Infection Monkey

A data center security testing tool for testing resiliency to perimeter breaches and internal server infection.

Overview

The Infection Monkey is an open source security tool that uses various methods to self-propagate across a data center and reports success to a centralized Monkey Island server. It consists of two parts: the Monkey tool, which infects other machines and propagates to them, and the Monkey Island server, which controls and visualizes the Infection Monkey's progress.

Features

• Multiple propagation techniques:
  • Predefined passwords
  • Common logical exploits
  • Password stealing using Mimikatz
• Multiple exploit methods:
  • SSH
  • SMB
  • WMI
  • Log4Shell
  • Zerologon
  • and more...

Setup

Check out the Setup page and the Getting Started guide in our documentation.

Building from source

To deploy development version of monkey, refer to readme in the deployment scripts folder or follow documentation in documentation hub.

Tests

• Unit tests: Run python -m pytest in the monkey directory.
• Blackbox tests: Refer to envs/monkey_zoo/blackbox/README.md.

License

Copyright (c) Guardicore Ltd. See the LICENSE file for license rights and limitations (GPLv3).

> Visit Infection Monkey Website <