guardicore / guardicore/monkey

Investigate the possibility to add Nuclei templates

Open
#1,641 0 comments 0 reactions 0 assignees View on GitHub
Spike
Dominant language
Python
Stars
7.1k
Forks
830
PR merge metrics
No merged PRs in 30d

Description

# Spike

## Objective
Investigate the possibility to include the Nuclei (https://github.com/projectdiscovery/nuclei/) engine in Infection monkey. The questions we need to answer are:
- Can templates can be used in the infection monkey to make infection monkey agents propagate (can nuclei be modified to run a command on vulnerable machine)?
- Investigate if a clear distinction can be made between safe and unsafe exploits/templates.
- Investigate how many exploits would be added to infection monkey after this potential change and if it's worth the effort.
- Investigate if our `web_rce.py` infrastructure is good enough to run these templates or would we need to improve it.
- Does these templates provide enough info to automatically generate a report (CVE, mitigations, etc.)
## Scope
Mosly investigation on Nuclei, Monkey stuff can be discussed later

## Output
A document or a comment or a new issue addressing the questions stated above.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.