guardicore / guardicore/monkey

Include OTP in agent executable

Open
#3,834 1 comment 0 reactions 0 assignees View on GitHub
Feature
Dominant language
Python
Stars
7.1k
Forks
830
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**

There are some use-cases where agents would be run by users who are not authorized to access the island. For example if you want to do a phishing simulation, you can't rely that users will not only execute the file, but will also use an OTP.

**Describe the solution you'd like**

We should think of a solution where we could build an OTP into the agent executable. The built-in OTP should be longer and have a long timeout (or no timeout at all). We also need to inform that the binary can be reverse-engineered to retrieve the configuration or stolen credentials.

**Describe alternatives you've considered**
Please describe alternative solutions or features you have considered.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.