Implement Mitre Caldera API to communicate with Sandcat agents #521
Conversation
Summary: buck build //security/redteam/purple_team/ttpforge:ttpforge --out ttpforge buck run //security/redteam/purple_team/ttpforge:ttpforge -- serve Differential Revision: D59696048
inesusvet
requested review from
d3sch41n,
cedowens,
d0n601,
CrimsonK1ng and
RoboticPrism
as code owners
|
This pull request was exported from Phabricator. Differential Revision: D59696048 |
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| return | ||
| } | ||
| fullFilePath := cwd + "/" + filePath | ||
| if _, err := os.Stat(fullFilePath); err != nil { |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
| w.Header().Set("Filename", filePath) | ||
|
|
||
| // Serve the file | ||
| http.ServeFile(w, r, filePath) |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
|
|
||
| // Create a new file on disk | ||
| dstDir := fmt.Sprintf("%s/uploads/%s", cwd, agentID) | ||
| err = os.MkdirAll(dstDir, os.ModePerm) |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
| return | ||
| } | ||
| dst := fmt.Sprintf("%s/%s", dstDir, fh.Filename) | ||
| out, err := os.Create(dst) |
Check failure
Code scanning / CodeQL
Uncontrolled data used in path expression High
Summary:
buck build //security/redteam/purple_team/ttpforge:ttpforge --out ttpforge
buck run //security/redteam/purple_team/ttpforge:ttpforge -- serve
Differential Revision: D59696048