vysecurity / angrypuppy

Bloodhound Attack Path Automation in CobaltStrike

Hey 👋, I'm vysecurity!

Check my blog at https://vincentyiu.com!

Check my Red Team Tips at https://vysecurity.rocks!

GitHub Sponsor Link at https://github.com/sponsors/vysecurity

About Me

I'm Vincent Yiu, a Cyber Security Director. I lead a team of elite offensive security experts to scrutinise our customers' security posture to enable them to better prepare against their adversaries.

I'm known for Red Teaming, and more specifically the Red Team Tips series which I started. The Red Team Tips series is intended to bring new ideas and inspire the next generation of Red Teamers who may not have frequent access to full-scale Red Team projects.

Career Milestones:

• Founder / Director, SYON Security
• Former Red Team Director, Risk Advisory, Cyber, Deloitte
• Former FusionX, Accenture Security
• Former ActiveBreach, MDSec
• Former MWR InfoSecurity (F-Secure)
• Master's Degree from University of Warwick
• National Cyber Security Challenge (U.K.) Finalist 2015

Languages and Tools

Stats

angrypuppy's Issues

Error line number 360

Show me error in line number 360 label

Dont't Support for jdk10 ?

getToken() does not check domain

The getToken function in ANGRYPUPPY.cna does not check the domain of credentials, giving it a chance of using the wrong credentials if there are two accounts with same username, but different domain.

I'm thinking we may be able to change bhUserToCS-sub in utils.cna to return an array with @($user, $domain), but this poses the issue of different domain representations (e.g. LAB.DOMAIN\user vs LAB\user). May have to normalize this before we perform the check.

Thanks to xan7r for discovering this issue.

Script is broken for jdk 1.14

When trying to load angrypuppy to cobalt strike 4.3 there is an error class jdk.internal.loader.classloaders$appclassloader cannot be cast to class java.net

To replicate the issue

1. setup cobalt strike 4.3
2. openjdk 1.14
3. run angrypuppy install.sh
4. checked correct path is placed at the import statement
5. load angrypuppy.cna
6. Error "class jdk.internal.loader.classloaders$appclassloader cannot be cast to class java.net"

How can this be fixed ?