Defending Your Network with Infection Monkey
summary
An open source adversary-emulation platform that runs a Monkey Island control server and a propagating agent worm to simulate real attacker behavior without destructive payloads, Infection Monkey executes exploits (ZeroLogon, RDP brute force, SNMP), simulates ransomware and cryptojacking, and produces mapped hop-by-hop reports showing scanned, exploited, and agent-communicating hosts. It triggers EDR/AV for validation, supports plugins so new exploiters ship in days, and distinguishes safe and unsafe exploits with clear warnings.
AI-written summary · about
chapters (22)
- 0:00Introduction
- 0:18Your Network
- 1:05What is Infection Monkey
- 3:00Monkey Island
- 3:40Monkey Agent
- 4:25Running Infection Monkey
- 5:52Security Report
- 6:51Features
- 7:30How to try it
- 7:48How to contribute
- 8:30Zero logon vulnerability
- 9:20Our code was messed up
- 10:00Our code was hard to change
- 10:30Adding an exploiter
- 12:10SNMP exploiter
- 12:38Essence of Open Source
- 14:08Essential Freedoms
- 14:36Open Source Initiative
- 15:58Conclusion
- 16:11Brute Force
- 16:47Infection Monkey vs Scanner
- 18:24Performance
related talks
31mUnleash the Infection Monkey: A Modern Alternative to Pen-Tests
32mHey Attacker! I Can See You!
47mDetecting and analyzing files-less malware
36mCyber Werewolves: Emulating the Enemy Before the Full Moon Rises
33mProactive EDR Against Adaptive Evasion: Countering Self‑Modifying Agentic Malware
49mLeveraging MacOS's Networking Frameworks to Heuristically Detect Malware
26mWhen Models Write Malware: Defending Against On-demand Exploits
45mAutomatic Discovery of Evasion Vulnerabilities Using Targeted Protocol Fuzzing