Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add an endpoint to retrieve plugin manifests #2786

Closed
1 task done
mssalvatore opened this issue Jan 5, 2023 · 0 comments · Fixed by #2814
Closed
1 task done

Add an endpoint to retrieve plugin manifests #2786

mssalvatore opened this issue Jan 5, 2023 · 0 comments · Fixed by #2814

Comments

@mssalvatore
Copy link
Collaborator

mssalvatore commented Jan 5, 2023

Context

The agent's master component needs to be able to determine whether or not a plugin is compatible with the target. Some examples are:

  • The WMI exploiter can only be used to attack a target running Windows
  • The mimikatz credentials collector can only be used if the host OS is Windows

Descriptions

I often think we'd be better off with a GraphQL API. Maybe for Infection Monkey 3.0 🤷‍♂️

In order for the master to determine whether or not a plugin is compatible with a given OS, it needs access to the plugin's manifest. Right now, only the puppet (via the plugin registry) has access to the plugin's manifest. Since plugins could be large, we don't want the master to download the entire plugin. Add a new endpoint that allows only a plugin manifest to be requested from the Island.

Tasks

  • Add a /api/agent-plugins/<string:plugin_type>/<string:name>/manifest endpoint that returns only the plugin's manifest. (0d) @ilija-lazoroski
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant