Skip to content

v0.5.0-SchemaSauce - Schema/Timing Enhancements

Compare
Choose a tag to compare
@ImpostorKeanu ImpostorKeanu released this 03 Mar 17:17
· 26 commits to master since this release

Significant enhancements accompany this release:

New Functionality

Prioritization

  • Specific username and password values can be "prioritized", i.e. guessed before others, to place emphasis on high-value targets.

Username Deactivation

  • If a username is found to be invalid during an attack, it can be "deactivated" -- removing it from additional guesses.
  • The username is still maintained in the database to ensure that it is not put back into the line of fire due to subsequent imports to the database.

Blackout Window

  • A window of time where no guesses should occur can now be configured.
  • This allows operators to configure attacks to occur during set testing hours, such as 17:00:00-09:00:00.
  • Only a single blackout period can be set currently.

Timezone Support

  • Specific timezones can now be applied.
  • This assists in situations where the target environment resides in a distinct timezone and an operator would like to ensure that timing configurations like a blackout window aren't botched by mistake.
  • Warning: Do not change timezones between attacks. Logic to shift between zones has not been implemented.

Schema/SQL Query Enhancements

Faster Imports

  • I'm bad at SQL.
  • Forced myself to sit down and look at queries to make imports more efficient.
  • Imports of large files consisting of 25,000 values now occurs quickly.
  • Drawing associations between large imports such as the one described above now happens within seconds instead of minutes.

Faster Queries

  • Additional database tables have been implemented in an effort to speed up queries.
  • In reality, nearly all queries have been restructured to conform to the latest SQLAlchemy stuffs.