guardicore / guardicore/monkey
Investigate the possibility to add Nuclei templates
- Dominant language
- Python
- Stars
- 7.1k
- Forks
- 830
- PR merge metrics
- No merged PRs in 30d
Description
# Spike
## Objective
Investigate the possibility to include the Nuclei (https://github.com/projectdiscovery/nuclei/) engine in Infection monkey. The questions we need to answer are:
- Can templates can be used in the infection monkey to make infection monkey agents propagate (can nuclei be modified to run a command on vulnerable machine)?
- Investigate if a clear distinction can be made between safe and unsafe exploits/templates.
- Investigate how many exploits would be added to infection monkey after this potential change and if it's worth the effort.
- Investigate if our `web_rce.py` infrastructure is good enough to run these templates or would we need to improve it.
- Does these templates provide enough info to automatically generate a report (CVE, mitigations, etc.)
## Scope
Mosly investigation on Nuclei, Monkey stuff can be discussed later
## Output
A document or a comment or a new issue addressing the questions stated above.
Contributor guide
Assessment
This issue has not been assessed yet.