Solved

Abort a running Hopper assessment

  • 22 November 2022
  • 3 replies
  • 85 views

Userlevel 1
Badge +1

Hi 

Is it possible to abort a (lateral movement) Hopper assessment after launch?

And what will happen with the Hopper “agent” if the agent was able to jumpe to let say 3 server? Will the agent kill the Hopper “process” it self if don´t get some kind of “keep-alive” signal back from “mother” Hopper. Or the Hopper will continued to doing task until it don´t get any feedback.

icon

Best answer by Shiraz 22 November 2022, 10:04

View original

3 replies

Userlevel 3
Badge +3

@tonyl 

'Allo mate,
When a Hopper assessment is stopped manually, the stop action proliferates across all networks and machines it has spread to.
Although this may take a few minutes, Hopper will stop doing what it's doing on any machine it has reached.
Regardless, any attack which hasn't received a keep-alive ping, will be summarily shut down by the server.

 

Shiraz,

Product manager

Cymulate

Userlevel 1
Badge +1

Hi.

So I can just kill the Hopper services/process on the machine where I installed the agent? There are nothing like a kill/abort button on the Cymulate dashboard to terminate the running process?

 

 

Tony

Userlevel 3
Badge +3

@tonyl 

Hi Tony!
Yeah, that's the gist of it.

Just shut down the assessment from the machine or the app 

  1. from the rocket icon click “stop”

     

  2. from the Activity center- find the hopper assessment and click “stop”
     

and Hopper will clean itself up from anywhere it has spread to.

G'day Tony :)

 

Shiraz,

Product manager

Cymulate

 

Reply