guardicore / guardicore/monkey
Include OTP in agent executable
- Dominant language
- Python
- Stars
- 7.1k
- Forks
- 830
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
There are some use-cases where agents would be run by users who are not authorized to access the island. For example if you want to do a phishing simulation, you can't rely that users will not only execute the file, but will also use an OTP.
**Describe the solution you'd like**
We should think of a solution where we could build an OTP into the agent executable. The built-in OTP should be longer and have a long timeout (or no timeout at all). We also need to inform that the binary can be reverse-engineered to retrieve the configuration or stolen credentials.
**Describe alternatives you've considered**
Please describe alternative solutions or features you have considered.
Contributor guide
Assessment
This issue has not been assessed yet.