PowerShell Exploiter - Agent Plugin for Infection Monkey

Introduction

PowerShell Exploiter is an Agent Plugin for Infection Monkey that executes a brute-force attack against a victim through PowerShell Remoting using Windows Remote Management (WinRM) protocol.

For more information, see the PowerShell Exploiter Plugin documentation.

Development

Setting up the development environment

To create the resulting PowerShell archive, follow these steps:

1. Clone the Repository

   $ git clone https://github.com/guardicode/powershell-exploiter.git
   $ cd powershell-exploiter

2. Install development dependencies

   This project uses Poetry for managing dependencies and virtual environments, and pre-commit for managing pre-commit hooks.

   $ pip install pre-commit poetry
   $ pre-commit install -t pre-commit
   $ poetry install

Running the test suite

The test suite can be run with the following command:

poetry run pytest

Building the plugin

To build the plugin, run the Agent Plugin Builder.

poetry run build_agent_plugin .

The build tool will create PowerShell-exploiter.tar, which can be installed in the Monkey Island.