Infection Monkey
 
	Data center Security Testing Tool
 
	Welcome to the Infection Monkey!
 
	The Infection Monkey is an open source security tool for testing a data center's resiliency to perimeter breaches and internal server infection. The Monkey uses various methods to self propagate across a data center and reports success to a centralized Monkey Island server.
 
	 
	 
	 
 
	The Infection Monkey is comprised of two parts:
 
		Monkey - A tool which infects other machines and propagates to them
	
	
		Monkey Island - A dedicated server to control and visualize the Infection Monkey's progress inside the data center
	
	To read more about the Monkey, visit http://infectionmonkey.com
 
	 
 
	Main Features
 
	The Infection Monkey uses the following techniques and exploits to propagate to other machines.
 
		Multiple propagation techniques:
		
				Predefined passwords
			
			
				Common logical exploits
			
			
				Password stealing using Mimikatz
			
		
	
		Multiple exploit methods:
		
				SSH
			
			
				SMB
			
			
				RDP
			
			
				WMI
			
			
				Shellshock
			
			
				Conficker
			
			
				SambaCry
			
			
				Elastic Search (CVE-2015-1427)
			
		
	 
 
	Setup
 
	Check out the Setup page in the Wiki or a quick getting started guide.
 
	 
 
	Building the Monkey from source
 
	If you want to build the monkey from source, see Setup and follow the instructions at the readme files under infection_monkey and monkey_island.
 
	 
 
	Download: monkey-develop.zip
 
	or:
 
git clone https://github.com/guardicore/monkey.git
	 
 
	Source