SUGGESTION: Major changes to the SCP and WMI modules

Hi agent!

I want to announce some significant changes for the WMI Scanner and the SCP module.

SCP is a Linux protocol to be used with an SSH connection while WMI Scanner is for Windows networks. It causes some confusion as to why someone would infiltrate a network using WMI Scanner (windows) and then connect to the target's fileserver using SCP (Linux). Of course hybrid networks do exist, but from a user perspective, a Windows network would make files accessible via SMB protocol and not via SSH connection.

Now, we can imagine that less technically versed players will not appreciate losing 30 minutes trying to connect to a server just to realize they used the SCP protocol instead of SMB.

We felt this limitation could be in fact an exciting feature. Hacking Windows networks is by definition a different experience than hacking Linux network. NITE Team 4 should leverage this difference.


Network Intrusion > New Upgrade!



2 new subfolders will be added to the Network Intrusion menu: Windows and Linux. Generic modules, like Man in the middle and VOIP Attack, will stay at the root level.

The WMI Scanner and SMB Hack modules will be in the Windows folder while the SCP Terminal and the NMAP Scanner will be in the Linux folder The game experience will slightly vary between module.

Windows > WMI Scanner:
- Lets you intercept network activity to detect paths of exposed servers, services and shared drives
- More in-depth scan lets you analyze services to identify the technology behind them and their potential vulnerabilities
- Graphic interface allows the generation of a visual network map

Windows > SMB Hack:
- Lets you connect to an SMB shared drive to access the server files and folders (Browse, Upload, and Download)
- Basic security involving Usernames and Passwords that can be brute forced with the password attack module or through investigation
- SMB's exploit can be used to escalate user permissions and rights. (Similar to a light version of Foxacid)

Linux > NMAP Scanner
- IP and port scan devices on a network to detect its components.
- Wireshark option lets you dig deeper and detect services and their running technology.
- Graphic interface allows the generation of a visual network map

Linux > SCP Terminal
- Lets you connect via SSH to a server to browse, upload and download files.
- Basic security involving Usernames and Passwords that can be brute forced with the password attack module or through investigation
- SSH key (gather trough investigation or trade) can be used to escalate a user permission and rights.




When a player connects to the Turbine C2 card, Stinger OS will alert if the network is a Windows, Linux or Hybrid system. An alert will display if you try to use a Linux intrusion module on a Windows network.


What's your feeling on this direction? Good idea, bad idea? Let me know!

 

New update on this thread >
https://forums.aliceandsmith.com/th...s-to-the-scp-and-wmi-modules.3839/#post-25558