Ostorlab · 3asm · Mar 5, 2024 · Mar 5, 2024
@@ -1,6 +1,7 @@
 """Asteroid Agent is designed to identify known exploitable vulnerabilities in a remote system. The agent expects a
 message of type `v3.asset.ip.[v4,v6]` or `v3.asset.[domain_name,link]`, and emits back messages of type
 `v3.report.vulnerability` with a technical report."""
+
 import logging
 from rich import logging as rich_logging
 from concurrent import futures
@@ -46,9 +47,9 @@ def __init__(
 
         super().__init__(agent_definition, agent_settings)
         exploits.import_all()
-        self.exploits: list[
-            definitions.Exploit
-        ] = exploits_registry.ExploitsRegistry.values()
+        self.exploits: list[definitions.Exploit] = (
+            exploits_registry.ExploitsRegistry.values()
+        )
 
     def process(self, message: m.Message) -> None:
         """Process messages of type `v3.asset.ip.[v4,v6]` or `v3.asset.[domain_name,link]` and performs a network

@@ -1,4 +1,5 @@
 """Agent Asteriod definitions"""
+
 import abc
 import dataclasses
 

@@ -1,4 +1,5 @@
 """Importer module."""
+
 from agent import importer
 
 import_all = importer.importer_for(__file__, __name__)
@@ -1,4 +1,5 @@
 """Common utilities for the exploits."""
+
 import ipaddress
 
 

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2014-7169"""
+
 import requests
 from ostorlab.agent.kb import kb
 from ostorlab.agent.mixins import agent_report_vulnerability_mixin

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2016-2386"""
+
 import re
 from urllib import parse as urlparse
 

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2018-13382: Not tested on a live target."""
+
 import requests
 from urllib3 import exceptions
 from urllib3 import disable_warnings

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2018-14558"""
+
 import requests
 from ostorlab.agent.kb import kb
 from ostorlab.agent.mixins import agent_report_vulnerability_mixin

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2018-14667"""
+
 import re
 
 import requests

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2018-15133"""
+
 import re
 from urllib import parse as urlparse
 

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2018-7841"""
+
 import requests
 from ostorlab.agent.kb import kb
 from ostorlab.agent.mixins import agent_report_vulnerability_mixin

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2019-12989 and CVE-2019-12991 remarque:not tested on a live target"""
+
 import random
 import logging
 

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2019-7193"""
+
 import re
 
 import requests

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2021-32648. Has the potential to generate false positives."""
+
 import logging
 import random
 import string

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2022_26318"""
+
 import gzip
 
 import requests
@@ -97,11 +98,11 @@ def _build_payload(self) -> bytes:
         )
 
         # shell code
-        payload += b"\x48\xC7\xC2\x30\x00\x00\x00"  # mov rdx,0x30
-        payload += b"\x48\x89\xE6"  # mov rsi,rsp
-        payload += b"\x48\x83\xC6\x2e"  # add rsi,0x2e
-        payload += b"\x48\xC7\xC7\x09\x00\x00\x00"  # mov rdi,0x9
-        payload += b"\x48\xC7\xC0\x01\x00\x00\x00"  # mov rax,0x1
+        payload += b"\x48\xc7\xc2\x30\x00\x00\x00"  # mov rdx,0x30
+        payload += b"\x48\x89\xe6"  # mov rsi,rsp
+        payload += b"\x48\x83\xc6\x2e"  # add rsi,0x2e
+        payload += b"\x48\xc7\xc7\x09\x00\x00\x00"  # mov rdi,0x9
+        payload += b"\x48\xc7\xc0\x01\x00\x00\x00"  # mov rax,0x1
         payload += b"\x0f\x05"  # syscall
         payload += b"\x48\xc7\xc0\x3c\x00\x00\x00"  # mov rax,0x3c
         payload += b"\x48\xc7\xc7\x00\x00\x00\x00"  # mov rdi,0x0

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2021-22941"""
+
 import hashlib
 import re
 import struct

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2023–36845"""
+
 import re
 
 import requests

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2023-43770"""
+
 import re
 from urllib import parse as urlparse
 

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2023-49897."""
+
 import re
 
 import requests

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation for CVE-2024-21733"""
+
 import re
 from urllib import parse as urlparse
 

@@ -1,4 +1,5 @@
 """Agent Asteroid implementation to detect unauthenticated exposed adb"""
+
 import socket
 
 from adb_shell import adb_device

@@ -1,4 +1,5 @@
 """Register for exploits."""
+
 from collections import defaultdict
 from typing import Type, Any
 

@@ -1,4 +1,5 @@
 """Dynamic importer to enable registry pattern."""
+
 import logging
 import sys
 import traceback

@@ -1,4 +1,5 @@
 """Target Preparer Module for Asteroid Agent"""
+
 from typing import Generator
 
 from ostorlab.agent.message import message as m

@@ -1,4 +1,5 @@
 """Unit tests for AsteroidAgent."""
+
 from typing import Type, Iterator
 
 from ostorlab.agent.message import message as m

@@ -1,4 +1,5 @@
 """Pytest fixtures for agent Asteroid"""
+
 import pathlib
 import random
 from typing import Type, Generator

@@ -1,4 +1,5 @@
 """Unit tests for CVE-2014-7169"""
+
 import datetime
 import random
 

@@ -1,4 +1,5 @@
 """Unit tests for CVE-2016-2386"""
+
 import re
 
 import requests_mock as req_mock

@@ -1,4 +1,5 @@
 """Unit tests for Agent Asteroid: CVE-2018-13382"""
+
 import requests_mock as req_mock
 
 from agent import definitions

@@ -1,4 +1,5 @@
 """Unit tests for CVE-2018-14558"""
+
 import datetime
 import random
 

@@ -1,4 +1,5 @@
 """Unit tests for Agent Asteroid: CVE-2018-15133"""
+
 import re
 
 import requests_mock as req_mock

@@ -1,4 +1,5 @@
 """Unit tests for CVE-2018-7841"""
+
 import datetime
 import random
 

@@ -1,4 +1,5 @@
 """Unit tests for CVE-2019-7193"""
+
 import requests_mock as req_mock
 from agent.exploits import cve_2019_7193
 from agent import definitions

@@ -1,4 +1,5 @@
 """Unit tests for Agent Asteriod exploits"""
+
 import re
 
 import requests_mock as req_mock

@@ -1,4 +1,5 @@
 """Unit tests for Agent Asteriod: CVE_2021_32648."""
+
 import re
 
 import requests_mock as req_mock

@@ -1,4 +1,5 @@
 """Unit tests for CVE-2023-22518"""
+
 import re
 
 import requests_mock as req_mock

@@ -1,4 +1,5 @@
 """Unit tests for Agent Asteriod exploits"""
+
 import datetime
 
 import requests

@@ -1,4 +1,5 @@
 """Unit tests for CVE-2023-36845"""
+
 import requests_mock as req_mock
 from agent.exploits import cve_2023_36845
 from agent import definitions

@@ -1,4 +1,5 @@
 """Unit tests for Agent Asteroid: CVE-2023-43770"""
+
 import re
 
 import requests_mock as req_mock

@@ -1,4 +1,5 @@
 """Unit tests for Agent Asteroid: CVE-2024-21733"""
+
 import re
 
 import requests_mock as req_mock

@@ -1,4 +1,5 @@
 """Unit tests for the exploits' registry."""
+
 import collections
 
 from agent import exploits_registry

@@ -1,4 +1,5 @@
 """Unit tests for target preparer"""
+
 from ostorlab.agent.message import message
 import pytest
 from agent import targets_preparer
Original file line number	Diff line number	Diff line change
		@@ -1,4 +1,5 @@
		"""Common utilities for the exploits."""

		import ipaddress


Expand Down