EAGLE: Emulated Attack Generator with Logic Engine

1.

Innostage | Cyberpoligon | Daniil R. & Dmitrii M.
EAGLE: Emulated
Attack Generator with
Logic Engine
1
Is a system for automatic generation and
execution of attack scenarios within a cyber
range.

2.

PROJECT CONTEXT
2
What are we solving?

3.

Cybersecurity terminology
❖
Red & Blue Teams
❖
MITTRE ATT&CK
❖
Kill Chain
Reconnaissance
Weaponization
Delivery
Exploitation
3
Installation
C&C
Exfiltration

4.

Matrix, yeah

5.

MITTRE ATT&CK
Reconnaissance
❖
Tactics, techniques and procedures (TTPs)
❖
Threat Detection
❖
Defense
❖
Response Planning
T1595.003
Wordlist Scanning
gobuster/ffuf
5

6.

Cyberrange
❖
Safe environment
❖
Educational purposes
❖
Hypothesis testing
❖
Research
6

7.

Prey Infrastructure
❖
Part of Cyberrange
❖
Predefined vulnerable hosts/services
❖
Connected somehow
7

8.

Attacker Infrastructure
❖
Part of Cyberrange
❖
Machines for attack purposes
❖
Tools (nmap, whoami, hydra etc.)
8

9.

MCP Is Dead - Long Live LLMs
❖
We refused this idea…
❖
Why?
❖
Other options?
❖
It’s actually sad
9

10.

REQUIREMENTS
What functionality we need?
10

11.

Functionality
❖
TTP selection
❖
Tools output
❖
Save in database
❖
Replicability
11

12.

TOOL STACK
❖
FastAPI - Backend
❖
ReactJS - Frontend
❖
MongoDB - database
❖
and bunch of others…
12

13.

DEMO
Are you ready? Because we’re not
13

14.

Video
14

15.

TEAM
They struggled for peoples smiles
15

16.

TEAM
❖
Arseniy Boiko [@demonit4028] - Mythic C2 & Prey Infra; main struggle
❖
Vadim Poponnikov [@VShanmay] - Backend & User Guide; cutie patootie
❖
Ruslan Golovanov [@ruslangolovanov] - Frontend; meme generator
❖
Nikita Serov [@S_Neka] - Database God
❖
Evgeniy Pestrovskiy [@senyagey] - MCP struggler
❖
Babak Huseynov [@poincare] - Product Manager; did nothing & wants mills
16

17.

USEFULNESS
And who the hell will use MVP on prod?
17

18.

ROADMAP
Middle Earth by J.R.R. Tolkien
18

19.

ROADMAP
MVP v1
MVP v3
MongoDB, nginx,
frontend and other
huge bugs
bunch of bug fixes
and tech stack
understanding
GOD HELP US
WITH LLMs
MVP v0
MVP v2
19

20.

LINK
https://gitlab.pg.innopolis.university/eagle/eagle
20