Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ESXi ART Tests Batch 1 #2635

Merged
merged 15 commits into from
Dec 14, 2023
Merged

ESXi ART Tests Batch 1 #2635

merged 15 commits into from
Dec 14, 2023

Conversation

blueteam0ps
Copy link
Contributor

Details:
Adding the following ART tests which are to be run against VMWARE ESXi. Note that the tests were built to be run on Windows and leverages PowerCLI and also Plink/PSCP to communicate with the remote ESXi host.

ESXi - Enable SSH via PowerCLI
ESXi - VM Discovery using ESXCLI
ESXi - Darkside system information discovery
ESXi - Enumerate VMDKs available on an ESXi Host
ESXi - Install a custom VIB on an ESXi host
ESXi - Terminates VMs using pkill
ESXi - Avoslocker enumerates VMs and forcefully kills VMs
ESXi - Disable Account Lockout Policy via PowerCLI
ESXi - Change VIB acceptance level to CommunitySupported via PowerCLI
ESXi - Change VIB acceptance level to CommunitySupported via ESXCLI

Testing:
Testing performed locally and screenshot of test execution are attached to the PR.
T1021 004-1
T1082-32-discovery
T1082-33-darksidediscovery
T1083-find
T1129
T1529-13
T1529-14
T1562 001-50
T1562 010-1
T1562 010-2

Associated Issues:
Only errors you might get in the discovery tests as your environment may not have SAN storage.

Copy link
Collaborator

@clr2of8 clr2of8 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These look great. Just one small request ... Please have the prereqs download plink and pscp executables to the ExternalPayloads folder instead of including it in this repo in the various bin directories.

Updated the binary location to ExternalPayloads folder and also added the folder creation in GetPreReqs
Added External Payloads and included folder creation in GetPreReqs
Added ExternalPayloads refence. 
Added folder creation in GetPreReqs
Move the reference of the vib to src
Added External Payloads folder and added folder creation step to GetPreReqs
987c9b4d-a637-42db-b1cb-e9e242c3991b - added external payloads
Added External Payloads reference and folder creation to GetPreReqs
Copy link
Contributor Author

@blueteam0ps blueteam0ps left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

All good

@blueteam0ps
Copy link
Contributor Author

These look great. Just one small request ... Please have the prereqs download plink and pscp executables to the ExternalPayloads folder instead of including it in this repo in the various bin directories.

Done and I've removed the bin folders too. Over to you ;)

@clr2of8 clr2of8 merged commit 9ba4043 into redcanaryco:master Dec 14, 2023
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants