiles/rhel/rootfs/usr/bin/dd +0 -0
  136. cyanide/configs/profiles/rhel/rootfs/usr/bin/df +0 -0
  137. cyanide/configs/profiles/rhel/rootfs/usr/bin/dirname +0 -0
  138. cyanide/configs/profiles/rhel/rootfs/usr/bin/dmesg +0 -0
  139. cyanide/configs/profiles/rhel/rootfs/usr/bin/dnf +0 -0
  140. cyanide/configs/profiles/rhel/rootfs/usr/bin/du +0 -0
  141. cyanide/configs/profiles/rhel/rootfs/usr/bin/echo +0 -0
  142. cyanide/configs/profiles/rhel/rootfs/usr/bin/ed +0 -0
  143. cyanide/configs/profiles/rhel/rootfs/usr/bin/egrep +0 -0
  144. cyanide/configs/profiles/rhel/rootfs/usr/bin/env +0 -0
  145. cyanide/configs/profiles/rhel/rootfs/usr/bin/false +0 -0
  146. cyanide/configs/profiles/rhel/rootfs/usr/bin/fgrep +0 -0
  147. cyanide/configs/profiles/rhel/rootfs/usr/bin/find +0 -0
  148. cyanide/configs/profiles/rhel/rootfs/usr/bin/free +0 -0
  149. cyanide/configs/profiles/rhel/rootfs/usr/bin/gawk +0 -0
  150. cyanide/configs/profiles/rhel/rootfs/usr/bin/grep +0 -0
  151. cyanide/configs/profiles/rhel/rootfs/usr/bin/groups +0 -0
  152. cyanide/configs/profiles/rhel/rootfs/usr/bin/gunzip +0 -0
  153. cyanide/configs/profiles/rhel/rootfs/usr/bin/gzip +0 -0
  154. cyanide/configs/profiles/rhel/rootfs/usr/bin/head +0 -0
  155. cyanide/configs/profiles/rhel/rootfs/usr/bin/hostname +0 -0
  156. cyanide/configs/profiles/rhel/rootfs/usr/bin/id +0 -0
  157. cyanide/configs/profiles/rhel/rootfs/usr/bin/ip +0 -0
  158. cyanide/configs/profiles/rhel/rootfs/usr/bin/kill +0 -0
  159. cyanide/configs/profiles/rhel/rootfs/usr/bin/less +0 -0
  160. cyanide/configs/profiles/rhel/rootfs/usr/bin/ln +0 -0
  161. cyanide/configs/profiles/rhel/rootfs/usr/bin/locate +0 -0
  162. cyanide/configs/profiles/rhel/rootfs/usr/bin/logger +0 -0
  163. cyanide/configs/profiles/rhel/rootfs/usr/bin/ls +0 -0
  164. cyanide/configs/profiles/rhel/rootfs/usr/bin/lsblk +0 -0
  165. cyanide/configs/profiles/rhel/rootfs/usr/bin/mkdir +0 -0
  166. cyanide/configs/profiles/rhel/rootfs/usr/bin/mktemp +0 -0
  167. cyanide/configs/profiles/rhel/rootfs/usr/bin/more +0 -0
  168. cyanide/configs/profiles/rhel/rootfs/usr/bin/mount +0 -0
  169. cyanide/configs/profiles/rhel/rootfs/usr/bin/mv +0 -0
  170. cyanide/configs/profiles/rhel/rootfs/usr/bin/numfmt +0 -0
  171. cyanide/configs/profiles/rhel/rootfs/usr/bin/pgrep +0 -0
  172. cyanide/configs/profiles/rhel/rootfs/usr/bin/ping +0 -0
  173. cyanide/configs/profiles/rhel/rootfs/usr/bin/pkill +0 -0
  174. cyanide/configs/profiles/rhel/rootfs/usr/bin/printenv +0 -0
  175. cyanide/configs/profiles/rhel/rootfs/usr/bin/ps +0 -0
  176. cyanide/configs/profiles/rhel/rootfs/usr/bin/pwd +0 -0
  177. cyanide/configs/profiles/rhel/rootfs/usr/bin/readlink +0 -0
  178. cyanide/configs/profiles/rhel/rootfs/usr/bin/realpath +0 -0
  179. cyanide/configs/profiles/rhel/rootfs/usr/bin/rm +0 -0
  180. cyanide/configs/profiles/rhel/rootfs/usr/bin/rmdir +0 -0
  181. cyanide/configs/profiles/rhel/rootfs/usr/bin/sed +0 -0
  182. cyanide/configs/profiles/rhel/rootfs/usr/bin/sh +0 -0
  183. cyanide/configs/profiles/rhel/rootfs/usr/bin/sleep +0 -0
  184. cyanide/configs/profiles/rhel/rootfs/usr/bin/sort +0 -0
  185. cyanide/configs/profiles/rhel/rootfs/usr/bin/ss +0 -0
  186. cyanide/configs/profiles/rhel/rootfs/usr/bin/stat +0 -0
  187. cyanide/configs/profiles/rhel/rootfs/usr/bin/stty +0 -0
  188. cyanide/configs/profiles/rhel/rootfs/usr/bin/su +0 -0
  189. cyanide/configs/profiles/rhel/rootfs/usr/bin/sudo +0 -0
  190. cyanide/configs/profiles/rhel/rootfs/usr/bin/sync +0 -0
  191. cyanide/configs/profiles/rhel/rootfs/usr/bin/systemctl +0 -0
  192. cyanide/configs/profiles/rhel/rootfs/usr/bin/tail +0 -0
  193. cyanide/configs/profiles/rhel/rootfs/usr/bin/tar +0 -0
  194. cyanide/configs/profiles/rhel/rootfs/usr/bin/tee +0 -0
  195. cyanide/configs/profiles/rhel/rootfs/usr/bin/test +0 -0
  196. cyanide/configs/profiles/rhel/rootfs/usr/bin/top +0 -0
  197. cyanide/configs/profiles/rhel/rootfs/usr/bin/touch +0 -0
  198. cyanide/configs/profiles/rhel/rootfs/usr/bin/tr +0 -0
  199. cyanide/configs/profiles/rhel/rootfs/usr/bin/true +0 -0
  200. cyanide/configs/profiles/rhel/rootfs/usr/bin/tty +0 -0
  201. cyanide/configs/profiles/rhel/rootfs/usr/bin/umount +0 -0
  202. cyanide/configs/profiles/rhel/rootfs/usr/bin/uname +0 -0
  203. cyanide/configs/profiles/rhel/rootfs/usr/bin/uniq +0 -0
  204. cyanide/configs/profiles/rhel/rootfs/usr/bin/unzip +0 -0
  205. cyanide/configs/profiles/rhel/rootfs/usr/bin/uptime +0 -0
  206. cyanide/configs/profiles/rhel/rootfs/usr/bin/vi +0 -0
  207. cyanide/configs/profiles/rhel/rootfs/usr/bin/wc +0 -0
  208. cyanide/configs/profiles/rhel/rootfs/usr/bin/whereis +0 -0
  209. cyanide/configs/profiles/rhel/rootfs/usr/bin/which +0 -0
  210. cyanide/configs/profiles/rhel/rootfs/usr/bin/whoami +0 -0
  211. cyanide/configs/profiles/rhel/rootfs/usr/bin/xargs +0 -0
  212. cyanide/configs/profiles/rhel/rootfs/usr/bin/yum +0 -0
  213. cyanide/configs/profiles/rhel/rootfs/usr/bin/zcat +0 -0
  214. cyanide/configs/profiles/rhel/rootfs/usr/bin/zip +0 -0
  215. cyanide/configs/profiles/rhel/rootfs/usr/sbin/auditd +0 -0
  216. cyanide/configs/profiles/rhel/rootfs/usr/sbin/firewalld +0 -0
  217. cyanide/configs/profiles/rhel/rootfs/usr/sbin/groupadd +0 -0
  218. cyanide/configs/profiles/rhel/rootfs/usr/sbin/groupmod +0 -0
  219. cyanide/configs/profiles/rhel/rootfs/usr/sbin/halt +0 -0
  220. cyanide/configs/profiles/rhel/rootfs/usr/sbin/ip +0 -0
  221. cyanide/configs/profiles/rhel/rootfs/usr/sbin/ipables +0 -0
  222. cyanide/configs/profiles/rhel/rootfs/usr/sbin/iptables +0 -0
  223. cyanide/configs/profiles/rhel/rootfs/usr/sbin/nft +0 -0
  224. cyanide/configs/profiles/rhel/rootfs/usr/sbin/reboot +0 -0
  225. cyanide/configs/profiles/rhel/rootfs/usr/sbin/shutdown +0 -0
  226. cyanide/configs/profiles/rhel/rootfs/usr/sbin/ss +0 -0
  227. cyanide/configs/profiles/rhel/rootfs/usr/sbin/sshd +0 -0
  228. cyanide/configs/profiles/rhel/rootfs/usr/sbin/systemctl +0 -0
  229. cyanide/configs/profiles/rhel/rootfs/usr/sbin/useradd +0 -0
  230. cyanide/configs/profiles/rhel/rootfs/usr/sbin/usermod +0 -0
  231. cyanide/configs/profiles/rhel/rootfs/usr/sbin/visudo +0 -0
  232. cyanide/configs/profiles/rhel/rootfs/usr/share/bash-completion/bash_completion +11 -0
  233. cyanide/configs/profiles/rhel/rootfs/usr/share/doc/redhat-release/COPYRIGHT +10 -0
  234. cyanide/core/__init__.py +9 -0
  235. cyanide/core/aesthetics.py +72 -0
  236. cyanide/core/async_logger.py +104 -0
  237. cyanide/core/cleanup.py +82 -0
  238. cyanide/core/config.py +386 -0
  239. cyanide/core/config_schema.py +259 -0
  240. cyanide/core/defaults.py +12 -0
  241. cyanide/core/emulator.py +530 -0
  242. cyanide/core/fs_utils.py +48 -0
  243. cyanide/core/geoip.py +90 -0
  244. cyanide/core/libvirt_pool.py +289 -0
  245. cyanide/core/paths.py +57 -0
  246. cyanide/core/security.py +88 -0
  247. cyanide/core/server.py +2376 -0
  248. cyanide/core/session_pool.py +114 -0
  249. cyanide/core/stats.py +198 -0
  250. cyanide/core/telemetry.py +45 -0
  251. cyanide/core/terminal_utils.py +29 -0
  252. cyanide/core/vm_pool.py +188 -0
  253. cyanide/core/vt_scanner.py +118 -0
  254. cyanide/logger.py +357 -0
  255. cyanide/main.py +58 -0
  256. cyanide/ml/__init__.py +1 -0
  257. cyanide/ml/classifier.py +309 -0
  258. cyanide/ml/context_analyzer.py +179 -0
  259. cyanide/ml/model.py +167 -0
  260. cyanide/ml/pipeline.py +210 -0
  261. cyanide/ml/rule_engine.py +297 -0
  262. cyanide/ml/tokenizer.py +71 -0
  263. cyanide/network/__init__.py +9 -0
  264. cyanide/network/ssh_proxy.py +408 -0
  265. cyanide/network/tcp_proxy.py +156 -0
  266. cyanide/output/__init__.py +0 -0
  267. cyanide/output/base.py +109 -0
  268. cyanide/output/discord.py +232 -0
  269. cyanide/output/elasticsearch.py +54 -0
  270. cyanide/output/hpfeeds.py +56 -0
  271. cyanide/output/mongodb.py +70 -0
  272. cyanide/output/mysql.py +94 -0
  273. cyanide/output/postgresql.py +81 -0
  274. cyanide/output/rethinkdb.py +68 -0
  275. cyanide/output/slack.py +73 -0
  276. cyanide/output/splunk_hec.py +63 -0
  277. cyanide/output/sqlite.py +73 -0
  278. cyanide/output/syslog.py +98 -0
  279. cyanide/output/telegram.py +229 -0
  280. cyanide/pool/__init__.py +0 -0
  281. cyanide/scripts/__init__.py +0 -0
  282. cyanide/scripts/management/cyanide-framework +153 -0
  283. cyanide/scripts/training/train.py +172 -0
  284. cyanide/services/analytics.py +429 -0
  285. cyanide/services/ioc_reporter.py +209 -0
  286. cyanide/services/quarantine.py +156 -0
  287. cyanide/services/session_manager.py +120 -0
  288. cyanide/services/smtp_handler.py +170 -0
  289. cyanide/services/telnet_handler.py +364 -0
  290. cyanide/tests/__init__.py +0 -0
  291. cyanide/tests/conftest.py +95 -0
  292. cyanide/tests/integration/__init__.py +0 -0
  293. cyanide/tests/integration/smoke_test.py +226 -0
  294. cyanide/tests/integration/test_advanced_verification.py +143 -0
  295. cyanide/tests/integration/test_concurrency.py +70 -0
  296. cyanide/tests/integration/test_fingerprinting.py +115 -0
  297. cyanide/tests/integration/test_logging_monitoring.py +55 -0
  298. cyanide/tests/integration/test_malware_flow.py +108 -0
  299. cyanide/tests/integration/test_scp_protocol.py +133 -0
  300. cyanide/tests/integration/test_services.py +99 -0
  301. cyanide/tests/integration/vfs_smoke_test.py +48 -0
  302. cyanide/tests/load/test_concurrent_sessions.py +75 -0
  303. cyanide/tests/test_config_validation.py +45 -0
  304. cyanide/tests/test_realism_v2.py +68 -0
  305. cyanide/tests/test_vm_pool.py +141 -0
  306. cyanide/tests/unit/__init__.py +0 -0
  307. cyanide/tests/unit/commands/__init__.py +0 -0
  308. cyanide/tests/unit/commands/test_alias.py +54 -0
  309. cyanide/tests/unit/commands/test_apt_extra.py +130 -0
  310. cyanide/tests/unit/commands/test_awk.py +55 -0
  311. cyanide/tests/unit/commands/test_awk_redos.py +31 -0
  312. cyanide/tests/unit/commands/test_content.py +70 -0
  313. cyanide/tests/unit/commands/test_content_extra.py +83 -0
  314. cyanide/tests/unit/commands/test_coverage_boost.py +88 -0
  315. cyanide/tests/unit/commands/test_crontab_advanced.py +79 -0
  316. cyanide/tests/unit/commands/test_dev_tools.py +209 -0
  317. cyanide/tests/unit/commands/test_dns_security.py +70 -0
  318. cyanide/tests/unit/commands/test_editor_boost.py +131 -0
  319. cyanide/tests/unit/commands/test_editor_extra.py +265 -0
  320. cyanide/tests/unit/commands/test_extra_commands.py +109 -0
  321. cyanide/tests/unit/commands/test_file_ops.py +100 -0
  322. cyanide/tests/unit/commands/test_interactive_commands.py +84 -0
  323. cyanide/tests/unit/commands/test_ls_extra.py +174 -0
  324. cyanide/tests/unit/commands/test_massive_suite.py +110 -0
  325. cyanide/tests/unit/commands/test_nav.py +70 -0
  326. cyanide/tests/unit/commands/test_network.py +93 -0
  327. cyanide/tests/unit/commands/test_network_commands.py +286 -0
  328. cyanide/tests/unit/commands/test_package_managers.py +67 -0
  329. cyanide/tests/unit/commands/test_pkg_mgr_env.py +30 -0
  330. cyanide/tests/unit/commands/test_registry_smoke.py +70 -0
  331. cyanide/tests/unit/commands/test_security_network.py +66 -0
  332. cyanide/tests/unit/commands/test_su.py +73 -0
  333. cyanide/tests/unit/commands/test_system.py +56 -0
  334. cyanide/tests/unit/commands/test_text_tools_extra.py +56 -0
  335. cyanide/tests/unit/commands/test_vfs_commands_extra.py +83 -0
  336. cyanide/tests/unit/commands/test_vfs_extra.py +77 -0
  337. cyanide/tests/unit/test_aesthetics.py +44 -0
  338. cyanide/tests/unit/test_analytics_service.py +99 -0
  339. cyanide/tests/unit/test_analytics_service_deep.py +123 -0
  340. cyanide/tests/unit/test_async_logger.py +49 -0
  341. cyanide/tests/unit/test_auth_delay.py +40 -0
  342. cyanide/tests/unit/test_bash_command.py +23 -0
  343. cyanide/tests/unit/test_bash_scripts.py +50 -0
  344. cyanide/tests/unit/test_bot_detection.py +58 -0
  345. cyanide/tests/unit/test_cleanup.py +59 -0
  346. cyanide/tests/unit/test_config_logic.py +60 -0
  347. cyanide/tests/unit/test_config_validation.py +119 -0
  348. cyanide/tests/unit/test_context_analyzer.py +55 -0
  349. cyanide/tests/unit/test_core_and_logger.py +176 -0
  350. cyanide/tests/unit/test_coverage_boost.py +54 -0
  351. cyanide/tests/unit/test_coverage_boost_final.py +194 -0
  352. cyanide/tests/unit/test_coverage_booster.py +152 -0
  353. cyanide/tests/unit/test_coverage_final_push.py +195 -0
  354. cyanide/tests/unit/test_cp_command.py +42 -0
  355. cyanide/tests/unit/test_editor_boost_final.py +76 -0
  356. cyanide/tests/unit/test_fake_filesystem.py +112 -0
  357. cyanide/tests/unit/test_file_transfer_config.py +27 -0
  358. cyanide/tests/unit/test_final_coverage.py +145 -0
  359. cyanide/tests/unit/test_final_push.py +178 -0
  360. cyanide/tests/unit/test_fs_utils.py +33 -0
  361. cyanide/tests/unit/test_full_system_smoke.py +101 -0
  362. cyanide/tests/unit/test_ioc_reporter.py +72 -0
  363. cyanide/tests/unit/test_libvirt_pool.py +93 -0
  364. cyanide/tests/unit/test_log_restructuring.py +93 -0
  365. cyanide/tests/unit/test_logger.py +102 -0
  366. cyanide/tests/unit/test_main.py +47 -0
  367. cyanide/tests/unit/test_massive_coverage.py +156 -0
  368. cyanide/tests/unit/test_ml.py +101 -0
  369. cyanide/tests/unit/test_ml_classifier_advanced.py +95 -0
  370. cyanide/tests/unit/test_ml_logging_fix.py +130 -0
  371. cyanide/tests/unit/test_ml_model.py +53 -0
  372. cyanide/tests/unit/test_ml_tokenizer.py +38 -0
  373. cyanide/tests/unit/test_network_extra.py +45 -0
  374. cyanide/tests/unit/test_output_plugins.py +186 -0
  375. cyanide/tests/unit/test_package_managers.py +72 -0
  376. cyanide/tests/unit/test_ping_command.py +28 -0
  377. cyanide/tests/unit/test_profile_loader_extra.py +105 -0
  378. cyanide/tests/unit/test_quarantine_service.py +177 -0
  379. cyanide/tests/unit/test_rate_limiting.py +71 -0
  380. cyanide/tests/unit/test_retraining.py +29 -0
  381. cyanide/tests/unit/test_rsync_logic.py +87 -0
  382. cyanide/tests/unit/test_sandbox_security.py +31 -0
  383. cyanide/tests/unit/test_scp_advanced.py +117 -0
  384. cyanide/tests/unit/test_scp_handler.py +80 -0
  385. cyanide/tests/unit/test_scp_logic.py +88 -0
  386. cyanide/tests/unit/test_scp_recursive.py +92 -0
  387. cyanide/tests/unit/test_scp_sftp_coverage.py +155 -0
  388. cyanide/tests/unit/test_security.py +39 -0
  389. cyanide/tests/unit/test_server.py +32 -0
  390. cyanide/tests/unit/test_server_boost.py +103 -0
  391. cyanide/tests/unit/test_server_deep.py +191 -0
  392. cyanide/tests/unit/test_server_extra.py +73 -0
  393. cyanide/tests/unit/test_server_handlers.py +117 -0
  394. cyanide/tests/unit/test_server_logic.py +358 -0
  395. cyanide/tests/unit/test_sftp_logic.py +261 -0
  396. cyanide/tests/unit/test_shell_depth.py +33 -0
  397. cyanide/tests/unit/test_shell_emulator.py +218 -0
  398. cyanide/tests/unit/test_shell_emulator_core.py +136 -0
  399. cyanide/tests/unit/test_slack_output.py +52 -0
  400. cyanide/tests/unit/test_smtp_handler.py +156 -0
  401. cyanide/tests/unit/test_ssh_advanced_logic.py +178 -0
  402. cyanide/tests/unit/test_ssh_logic.py +103 -0
  403. cyanide/tests/unit/test_ssh_proxy.py +128 -0
  404. cyanide/tests/unit/test_tcp_proxy.py +54 -0
  405. cyanide/tests/unit/test_telemetry.py +22 -0
  406. cyanide/tests/unit/test_telnet_extra.py +142 -0
  407. cyanide/tests/unit/test_telnet_handler.py +71 -0
  408. cyanide/tests/unit/test_uname_command.py +38 -0
  409. cyanide/tests/unit/test_vfs_deep.py +152 -0
  410. cyanide/tests/unit/test_vfs_dynamic.py +68 -0
  411. cyanide/tests/unit/test_vfs_engine_extra.py +77 -0
  412. cyanide/tests/unit/test_vfs_handlers_extra.py +167 -0
  413. cyanide/tests/unit/test_vfs_resiliency.py +27 -0
  414. cyanide/tests/unit/test_virtual_file_transfers.py +86 -0
  415. cyanide/tests/unit/test_vt_scanner.py +88 -0
  416. cyanide/tests/unit/test_webhook_outputs.py +275 -0
  417. cyanide/utils/__init__.py +9 -0
  418. cyanide/vfs/backend.py +97 -0
  419. cyanide/vfs/commands/__init__.py +143 -0
  420. cyanide/vfs/commands/alias.py +60 -0
  421. cyanide/vfs/commands/apt.py +100 -0
  422. cyanide/vfs/commands/awk.py +122 -0
  423. cyanide/vfs/commands/base.py +274 -0
  424. cyanide/vfs/commands/bash.py +63 -0
  425. cyanide/vfs/commands/cat.py +45 -0
  426. cyanide/vfs/commands/cd.py +29 -0
  427. cyanide/vfs/commands/chmod.py +74 -0
  428. cyanide/vfs/commands/cp.py +43 -0
  429. cyanide/vfs/commands/crontab.py +115 -0
  430. cyanide/vfs/commands/curl.py +176 -0
  431. cyanide/vfs/commands/doas.py +31 -0
  432. cyanide/vfs/commands/dpkg.py +73 -0
  433. cyanide/vfs/commands/echo.py +19 -0
  434. cyanide/vfs/commands/editor.py +638 -0
  435. cyanide/vfs/commands/env.py +21 -0
  436. cyanide/vfs/commands/export.py +24 -0
  437. cyanide/vfs/commands/find.py +35 -0
  438. cyanide/vfs/commands/finger.py +50 -0
  439. cyanide/vfs/commands/free.py +39 -0
  440. cyanide/vfs/commands/gcc.py +55 -0
  441. cyanide/vfs/commands/grep.py +112 -0
  442. cyanide/vfs/commands/head.py +54 -0
  443. cyanide/vfs/commands/help.py +20 -0
  444. cyanide/vfs/commands/history.py +12 -0
  445. cyanide/vfs/commands/id.py +22 -0
  446. cyanide/vfs/commands/ifconfig.py +30 -0
  447. cyanide/vfs/commands/ip.py +39 -0
  448. cyanide/vfs/commands/journalctl.py +19 -0
  449. cyanide/vfs/commands/last.py +20 -0
  450. cyanide/vfs/commands/ls.py +146 -0
  451. cyanide/vfs/commands/lsof.py +18 -0
  452. cyanide/vfs/commands/make.py +25 -0
  453. cyanide/vfs/commands/misc_sys.py +26 -0
  454. cyanide/vfs/commands/mkdir.py +67 -0
  455. cyanide/vfs/commands/mv.py +38 -0
  456. cyanide/vfs/commands/nc.py +41 -0
  457. cyanide/vfs/commands/netstat.py +16 -0
  458. cyanide/vfs/commands/perl.py +66 -0
  459. cyanide/vfs/commands/ping.py +41 -0
  460. cyanide/vfs/commands/pkexec.py +27 -0
  461. cyanide/vfs/commands/ps.py +50 -0
  462. cyanide/vfs/commands/pwd.py +16 -0
  463. cyanide/vfs/commands/python.py +122 -0
  464. cyanide/vfs/commands/rm.py +37 -0
  465. cyanide/vfs/commands/rmdir.py +40 -0
  466. cyanide/vfs/commands/route.py +29 -0
  467. cyanide/vfs/commands/rpm.py +72 -0
  468. cyanide/vfs/commands/ss.py +15 -0
  469. cyanide/vfs/commands/su.py +74 -0
  470. cyanide/vfs/commands/sudo.py +93 -0
  471. cyanide/vfs/commands/systemctl.py +36 -0
  472. cyanide/vfs/commands/tail.py +54 -0
  473. cyanide/vfs/commands/touch.py +24 -0
  474. cyanide/vfs/commands/uname.py +47 -0
  475. cyanide/vfs/commands/uptime.py +28 -0
  476. cyanide/vfs/commands/visudo.py +21 -0
  477. cyanide/vfs/commands/w.py +22 -0
  478. cyanide/vfs/commands/wget.py +108 -0
  479. cyanide/vfs/commands/who.py +22 -0
  480. cyanide/vfs/commands/whoami.py +16 -0
  481. cyanide/vfs/commands/yum.py +129 -0
  482. cyanide/vfs/context.py +22 -0
  483. cyanide/vfs/dynamic.py +335 -0
  484. cyanide/vfs/engine.py +740 -0
  485. cyanide/vfs/nodes.py +48 -0
  486. cyanide/vfs/profile_loader.py +469 -0
  487. cyanide/vfs/rsync.py +244 -0
  488. cyanide/vfs/scp.py +382 -0
  489. cyanide/vfs/sftp.py +297 -0
  490. cyanide_framework-1.0.0.dist-info/METADATA +236 -0
  491. cyanide_framework-1.0.0.dist-info/RECORD +495 -0
  492. cyanide_framework-1.0.0.dist-info/WHEEL +5 -0
  493. cyanide_framework-1.0.0.dist-info/entry_points.txt +2 -0
  494. cyanide_framework-1.0.0.dist-info/licenses/LICENSE +21 -0
  495. cyanide_framework-1.0.0.dist-info/top_level.txt +1 -0
cyanide/__init__.py ADDED
@@ -0,0 +1,12 @@
1
+ """
2
+ Cyanide Library
3
+ ---------------
4
+ Core utilities for the Cyanide Framework, including logging and filesystem management.
5
+ """
6
+
7
+ __version__ = "2.1.1"
8
+ __author__ = "DeepMind Agent"
9
+
10
+ from .logger import CyanideLogger
11
+
12
+ __all__ = ["CyanideLogger"]
Binary file
@@ -0,0 +1,13 @@
1
+ @@@@@@@@@@@@@
2
+ @@@@@@@@@@@@@@@@@@@@@
3
+ @@@@@@@ @@@@@@@
4
+ @@@@@ @@@@@@@ @@@@@
5
+ @@@@ @@@@@@@@@@@@@ @@@@
6
+ @@@@ @@@ @@@ @@@@
7
+ @@@@ @@@@ @@@@ @@@@
8
+ @@@@ @@@ @@@ @@@@
9
+ @@@@ @@@@@@@@@@@@@ @@@@
10
+ @@@@@ @@@@@@@ @@@@@
11
+ @@@@@@ @@@@@@
12
+ @@@@@@@@@@@@@@@@@@@@@
13
+ @@@@@@@@@@@@@
Binary file
Binary file
Binary file
@@ -0,0 +1,207 @@
1
+ framework:
2
+ hostname: server01
3
+ quarantine_max_size_mb: 500
4
+ dns_cache_ttl: 60
5
+ allow_local_network: false
6
+ fs_yaml: ""
7
+
8
+ server:
9
+ host: 0.0.0.0
10
+ os_profile: random
11
+ max_sessions: 100
12
+ max_sessions_per_ip: 5
13
+ session_timeout: 300
14
+
15
+ logging:
16
+ directory: var/log/cyanide
17
+ logtype: plain
18
+ rotation:
19
+ strategy: time
20
+ when: midnight
21
+ interval: 1
22
+ backup_count: 14
23
+ max_bytes: 10485760
24
+
25
+ pool:
26
+ enabled: false
27
+ mode: libvirt
28
+ max_vms: 5
29
+ recycle_period: 1500
30
+ vm_unused_timeout: 600
31
+ share_guests: true
32
+ libvirt_uri: qemu:///system
33
+ guest_config: configs/pool/default_guest.xml
34
+ guest_tag: ubuntu18.04
35
+ guest_ssh_port: 22
36
+ guest_telnet_port: 23
37
+ use_nat: true
38
+ nat_public_ip: 192.168.1.40
39
+ save_snapshots: false
40
+ snapshot_path: var/lib/cyanide/snapshots
41
+ targets: ""
42
+
43
+ users:
44
+ - user: root
45
+ pass: admin
46
+ - user: admin
47
+ pass: admin
48
+ - user: user
49
+ pass: "123456"
50
+
51
+ metrics:
52
+ enabled: false
53
+ port: 9090
54
+ allow_remote: true
55
+
56
+ ml:
57
+ enabled: false
58
+ metrics_port: 9090
59
+ online_learning: false
60
+ retraining_interval_days: 7
61
+
62
+ rate_limit:
63
+ max_connections_per_minute: 60
64
+ ban_duration: 3600
65
+
66
+ ioc_reporting:
67
+ enabled: false
68
+ report_interval_hours: 1
69
+ output_format: stix2.1
70
+
71
+ ssh:
72
+ enabled: false
73
+ listen_port: 2222
74
+ rsa_keying: true
75
+ backend_mode: emulated
76
+ version: ""
77
+ ciphers: ["aes256-gcm@openssh.com", "aes128-gcm@openssh.com", "chacha20-poly1305@openssh.com", "aes256-ctr", "aes192-ctr", "aes128-ctr"]
78
+ macs: ["hmac-sha2-512-etm@openssh.com", "hmac-sha2-256-etm@openssh.com", "umac-128-etm@openssh.com", "hmac-sha2-512", "hmac-sha2-256", "umac-128@openssh.com"]
79
+ compression: ["none", "zlib@openssh.com"]
80
+ kex_algs: ["curve25519-sha256", "curve25519-sha256@libssh.org", "ecdh-sha2-nistp256", "ecdh-sha2-nistp384", "ecdh-sha2-nistp521", "diffie-hellman-group-exchange-sha256", "diffie-hellman-group16-sha512", "diffie-hellman-group18-sha512", "diffie-hellman-group14-sha256"]
81
+ host_key_algs: ["ssh-ed25519", "rsa-sha2-512", "rsa-sha2-256", "ecdsa-sha2-nistp256"]
82
+ public_key_algs: ["ssh-ed25519", "rsa-sha2-512", "rsa-sha2-256", "ecdsa-sha2-nistp256"]
83
+ data_path: "var/lib/cyanide/keys"
84
+ auth_tries: 3
85
+ login_timeout: 60
86
+ idle_timeout: 3600
87
+ rekey_limit: "1G"
88
+ sftp_enabled: true
89
+ scp_enabled: true
90
+ rsync_enabled: true
91
+ max_upload_size_mb: 50
92
+ max_total_upload_mb_per_session: 200
93
+ allow_download: true
94
+ allow_upload: true
95
+ forwarding_enabled: false
96
+ forward_redirect_enabled: false
97
+ forward_redirect_rules:
98
+ "80": "127.0.0.1:8080"
99
+ forward_tunnel_enabled: false
100
+ forward_tunnel_rules:
101
+ "3306": "mysql-sandbox:3306"
102
+ log_passwords: false
103
+
104
+ telnet:
105
+ enabled: false
106
+ listen_port: 2323
107
+ backend_mode: emulated
108
+ log_passwords: false
109
+
110
+ smtp:
111
+ enabled: false
112
+ port: 2525
113
+ target_host: 127.0.0.1
114
+ target_port: 25255
115
+
116
+ output:
117
+ sqlite:
118
+ enabled: false
119
+ path: var/log/cyanide/events.sqlite
120
+ table: events
121
+ postgresql:
122
+ enabled: false
123
+ host: postgresql
124
+ port: 5432
125
+ user: cyanide
126
+ password: password
127
+ database: cyanide
128
+ table: events
129
+ elasticsearch:
130
+ enabled: false
131
+ hosts:
132
+ - http://elasticsearch:9200
133
+ index: cyanide-events
134
+ splunk_hec:
135
+ enabled: false
136
+ url: https://splunk:8088/services/collector/event
137
+ token: "YOUR_TOKEN_HERE"
138
+ source: cyanide
139
+ sourcetype: _json
140
+ verify_ssl: false
141
+ syslog:
142
+ enabled: false
143
+ address: /dev/log
144
+ facility: user
145
+ slack:
146
+ enabled: false
147
+ webhook_url: ""
148
+ username: "Cyanide Framework"
149
+ batch_size: 1
150
+ batch_timeout: 2.0
151
+ max_content_length: 4000
152
+ discord:
153
+ enabled: false
154
+ webhook_url: ""
155
+ username: "Cyanide Framework"
156
+ # Required for /report command: Discord Bot Token + channel ID
157
+ bot_token: ""
158
+ report_channel_id: ""
159
+ batch_size: 1
160
+ batch_timeout: 2.0
161
+ telegram:
162
+ enabled: false
163
+ token: ""
164
+ chat_id: ""
165
+ batch_size: 1
166
+ batch_timeout: 2.0
167
+
168
+ hpfeeds:
169
+ enabled: false
170
+ host: hpfeeds.honeycloud.net
171
+ port: 10000
172
+ ident: ""
173
+ secret: ""
174
+ channel: cyanide.events
175
+ mysql:
176
+ enabled: false
177
+ host: mysql
178
+ port: 3306
179
+ user: cyanide
180
+ password: password
181
+ database: cyanide
182
+ table: events
183
+ mongodb:
184
+ enabled: false
185
+ uri: "mongodb://mongodb:27017/"
186
+ database: cyanide
187
+ collection: events
188
+ rethinkdb:
189
+ enabled: false
190
+ host: rethinkdb
191
+ port: 28015
192
+ database: cyanide
193
+ table: events
194
+
195
+ cleanup:
196
+ enabled: false
197
+ interval: 3600
198
+ retention_days: 7
199
+
200
+ virustotal:
201
+ enabled: false
202
+ api_key: ""
203
+
204
+ otel:
205
+ enabled: false
206
+ exporter: otlp
207
+ endpoint: http://localhost:4318/v1/traces
@@ -0,0 +1,108 @@
1
+ metadata:
2
+ os_name: "Debian 11 (Bullseye)"
3
+ kernel_version: "5.10.0-28-amd64"
4
+ hostname: "debian-server"
5
+ arch: "x86_64"
6
+ ssh_banner: "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u1"
7
+ os_id: "debian"
8
+ version_id: "11"
9
+ install_date: "2024-01-31T10:00:00Z"
10
+
11
+ honeytokens:
12
+ - "/etc/passwd"
13
+ - "/etc/shadow"
14
+ - "/root/.bash_history"
15
+ - "/root/.ssh/id_rsa"
16
+ - "/home/admin/.bash_history"
17
+ - "/etc/ssh/sshd_config"
18
+ - "/var/www/html/.env"
19
+
20
+ dynamic_files:
21
+ /proc/uptime:
22
+ type: generated
23
+ provider: uptime_provider
24
+ /proc/cpuinfo:
25
+ type: generated
26
+ provider: cpuinfo_provider
27
+ /proc/version:
28
+ content: "Linux version {{ kernel_version }} (debian-kernel@lists.debian.org) (gcc-10 (Debian 10.2.1-6) 10.2.1 20210110, GNU ld (GNU Binutils for Debian) 2.35.2) #1 SMP Debian 5.10.209-2 (2024-01-31)"
29
+ /etc/motd:
30
+ type: generated
31
+ provider: motd_provider
32
+ /proc/meminfo:
33
+ type: generated
34
+ provider: meminfo_provider
35
+ /etc/shadow:
36
+ type: generated
37
+ provider: shadow_provider
38
+
39
+ system_templates:
40
+ cpuinfo: |
41
+ processor : 0
42
+ vendor_id : GenuineIntel
43
+ cpu family : 6
44
+ model : 142
45
+ model name : Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
46
+ stepping : 10
47
+ microcode : 0xf4
48
+ cpu MHz : 1800.000
49
+ cache size : 6144 KB
50
+ physical id : 0
51
+ siblings : 4
52
+ core id : 0
53
+ cpu cores : 2
54
+ apicid : 0
55
+ initial apicid : 0
56
+ fpu : yes
57
+ fpu_exception : yes
58
+ cpuid level : 22
59
+ wp : yes
60
+ flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb invpcid_single pti ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm mpx rdseed adx smap clflushopt intel_pt xsaveopt xsavec xgetbv1 xsaves dtherm ida arat pln pts hwp hwp_notify hwp_act_window hwp_epp md_clear flush_l1d
61
+ bugs : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit srbds
62
+ bogomips : 3600.00
63
+ clflush size : 64
64
+ cache_alignment : 64
65
+ address sizes : 39 bits physical, 48 bits virtual
66
+ power management:
67
+
68
+ meminfo: |
69
+ MemTotal: 8165972 kB
70
+ MemFree: 1245620 kB
71
+ MemAvailable: 5642312 kB
72
+ Buffers: 210452 kB
73
+ Cached: 4123564 kB
74
+ SwapCached: 0 kB
75
+ Active: 3120452 kB
76
+ Inactive: 2845612 kB
77
+ SwapTotal: 2097148 kB
78
+ SwapFree: 2097148 kB
79
+
80
+ processes:
81
+ - pid: 1
82
+ user: root
83
+ time: "00:00:15"
84
+ cmd: "/sbin/init"
85
+ - pid: 2
86
+ user: root
87
+ time: "00:00:00"
88
+ cmd: "[kthreadd]"
89
+ - pid: 150
90
+ user: root
91
+ time: "00:00:01"
92
+ cmd: "/lib/systemd/systemd-journald"
93
+ - pid: 200
94
+ user: root
95
+ time: "00:00:00"
96
+ cmd: "/lib/systemd/systemd-udevd"
97
+ - pid: 400
98
+ user: messagebus
99
+ time: "00:00:02"
100
+ cmd: "/usr/bin/dbus-daemon --system --address=systemd: --nofork --nopidfile --systemd-activation"
101
+ - pid: 500
102
+ user: root
103
+ time: "00:00:00"
104
+ cmd: "/usr/sbin/sshd -D"
105
+ - pid: 600
106
+ user: root
107
+ time: "00:00:01"
108
+ cmd: "/usr/sbin/rsyslogd -n"
@@ -0,0 +1,206 @@
1
+ static_files:
2
+ tree_folders: /bin /boot /dev /etc /home /lib /lib64 /media /mnt /opt /proc /root /run /srv /sys /tmp /usr /var /media/cdrom0
3
+
4
+ nodes:
5
+ etc:
6
+ bash.bashrc: |
7
+ # System-wide .bashrc file for interactive bash(1) shells.
8
+ if [ -z "$PS1" ]; then return; fi
9
+ PS1='${debian_chroot:+($debian_chroot)}\u@\h:\w\$ '
10
+ alias ls='ls --color=auto'
11
+ alias grep='grep --color=auto'
12
+ debian_version: "11.7\n"
13
+ fstab: |
14
+ # /etc/fstab: static file system information.
15
+ # <file system> <mount point> <type> <options> <dump> <pass>
16
+ /dev/sda1 / ext4 errors=remount-ro 0 1
17
+ /dev/sda2 none swap sw 0 0
18
+ /dev/sr0 /media/cdrom0 udf,iso9660 user,noauto 0 0
19
+ group: |
20
+ root:x:0:
21
+ daemon:x:1:
22
+ bin:x:2:
23
+ sys:x:3:
24
+ adm:x:4:admin
25
+ tty:x:5:
26
+ disk:x:6:
27
+ lp:x:7:
28
+ mail:x:8:
29
+ news:x:9:
30
+ uucp:x:10:
31
+ proxy:x:13:
32
+ www-data:x:33:
33
+ backup:x:34:
34
+ list:x:38:
35
+ irc:x:39:
36
+ gnats:x:41:
37
+ shadow:x:42:
38
+ utmp:x:43:
39
+ video:x:44:
40
+ sasl:x:45:
41
+ plugdev:x:46:
42
+ staff:x:50:
43
+ games:x:60:
44
+ users:x:100:
45
+ nogroup:x:65534:
46
+ systemd-journal:x:101:
47
+ systemd-network:x:102:
48
+ systemd-resolve:x:103:
49
+ systemd-timesync:x:104:
50
+ messagebus:x:105:
51
+ _apt:x:106:
52
+ sshd:x:107:
53
+ sudo:x:27:admin
54
+ admin:x:1000:
55
+ hostname: "{{ hostname }}\n"
56
+ hosts: |
57
+ 127.0.0.1 localhost
58
+ 127.0.1.1 {{ hostname }}
59
+ ::1 ip6-localhost ip6-loopback
60
+ fe00::0 ip6-localnet
61
+ ff00::0 ip6-mcastprefix
62
+ ff02::1 ip6-allnodes
63
+ ff02::2 ip6-allrouters
64
+ issue: "Debian GNU/Linux {{ version_id }} \\n \\l\n"
65
+ motd: |
66
+ The programs included with the Debian GNU/Linux system are free software;
67
+ the exact distribution terms for each program are described in the
68
+ individual files in /usr/share/doc/*/copyright.
69
+
70
+ Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
71
+ permitted by applicable law.
72
+ Last login: Sun Apr 5 02:00:15 2024 from 192.168.1.50
73
+ os-release: |
74
+ PRETTY_NAME="Debian GNU/Linux {{ version_id }} (bullseye)"
75
+ NAME="Debian GNU/Linux"
76
+ VERSION_ID="{{ version_id }}"
77
+ VERSION="{{ version_id }} (bullseye)"
78
+ ID={{ os_id }}
79
+ HOME_URL="https://www.debian.org/"
80
+ SUPPORT_URL="https://www.debian.org/support"
81
+ BUG_REPORT_URL="https://bugs.debian.org/"
82
+ passwd: |
83
+ root:x:0:0:root:/root:/bin/bash
84
+ daemon:x:1:1:daemon:/usr/sbin:/usr/sbin/nologin
85
+ bin:x:2:2:bin:/bin:/usr/sbin/nologin
86
+ sys:x:3:3:sys:/dev:/usr/sbin/nologin
87
+ sync:x:4:65534:sync:/bin:/bin/sync
88
+ games:x:5:60:games:/usr/games:/usr/sbin/nologin
89
+ man:x:6:12:man:/var/cache/man:/usr/sbin/nologin
90
+ lp:x:7:7:lp:/var/spool/lpd:/usr/sbin/nologin
91
+ mail:x:8:8:mail:/var/mail:/usr/sbin/nologin
92
+ news:x:9:9:news:/var/spool/news:/usr/sbin/nologin
93
+ uucp:x:10:10:uucp:/var/spool/uucp:/usr/sbin/nologin
94
+ proxy:x:13:13:proxy:/bin:/usr/sbin/nologin
95
+ www-data:x:33:33:www-data:/var/www:/usr/sbin/nologin
96
+ backup:x:34:34:backup:/var/backups:/usr/sbin/nologin
97
+ list:x:38:38:Mailing List Manager:/var/list:/usr/sbin/nologin
98
+ irc:x:39:39:ircd:/var/run/ircd:/usr/sbin/nologin
99
+ gnats:x:41:41:Gnats Bug-Reporting System (admin):/var/lib/gnats:/usr/sbin/nologin
100
+ nobody:x:65534:65534:nobody:/nonexistent:/usr/sbin/nologin
101
+ _apt:x:100:65534::/nonexistent:/usr/sbin/nologin
102
+ systemd-network:x:101:102:systemd Network Management,,,:/run/systemd:/usr/sbin/nologin
103
+ systemd-resolve:x:102:103:systemd Resolver,,,:/run/systemd:/usr/sbin/nologin
104
+ systemd-timesync:x:103:104:systemd Time Synchronization,,,:/run/systemd:/usr/sbin/nologin
105
+ messagebus:x:104:110::/nonexistent:/usr/sbin/nologin
106
+ sshd:x:105:65534::/run/sshd:/usr/sbin/nologin
107
+ admin:x:1000:1000:admin,,,:/home/admin:/bin/bash
108
+ profile: |
109
+ # /etc/profile: system-wide .profile file for the Bourne shell
110
+ if [ "$PS1" ]; then
111
+ if [ "$BASH" ] && [ "$BASH" != "/bin/sh" ]; then
112
+ if [ -f /etc/bash.bashrc ]; then
113
+ . /etc/bash.bashrc
114
+ fi
115
+ else
116
+ if [ "`id -u`" -eq 0 ]; then
117
+ PS1='# '
118
+ else
119
+ PS1='$ '
120
+ fi
121
+ fi
122
+ fi
123
+ export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
124
+ resolv.conf: |
125
+ nameserver 8.8.8.8
126
+ nameserver 1.1.1.1
127
+ search localdomain
128
+ shadow: |
129
+ root:*:19450:0:99999:7:::
130
+ admin:$6$v.CkqC7f$6T5S9X...:19450:0:99999:7:::
131
+ shells: |
132
+ /bin/sh
133
+ /bin/bash
134
+ /usr/bin/bash
135
+ /bin/rbash
136
+ /usr/bin/rbash
137
+ /bin/dash
138
+ /usr/bin/dash
139
+ sudoers: |
140
+ Defaults env_reset
141
+ Defaults mail_badpass
142
+ Defaults secure_path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
143
+ root ALL=(ALL:ALL) ALL
144
+ %sudo ALL=(ALL:ALL) ALL
145
+ apt:
146
+ sources.list: |
147
+ deb http://deb.debian.org/debian bullseye main
148
+ deb http://security.debian.org/debian-security bullseye-security main
149
+ deb http://deb.debian.org/debian bullseye-updates main
150
+ pam.d:
151
+ sshd: |
152
+ auth required pam_unix.so try_first_pass
153
+ account required pam_unix.so
154
+ session required pam_unix.so
155
+ ssh:
156
+ sshd_config: |
157
+ Port 22
158
+ Protocol 2
159
+ HostKey /etc/ssh/ssh_host_rsa_key
160
+ PermitRootLogin yes
161
+ PasswordAuthentication yes
162
+ ChallengeResponseAuthentication no
163
+ UsePAM yes
164
+ X11Forwarding yes
165
+ PrintMotd no
166
+ AcceptEnv LANG LC_*
167
+ Subsystem sftp /usr/lib/openssh/sftp-server
168
+
169
+ bin: [ awk, bash, cat, chmod, chown, cp, date, dd, df, dmesg, echo, ed, egrep, false, fgrep, find, grep, gzip, hostname, kill, ln, login, ls, mkdir, more, mount, mv, ps, pwd, rm, rmdir, sed, sh, sleep, stty, su, sync, tar, touch, true, umount, uname, zcat ]
170
+
171
+ sbin: [ fdisk, fsck, getty, halt, ifconfig, init, ip, iptables, mke2fs, reboot, route, shutdown, sysctl ]
172
+
173
+ usr/bin: [ apt, apt-get, basename, bzip2, clear, cut, diff, dirname, dpkg, du, env, free, head, id, last, less, locate, lscpu, md5sum, msgfmt, nano, passwd, pgrep, pkill, python3, readlink, realpath, scp, sftp, sort, ssh, ssh-keygen, stat, systemctl, tail, tee, top, tr, tty, uniq, uptime, vi, vim, wc, wget, which, whoami, xargs, zip ]
174
+
175
+ usr/sbin: [ addgroup, adduser, chroot, cron, groupadd, groupdel, groupmod, nologin, rsyslogd, sshd, tcpdump, useradd, userdel, usermod ]
176
+
177
+ home/admin:
178
+ .bashrc: |
179
+ export PS1='\u@\h:\w\$ '
180
+ alias ls='ls --color=auto'
181
+ alias grep='grep --color=auto'
182
+ .bash_history: |
183
+ ls -la
184
+ sudo apt update
185
+ sudo apt install -y vim python3-pip
186
+ python3 --version
187
+ df -h
188
+ tail -f /var/log/syslog
189
+ ip addr
190
+ exit
191
+ .ssh:
192
+ authorized_keys: "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC5..."
193
+
194
+ root:
195
+ .bashrc: |
196
+ export PS1='\u@\h:\w\# '
197
+ alias ls='ls --color=auto'
198
+ .bash_history: |
199
+ apt update
200
+ apt upgrade -y
201
+ vi /etc/ssh/sshd_config
202
+ systemctl restart sshd
203
+ tail -f /var/log/auth.log
204
+ id
205
+ exit
206
+
@@ -0,0 +1,122 @@
1
+ honeytokens:
2
+ - "/etc/passwd"
3
+ - "/etc/shadow"
4
+ - "/root/.bash_history"
5
+ - "/home/admin/.ssh/authorized_keys"
6
+ - "/home/admin/.bash_history"
7
+ - "/etc/ssh/sshd_config"
8
+ - "/etc/redhat-release"
9
+
10
+ metadata:
11
+ os_name: "Red Hat Enterprise Linux 9.3 (Plow)"
12
+ os_id: "rhel"
13
+ kernel_version: "5.14.0-362.8.1.el9_3.x86_64"
14
+ arch: "x86_64"
15
+ hostname: "rhel-server-01"
16
+ version_id: "9.3"
17
+ install_date: "2024-03-24T14:32:10Z"
18
+ ssh_banner: "SSH-2.0-OpenSSH_8.7p1-0.el9"
19
+ uptime: "42 days, 14:22"
20
+
21
+ dynamic_files:
22
+ /proc/uptime:
23
+ type: generated
24
+ provider: uptime_provider
25
+ /proc/cpuinfo:
26
+ type: generated
27
+ provider: cpuinfo_provider
28
+ /proc/version:
29
+ content: "Linux version {{ kernel_version }} (mockbuild@x86-vm-01.build.eng.bos.redhat.com) (gcc (GCC) 11.4.1 20230605 (Red Hat 11.4.1-2)) #1 SMP PREEMPT_DYNAMIC Tue Nov 7 07:14:44 +0000 2024"
30
+ /etc/motd:
31
+ type: generated
32
+ provider: motd_provider
33
+ /proc/meminfo:
34
+ type: generated
35
+ provider: meminfo_provider
36
+ /proc/mounts:
37
+ type: generated
38
+ provider: mounts_provider
39
+ /etc/issue:
40
+ content: "Red Hat Enterprise Linux 9.3 (Plow)\nKernel \\r on an \\m\n\n"
41
+ /etc/shadow:
42
+ type: generated
43
+ provider: shadow_provider
44
+
45
+ system_templates:
46
+ cpuinfo: |
47
+ processor : 0
48
+ vendor_id : GenuineIntel
49
+ cpu family : 6
50
+ model : 158
51
+ model name : Intel(R) Xeon(R) Gold 6140 CPU @ 2.30GHz
52
+ stepping : 4
53
+ microcode : 0x200004d
54
+ cpu MHz : 2294.608
55
+ cache size : 25344 KB
56
+ physical id : 0
57
+ siblings : 2
58
+ core id : 0
59
+ cpu cores : 1
60
+ apicid : 0
61
+ initial apicid : 0
62
+ fpu : yes
63
+ fpu_exception : yes
64
+ cpuid level : 22
65
+ wp : yes
66
+ flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx pdpe1gb rdtscp lm constant_tsc art arch_perfmon pebs bts rep_good nopl xtopology nonstop_tsc cpuid aperfmperf pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 sdbg fma cx16 xtpr pdcm pcid sse4_1 sse4_2 x2apic movbe popcnt tsc_deadline_timer aes xsave avx f16c rdrand lahf_lm abm 3dnowprefetch cpuid_fault epb invpcid_single pti ssbd ibrs ibpb stibp tpr_shadow vnmi flexpriority ept vpid ept_ad fsgsbase tsc_adjust bmi1 hle avx2 smep bmi2 erms invpcid rtm mpx rdseed adx smap clflushopt intel_pt xsaveopt xsavec xgetbv1 xsaves dtherm ida arat pln pts hwp hwp_notify hwp_act_window hwp_epp md_clear flush_l1d
67
+ bugs : cpu_meltdown spectre_v1 spectre_v2 spec_store_bypass l1tf mds swapgs taa itlb_multihit srbds
68
+ bogomips : 4589.21
69
+ clflush size : 64
70
+ cache_alignment : 64
71
+ address sizes : 46 bits physical, 48 bits virtual
72
+ power management:
73
+
74
+ meminfo: |
75
+ MemTotal: 16265972 kB
76
+ MemFree: 4245620 kB
77
+ MemAvailable: 12642312 kB
78
+ Buffers: 510452 kB
79
+ Cached: 8123564 kB
80
+ SwapCached: 0 kB
81
+ Active: 5120452 kB
82
+ Inactive: 4845612 kB
83
+ SwapTotal: 4194300 kB
84
+ SwapFree: 4194300 kB
85
+
86
+ processes:
87
+ - pid: 1
88
+ user: root
89
+ time: "00:00:05"
90
+ cmd: "/usr/lib/systemd/systemd --switched-root --system --deserialize 31"
91
+ - pid: 2
92
+ user: root
93
+ time: "00:00:00"
94
+ cmd: "[kthreadd]"
95
+ - pid: 450
96
+ user: root
97
+ time: "00:00:01"
98
+ cmd: "/usr/lib/systemd/systemd-journald"
99
+ - pid: 480
100
+ user: root
101
+ time: "00:00:00"
102
+ cmd: "/usr/lib/systemd/systemd-udevd"
103
+ - pid: 600
104
+ user: dbus
105
+ time: "00:00:02"
106
+ cmd: "/usr/bin/dbus-broker-launch --scope system --audit"
107
+ - pid: 610
108
+ user: root
109
+ time: "00:00:00"
110
+ cmd: "/usr/sbin/NetworkManager --no-daemon"
111
+ - pid: 800
112
+ user: root
113
+ time: "00:00:00"
114
+ cmd: "/usr/sbin/sshd -D"
115
+ - pid: 850
116
+ user: root
117
+ time: "00:00:01"
118
+ cmd: "/usr/sbin/rsyslogd -n"
119
+ - pid: 900
120
+ user: root
121
+ time: "00:00:00"
122
+ cmd: "/usr/lib/systemd/systemd-logind"