Unleash the Infection Monkey: A Modern Alternative to Pen-Tests
summary
Open source Infection Monkey runs as a self‑propagating VM, a CNC Monkey Island server and an orchestration Monkey Business that seeds islands across subnets. It scans, fingerprints and uses safe exploits (password‑guessing SSH, service‑specific exploits added to the repo) to propagate, tunnel CNC traffic and map lateral paths. In one customer run it compromises 111 of 176 machines over several hours using >30 tunnels; kill switches and config limits exist.
AI-written summary · about
chapters (10)
- 0:00Introduction
- 0:38The infection monkey concept
- 2:24Testing network security
- 4:34Monkey components
- 6:36How the tool operates
- 9:32Case study results
- 10:33Live demo and UI
- 14:08Tool benefits and competition
- 16:14Q&A session
- 29:17Closing remarks
related talks
20mDefending Your Network with Infection Monkey
39mHow to think like a hacker
13mFreedom of Security
43mGoing Viral for Fun, not Profit
31mConquer the Enterprise from Inside
49mProject Monterey or How I Learned to Stop Worrying and Love the Cloud
24mThese Aren't the Tools You're Looking For: MCP Security Awakens
54mWhere did you find that?