ait-aecid / kyoushi-environment Goto Github PK

Some of the SSH user state machines have the following error events in the sm.log files:

{"current_state": "ssh_executing_chain", "exception": "Traceback (most recent call last):\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/cr_kyoushi/simulation/sm.py\", line 203, in execute_step\n self.execute_transition(log)\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/cr_kyoushi/simulation/sm.py\", line 155, in execute_transition\n log, self.current_state, self.context\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/cr_kyoushi/simulation/transitions.py\", line 144, in execute\n self.transition_function(log, current_state, context, self.target)\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/cr_kyoushi/statemachines/ssh_user/actions.py\", line 261, in execute_command\n user.output = _receive(log, user.shell, expect)\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/cr_kyoushi/statemachines/ssh_user/actions.py\", line 40, in _receive\n output_part = shell.recvS()\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/pwnlib/tubes/tube.py\", line 1407, in wrapperS\n return packing._decode(func(self, *a, **kw))\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/pwnlib/tubes/tube.py\", line 105, in recv\n return self._recv(numb, timeout) or b''\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/pwnlib/tubes/tube.py\", line 183, in _recv\n if not self.buffer and not self._fillbuffer(timeout):\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/pwnlib/tubes/tube.py\", line 154, in _fillbuffer\n data = self.recv_raw(self.buffer.get_fill_size())\n File \"/opt/kyoushi/simulation/ait.beta_user/lib/python3.7/site-packages/pwnlib/tubes/process.py\", line 686, in recv_raw\n raise EOFError\nEOFError", "level": "error", "message": "State machine execution failure", "run": "e0e7085b-7a37-4eb9-bad7-e64600b2d70e", "target": "ssh_sudo_check", "timestamp": 1641610053.623244, "transition": "ssh_exec_command", "transition_id": "dcb55624-4413-4896-bfb8-97f98912501d"}

It seems that remote users do not log in via VPN, at least I could not find any activities in the VPN logs. Maybe there is a bug in the user state machine, but this needs to be confirmed by checking the code and trying it out.

I noticed that there are many "all relevant MX records point to non-existent hosts" messages in the exim mainlog files; many emails are not correctly sent. This might be due to a DNS issue.

It would be good to have the possibility to automatically check if all services are available, the users are running as expected, and the attacks can be executed, after deploying a testbed, with low manual effort.

As implemented in ait-aecid/kyoushi-generator#6 the generators should be prefixed.