Code

icc23, timescale, cct ecsc23/24#44

Code

Open

liskaant wants to merge 151 commits intoOpenAttackDefenseTools:masterOpenAttackDefenseTools/tulip:masterfrom CzechCyberTeam:developCzechCyberTeam/tulip-public:developCopy head branch name to clipboard

+5,564-1,476

Commits

Commits on Jun 5, 2023

• Add disclaimer to README.md

  RickdeJager

  committed
  063c269

  Copy full SHA for 063c269

Commits on Jul 3, 2023

• add prototype version of flag charts

  s3np41k1r1t0

  committed
  0b4f99a

  Copy full SHA for 0b4f99a

Commits on Jul 4, 2023

• change line graph to bar graph

  s3np41k1r1t0

  committed
  1b2f5d6

  Copy full SHA for 1b2f5d6

Commits on Jul 5, 2023

• add number of flag in/out per flow to database

  s3np41k1r1t0

  committed
  0657ea5

  Copy full SHA for 0657ea5

• add stats endpoint

  s3np41k1r1t0

  committed
  ae9eb42

  Copy full SHA for ae9eb42

• oopsie remove debug

  s3np41k1r1t0

  committed
  2f05507

  Copy full SHA for 2f05507

Commits on Jul 6, 2023

• chore: port pkappa converters

  TrixterTheTux

  committed
  e63bb8f

  Copy full SHA for e63bb8f

Commits on Jul 7, 2023

• Use TULIP_MONGO env for mongo service

  MrQubo

  committed
  64019fc

  Copy full SHA for 64019fc

• feat: proof of concept for decoders

  TrixterTheTux

  committed
  79a963e

  Copy full SHA for 79a963e

• add more tags

  s3np41k1r1t0

  committed
  c3cb320

  Copy full SHA for c3cb320

• Merge pull request OpenAttackDefenseTools#12 from team-europe/feature/bruno-traffic-stats

  Show description for c377c64
  s3np41k1r1t0

  authored
  c377c64

  Copy full SHA for c377c64

• Merge branch 'main' into feature/flag-graphs

  s3np41k1r1t0

  committed
  17a2a21

  Copy full SHA for 17a2a21

• Keyboard flow navigation _mostly_ works

  Sijisu

  committed
  c51c91b

  Copy full SHA for c51c91b

• Keyboard flow navigation works, closes OpenAttackDefenseTools#6, thanks @Trixter :)

  Sijisu

  committed
  31e5487

  Copy full SHA for 31e5487

• Frontend: Cosmetic FlowList changes

  Sijisu

  committed
  b7359d4

  Copy full SHA for b7359d4

• Frontend: FlowList: dont overflow

  Sijisu

  committed
  23baf5d

  Copy full SHA for 23baf5d

Commits on Jul 12, 2023

• add support to group stats by tick

  s3np41k1r1t0

  committed
  d16bddc

  Copy full SHA for d16bddc

• update frontend to match new stats api

  s3np41k1r1t0

  committed
  d991897

  Copy full SHA for d991897

• match column colors with tag colors

  s3np41k1r1t0

  committed
  f02a8eb

  Copy full SHA for f02a8eb

• fix typescript index error

  s3np41k1r1t0

  committed
  5cd2bc8

  Copy full SHA for 5cd2bc8

• Frontend: Added global shortcuts

  Sijisu

  committed
  92750c4

  Copy full SHA for 92750c4

• Frontend: Added searchbox jump shortcuts

  Sijisu

  committed
  179cd9a

  Copy full SHA for 179cd9a

Commits on Jul 13, 2023

• Frontend: Added download icon for pcaps

  Sijisu

  committed
  d40cb23

  Copy full SHA for d40cb23

• Frontend: Added reload keyboard shortcut

  Sijisu

  committed
  82ba7dd

  Copy full SHA for 82ba7dd

• Frontend: Attempt to scroll to opened flow possition in FlowList

  Sijisu

  committed
  37792a2

  Copy full SHA for 37792a2

• Frontend: Check if have *some* result before scrolling

  Sijisu

  committed
  cc474b8

  Copy full SHA for cc474b8

• Frontend: flag in/out shortcuts

  Sijisu

  committed
  32b5657

  Copy full SHA for 32b5657

• Frontend: added shortcut reference

  Sijisu

  committed
  7bc35e5

  Copy full SHA for 7bc35e5

• Frontend: better shortcut reference

  Sijisu

  committed
  47089c0

  Copy full SHA for 47089c0

• Frontend: added in flow shortcut movement

  Sijisu

  committed
  f915d0d

  Copy full SHA for f915d0d

• Frontend: flow shortcut movement fixes

  Sijisu

  committed
  39f3243

  Copy full SHA for 39f3243

• Frontend: last 5 ticks shortcut

  Sijisu

  committed
  b1eb5f2

  Copy full SHA for b1eb5f2

• Frontend: clear time filter shortcut, happy enough to close OpenAttackDefenseTools#15

  Sijisu

  committed
  410bc81

  Copy full SHA for 410bc81

Commits on Jul 14, 2023

• Add PCAP-over-IP and BPF Support to assembler

  

  MaxGroot

  authored and

  Sijisu

  committed
  9ae4ed6

  Copy full SHA for 9ae4ed6

• change tags order

  s3np41k1r1t0

  committed
  70d2657

  Copy full SHA for 70d2657

• Merge pull request OpenAttackDefenseTools#16 from team-europe/feature/flag-graphs

  Show description for 9d7c15d
  s3np41k1r1t0

  authored
  9d7c15d

  Copy full SHA for 9d7c15d

• Add option to tag flows based on flowbits

  Show description for 8b04468
  

  MaxGroot

  authored and

  Sijisu

  committed
  8b04468

  Copy full SHA for 8b04468

• Add option to exclude flows based on a tag

  Show description for eba98b9
  

  MaxGroot

  authored and

  Sijisu

  committed
  eba98b9

  Copy full SHA for eba98b9

• Frontend: fixed vim muscle memory issues

  Sijisu

  committed
  82f7763

  Copy full SHA for 82f7763

Commits on Jul 15, 2023

• Frontend: download flow/body as file, close OpenAttackDefenseTools#14

  Sijisu

  committed
  8cf5e36

  Copy full SHA for 8cf5e36

• Frontend: prepare for other body types

  Sijisu

  committed
  f3b262e

  Copy full SHA for f3b262e

• Added search highlight

  

  joonatanjak

  authored and

  Sijisu

  committed
  45d9ed2

  Copy full SHA for 45d9ed2

• Frontend: tweak search text highlighting

  Sijisu

  committed
  7bb0758

  Copy full SHA for 7bb0758

• Frontend: fix FlowList shortcut docs

  Sijisu

  committed
  78dd966

  Copy full SHA for 78dd966

• Frontend: add shortcut cb deps & remove extra whitespace in highlight

  Sijisu

  committed
  7e4d75b

  Copy full SHA for 7e4d75b

• Frontend: add basic not found error handling

  Sijisu

  committed
  0125010

  Copy full SHA for 0125010

• frontend: bring back FlowView undefined check

  Sijisu

  committed
  d9edafe

  Copy full SHA for d9edafe

• frontend: but to the correct place :P

  Sijisu

  committed
  684ce77

  Copy full SHA for 684ce77

Commits on Jul 19, 2023

• small qol changes in flags and tags graphs

  Show description for 52d9629
  s3np41k1r1t0

  committed
  52d9629

  Copy full SHA for 52d9629

Commits on Jul 21, 2023

• feat: initial version of under attack graph

  TrixterTheTux

  committed
  0492690

  Copy full SHA for 0492690

Commits on Jul 25, 2023

• Search and flag highlighting

  Sijisu

  committed
  952154a

  Copy full SHA for 952154a

• Merge pull request OpenAttackDefenseTools#19 from team-europe/foxit-feature-prs

  Show description for d5bfe2d
  RickdeJager

  authored
  d5bfe2d

  Copy full SHA for d5bfe2d

• Merge pull request OpenAttackDefenseTools#24 from team-europe/sijisu/flag-highlighting

  Show description for 89c7d17
  RickdeJager

  authored
  89c7d17

  Copy full SHA for 89c7d17

• Add fix for tip toe + test pcap

  RickdeJager

  committed
  dbb698c

  Copy full SHA for dbb698c

Commits on Jul 26, 2023

• Apply suggestions from code review

  Show description for 376f972
  

  MaxGroot

  and

  Sijisu

  committed
  376f972

  Copy full SHA for 376f972

• Apply logic fixes from code review

  Show description for efcb239
  

  Sijisu

  and

  KristinnVikar

  committed
  efcb239

  Copy full SHA for efcb239

• Merge branch 'main' into feature/trixter-under-attack

  RickdeJager

  committed
  a418710

  Copy full SHA for a418710

• Merge pull request OpenAttackDefenseTools#20 from team-europe/feature/trixter-under-attack

  Show description for 17d50ae
  RickdeJager

  authored
  17d50ae

  Copy full SHA for 17d50ae

Commits on Jul 27, 2023

• Add visualizer environment variable to docker compose

  RickdeJager

  committed
  4f516cd

  Copy full SHA for 4f516cd

• feat: refresh under attack data every 30s

  TrixterTheTux

  committed
  6b894dc

  Copy full SHA for 6b894dc

Commits on Jul 28, 2023

• Frontend: remove forgotten console logs

  Sijisu

  committed
  f7973a0

  Copy full SHA for f7973a0

• Frontend: nicer HTTP session tracking UI

  Sijisu

  committed
  770f108

  Copy full SHA for 770f108

• Frontend: better miss some highlighting, than break complex queries

  Sijisu

  committed
  54ba79c

  Copy full SHA for 54ba79c

• Allow for multiple representations

  RickdeJager

  committed
  1d04d1e

  Copy full SHA for 1d04d1e

• refactor: use worker pools, use msgpack over json

  TrixterTheTux

  committed
  76ab2ce

  Copy full SHA for 76ab2ce

• Merge remote-tracking branch 'origin/feature/rdj-db-changes' into feature/trixter-decoders

  Show description for dde2e55
  TrixterTheTux

  committed
  dde2e55

  Copy full SHA for dde2e55

• refactor: introduce RawData (and sync code from laptop to pc, this is mostly broke)

  TrixterTheTux

  committed
  a64fc31

  Copy full SHA for a64fc31

• fix: properly deal with additional flow representations

  TrixterTheTux

  committed
  b886609

  Copy full SHA for b886609

• jetbrains pls

  TrixterTheTux

  committed
  681e299

  Copy full SHA for 681e299

• feat(converters): timeout, recovery, parallelization

  TrixterTheTux

  committed
  dcad62c

  Copy full SHA for dcad62c

Commits on Jul 30, 2023

• Frontend: implemented decoder repr selection

  Sijisu

  committed
  4f1a151

  Copy full SHA for 4f1a151

• Frontend: added explicit time display, so we can see patterns even above 10s of length

  Sijisu

  committed
  7644d83

  Copy full SHA for 7644d83

• feat(converters): minimize loss in case of timeout/crash

  TrixterTheTux

  committed
  25bb0dd

  Copy full SHA for 25bb0dd

Commits on Jul 31, 2023

• fix: pipeline stages not being respected

  TrixterTheTux

  committed
  8b0484b

  Copy full SHA for 8b0484b

• Frontend: clarify tooltip

  Sijisu

  committed
  5966865

  Copy full SHA for 5966865

• Frontend: add support for diffing different reprs + bug fixes

  Sijisu

  committed
  10ea749

  Copy full SHA for 10ea749

• fix: remove content-encoding header if the encoding is changed

  TrixterTheTux

  committed
  98d0f30

  Copy full SHA for 98d0f30

• Frontend: add repr switch shortcut

  Sijisu

  committed
  28383de

  Copy full SHA for 28383de

• Frontend: update shortcuts

  Sijisu

  committed
  956591d

  Copy full SHA for 956591d

• Frontend: add quick repr diff

  Sijisu

  committed
  ece4d8e

  Copy full SHA for ece4d8e

• Merge branch 'feature/trixter-decoders'

  Sijisu

  committed
  26abfec

  Copy full SHA for 26abfec

• Fix inverted err branch in http_session_tracking

  RickdeJager

  committed
  e3dff33

  Copy full SHA for e3dff33

• Merge branch 'enhancement/http-session-tracking'

  Sijisu

  committed
  068e13c

  Copy full SHA for 068e13c

• Merge branch 'main' into feature/rdj-assembler-sanitizer

  RickdeJager

  authored
  91dbb98

  Copy full SHA for 91dbb98

• Merge pull request OpenAttackDefenseTools#25 from team-europe/feature/rdj-assembler-sanitizer

  Show description for bd0c30a
  RickdeJager

  authored
  bd0c30a

  Copy full SHA for bd0c30a

• Frontend: fix a merge issue

  Sijisu

  committed
  c85ed01

  Copy full SHA for c85ed01

• Python: fix import consts

  Sijisu

  committed
  df905b9

  Copy full SHA for df905b9

Commits on Aug 1, 2023

• Python: fixes, edit the exploit templates to reflect ataka variable names, hide data when uniused

  Sijisu

  committed
  627c93a

  Copy full SHA for 627c93a

• Merge pull request OpenAttackDefenseTools#30 from team-europe/sijisu/template-fixes

  Show description for 3ff8b02
  RickdeJager

  authored
  3ff8b02

  Copy full SHA for 3ff8b02

• Add all changes from the local infra patch

  RickdeJager

  committed
  557d569

  Copy full SHA for 557d569

Commits on Aug 17, 2023

• Merge branch 'feature-assembler' into develop

  liskaant

  committed
  d2aef8e

  Copy full SHA for d2aef8e

Commits on Aug 22, 2023

• assembler: add option to dump received packets into new PCAPs

  liskaant

  committed
  d82a9e8

  Copy full SHA for d82a9e8

• Merge branch 'feature-dump-pcaps' into develop

  liskaant

  committed
  3cb2480

  Copy full SHA for 3cb2480

Commits on Aug 25, 2023

• Merge branch 'feature-qol' into develop

  liskaant

  committed
  1537eb9

  Copy full SHA for 1537eb9

Commits on Sep 23, 2023

• Merge remote-tracking branch 'tulip-private/develop'

  Sijisu

  committed
  3e88e6a

  Copy full SHA for 3e88e6a

• Merge remote-tracking branch 'tulip-public/master'

  Sijisu

  committed
  b6c98b1

  Copy full SHA for b6c98b1

Commits on Oct 2, 2023

• migrate to timescaledb

  liskaant

  committed
  89008af

  Copy full SHA for 89008af

Commits on Oct 4, 2023

• finalize search, tags and fingerprints

  liskaant

  committed
  8682b8c

  Copy full SHA for 8682b8c

Commits on Oct 10, 2023

• fix max assembler concurrency

  liskaant

  committed
  e79ac6b

  Copy full SHA for e79ac6b

• add tick bucket sql functions

  liskaant

  committed
  9f23831

  Copy full SHA for 9f23831

• fix utf8 decoding in frontend

  liskaant

  committed
  f327394

  Copy full SHA for f327394

• finish indexing

  liskaant

  committed
  7d49439

  Copy full SHA for 7d49439

Commits on Oct 11, 2023

• fix suricata signature insert

  liskaant

  committed
  94a550d

  Copy full SHA for 94a550d

• optimize enricher tags

  liskaant

  committed
  cdb32d8

  Copy full SHA for cdb32d8

Commits on Oct 13, 2023

• Fix flowitem time representation

  Sijisu

  committed
  79243ec

  Copy full SHA for 79243ec

Commits on Oct 16, 2023

• fix pcap position marking

  liskaant

  committed
  b4003a1

  Copy full SHA for b4003a1

Commits on Nov 24, 2023

• improve regex search indexing

  liskaant

  committed
  7d977d0

  Copy full SHA for 7d977d0

Commits on May 21, 2024

• some forgotten stuff from ecsc2023

  liskaant

  committed
  c112abe

  Copy full SHA for c112abe

• compose: restart services unless-stopped

  liskaant

  committed
  65e6405

  Copy full SHA for 65e6405

Commits on May 23, 2024

• fix(compose): dont expose api

  liskaant

  committed
  d2f282c

  Copy full SHA for d2f282c

Commits on Jul 12, 2024

• Merge icc23 changes into public

  liskaant

  committed
  00276a4

  Copy full SHA for 00276a4

Commits on Jul 19, 2024

• Merge branch 'feature-timescale' into icc23

  liskaant

  committed
  5398bdc

  Copy full SHA for 5398bdc

Commits on Sep 2, 2024

• Fix flow indexing (for last character of flow)

  Show description for e4cb665
  Hackrrr

  committed
  e4cb665

  Copy full SHA for e4cb665

• Fix UDP flow insert

  Show description for c78f0b4
  Hackrrr

  committed
  c78f0b4

  Copy full SHA for c78f0b4

Commits on Sep 3, 2024

• Merge pull request OpenAttackDefenseTools#18 from CzechCyberTeam/hackrrr-assembler-fixes

  Show description for d1809c4
  liskaant

  authored
  d1809c4

  Copy full SHA for d1809c4

• fix bug causing only the last tag to upsert to tags table

  

  honzakucera

  authored and

  liskaant

  committed
  c30a561

  Copy full SHA for c30a561

• fix bux causing http decoders (gzip,brotli) output not to save to parsed packet

  

  honzakucera

  authored and

  liskaant

  committed
  b63bfb7

  Copy full SHA for b63bfb7

• modify dockerfiles for faster builds

  

  honzakucera

  authored and

  liskaant

  committed
  c2552d4

  Copy full SHA for c2552d4

Commits on Sep 6, 2024

• fix shutdown signals in api and frontend

  honzakucera

  committed
  71d8e53

  Copy full SHA for 71d8e53

Commits on Sep 7, 2024

• Merge pull request OpenAttackDefenseTools#20 from CzechCyberTeam/flagisallus-stop-signal-fix

  Show description for ba42fea
  liskaant

  authored
  ba42fea

  Copy full SHA for ba42fea

• Add initial support for fake flag feature

  

  Hackrrr

  authored and

  liskaant

  committed
  0bcce4d

  Copy full SHA for 0bcce4d

• Add DummyFlagValidator

  

  Hackrrr

  authored and

  liskaant

  committed
  a1e0a1b

  Copy full SHA for a1e0a1b

• Add Enowars flag validator

  

  Hackrrr

  authored and

  liskaant

  committed
  114b5eb

  Copy full SHA for 114b5eb

• Fix null pointer dereference with UDP assembler

  

  Hackrrr

  authored and

  liskaant

  committed
  3e59a99

  Copy full SHA for 3e59a99

• Configurable fake-flag feature via flags/env

  

  Hackrrr

  authored and

  liskaant

  committed
  44fede8

  Copy full SHA for 44fede8

• Remove prefix length requirement as we don't need it

  

  Hackrrr

  authored and

  liskaant

  committed
  e6a473f

  Copy full SHA for e6a473f

• Better time parsing for flag validator

  

  Hackrrr

  authored and

  liskaant

  committed
  2a3bd8e

  Copy full SHA for 2a3bd8e

• Make fake-flag feature completely configurable via env

  

  Hackrrr

  authored and

  liskaant

  committed
  58f8ef4

  Copy full SHA for 58f8ef4

• Add ITAD flag validator

  

  Hackrrr

  authored and

  liskaant

  committed
  0a74f92

  Copy full SHA for 0a74f92

• Move tick/time handling stuff to separate file

  

  Hackrrr

  authored and

  liskaant

  committed
  4c85d37

  Copy full SHA for 4c85d37

• Update flow header (FlowOverview)

  Show description for 2a98102
  

  Hackrrr

  authored and

  liskaant

  committed
  2a98102

  Copy full SHA for 2a98102

• Fixed/Upgraded regex highlighting

  Show description for dbef393
  

  Hackrrr

  authored and

  liskaant

  committed
  dbef393

  Copy full SHA for dbef393

• Formatting

  

  Hackrrr

  authored and

  liskaant

  committed
  1cdde2c

  Copy full SHA for 1cdde2c

• Add import json to generated scripts

  Show description for c8ce1e1
  

  Hackrrr

  authored and

  liskaant

  committed
  c8ce1e1

  Copy full SHA for c8ce1e1

• Fallback to raw data when generating requests scripts

  Show description for 5f01886
  

  Hackrrr

  authored and

  liskaant

  committed
  5f01886

  Copy full SHA for 5f01886

• Remove obsolete tests.py

  

  Hackrrr

  authored and

  liskaant

  committed
  875eb86

  Copy full SHA for 875eb86

• Formatting + making typecheckers happy

  

  Hackrrr

  authored and

  liskaant

  committed
  e01b57b

  Copy full SHA for e01b57b

• Simplify/Refactor data2req.py

  

  Hackrrr

  authored and

  liskaant

  committed
  5c87ad9

  Copy full SHA for 5c87ad9

• Print response for last request in generated requests scripts

  Show description for f3b7360
  

  Hackrrr

  authored and

  liskaant

  committed
  f3b7360

  Copy full SHA for f3b7360

• Add ability to export single non-first request

  Show description for ca08494
  

  Hackrrr

  authored and

  liskaant

  committed
  ca08494

  Copy full SHA for ca08494

• Print every response

  

  Hackrrr

  authored and

  liskaant

  committed
  4973136

  Copy full SHA for 4973136

• Put also flags and flagids on one line

  

  Hackrrr

  authored and

  liskaant

  committed
  641af15

  Copy full SHA for 641af15

Commits on Sep 23, 2024

• Fix starring visual bug

  Show description for b535c32
  Hackrrr

  committed
  b535c32

  Copy full SHA for b535c32

Commits on Sep 26, 2024

• Remove old/unused tags filter state

  Hackrrr

  committed
  b148979

  Copy full SHA for b148979

• Add tag intersection mode(s)

  Show description for d5d0b4a
  Hackrrr

  committed
  d5d0b4a

  Copy full SHA for d5d0b4a

• Update ITAD flag validator with service number

  Hackrrr

  committed
  12c7b88

  Copy full SHA for 12c7b88

Commits on Sep 27, 2024

• fix(webservice): deduplicate flows from flow_index

  liskaant

  committed
  47a132e

  Copy full SHA for 47a132e

Commits on Oct 6, 2024

• run flagids service directly

  honzakucera

  committed
  9f5e978

  Copy full SHA for 9f5e978

Commits on Nov 29, 2024

• fix(flagids): remove container restart loop

  liskaant

  committed
  a8d4799

  Copy full SHA for a8d4799

• chore(config): add more descriptions and default values

  liskaant

  committed
  5c115c2

  Copy full SHA for 5c115c2

• fix(frontend): urls with http credentials broke api in chrome

  liskaant

  committed
  321c5a3

  Copy full SHA for 321c5a3