Infection Monkey — Automated Pentest Tool

This is open source security tool for testing a data center’s resiliency to perimeter breaches and internal server infection. These tool uses various methods to self propagate across a data center and reports success to a centralized Monkey server.

Infection Monkey consists of two parts:

• Monkey — tool which infects other machines and propagates to them
• Monkey Island — server to control and visualize the Infection Monkey’s progress inside the data center

More info we can find in : http://infectionmonkey.com

Main Features

Multiple propagation techniques:

• Predefined passwords
• Common logical exploits
• Password stealing using Mimikatz

Multiple exploit methods:

• SSH
• SMB
• RDP
• WMI
• Shellshock
• Conficker
• SambaCry
• Elastic Search (CVE-2015–1427)

Setup and Wiki

More info about setup You can find in this link.

Resource

guardicore/monkey