AGENT LIST // ภาพรวม
Agents Total
6
4 online · 2 idle
SYSTEM Priv
3
ระดับผู้ดูแลระบบ
Data Exfil
128 MB
รวมทั้งหมด
Files Taken
42
ไฟล์สำคัญ
| HOSTNAME | IP ADDRESS | OS | STATUS | PRIV | LAST SEEN | ACTIVITY |
|---|---|---|---|---|---|---|
| DESKTOP-USER01 | 203.0.113.42 | Windows 10 x64 | ONLINE | ADMIN | 5m ago | |
| OFFICE-LAPTOP | 203.0.113.88 | Windows 11 x64 | ONLINE | USER | 10m ago | |
| SERVER-PROD | 203.0.113.15 | Ubuntu 22.04 LTS | IDLE | ADMIN | 2h ago | |
| WORKSTATION-04 | 203.0.113.77 | macOS 12.6 | ONLINE | ADMIN | 1m ago | |
| BACKUP-SRV | 203.0.113.50 | CentOS 7.9 | OFFLINE | USER | 6h ago | |
| ROUTER-GW01 | 203.0.113.1 | Linux 5.10 (ARM) | ONLINE | ADMIN | 22s ago |
TASK QUEUE // ภารกิจที่รัน
| TARGET | TASK | STATUS | RESULT | TIME |
|---|---|---|---|---|
| DESKTOP-USER01 | dir_enum | DONE | 142 entries | 14:22:01 |
| OFFICE-LAPTOP | dump_creds | DONE | 6 records | 13:55:47 |
| WORKSTATION-04 | screenshot | RUNNING | — | 15:01:09 |
| ROUTER-GW01 | net_config | DONE | 8.2 MB | 14:48:33 |
| SERVER-PROD | read_passwd | DONE | /etc/passwd | 12:10:02 |
| BACKUP-SRV | keylog_start | FAILED | timeout | 09:33:18 |
EXFIL FILES // ไฟล์ที่ดึงมา
ข้อมูลจำลองทั้งหมด
| PATH | SIZE | SOURCE | TIMESTAMP | TYPE |
|---|---|---|---|---|
| /home/user/.ssh/id_rsa | 1.7 KB | OFFICE-LAPTOP | 2025-08-23 13:41 | SSH_KEY |
| C:\Users\john\Documents\financial.xlsx | 2.4 MB | DESKTOP-USER01 | 2025-08-23 11:17 | DOCUMENT |
| /etc/passwd | 1.8 KB | SERVER-PROD | 2025-08-22 12:10 | SYS_FILE |
| /etc/network/interfaces | 3.2 KB | ROUTER-GW01 | 2025-08-23 14:48 | CONFIG |
| C:\Windows\System32\SAM | 64 KB | DESKTOP-USER01 | 2025-08-23 09:02 | SAM_DB |
CREDENTIALS // บัญชีที่ดึงมา
การโจมตีจำลอง — ข้อมูลปลอม
| SERVICE | USERNAME | PASSWORD | SOURCE | METHOD |
|---|---|---|---|---|
| Gmail | [email protected] | •••••••••••• | DESKTOP-USER01 | BROWSER |
| GitHub | john.dev | •••••••••••• | OFFICE-LAPTOP | KEYLOG |
| AWS Root | [email protected] | •••••••••••• | ROUTER-GW01 | CONFIG |
| PostgreSQL | root | •••••••••••• | SERVER-PROD | MEM_DUMP |
| Outlook | [email protected] | •••••••••••• | WORKSTATION-04 | BROWSER |
| OpenSSH | ubuntu | •••••••••••• | BACKUP-SRV | PRIVKEY |
| WiFi AP | admin | •••••••••••• | ROUTER-GW01 | CONFIG |
| Cisco VPN | vpn_user | •••••••••••• | OFFICE-LAPTOP | KEYLOG |