Infection Monkey: Automatic pentest tool

The Infection Monkey is an open source security tool for checking the resilience of a data center to perimeter breaches and internal server breaches.

Monkey uses various methods to self-propagate in a data center and reports success on a Command and Control (C&C) server.

The Infection Monkey consists of two parts:

1. Monkey - A tool that infects other machines and spreads on them
2. Monkey Island - A C&C server with a special UI to display the progress of Chaos Monkey in the data center

Characteristics

• Multiple techniques:
  • Predefined passwords
  • Common logical exploits
  • Password stealing using mimikatz
• Multiple exploits:
  • SSH
  • SMB
  • RDP
  • WMI
  • Shellshock
  • Conficker
  • SambaCry
  • Elastic Search (CVE-2015-1427)

Application snapshots

You will find instructions for installing the program here.

You can download the program from here.