Is it possible to abort a (lateral movement) Hopper assessment after launch?
And what will happen with the Hopper “agent” if the agent was able to jumpe to let say 3 server? Will the agent kill the Hopper “process” it self if don´t get some kind of “keep-alive” signal back from “mother” Hopper. Or the Hopper will continued to doing task until it don´t get any feedback.
Best answer by ShirazView original
When a Hopper assessment is stopped manually, the stop action proliferates across all networks and machines it has spread to.
Although this may take a few minutes, Hopper will stop doing what it's doing on any machine it has reached.
Regardless, any attack which hasn't received a keep-alive ping, will be summarily shut down by the server.
So I can just kill the Hopper services/process on the machine where I installed the agent? There are nothing like a kill/abort button on the Cymulate dashboard to terminate the running process?
Yeah, that's the gist of it.
Just shut down the assessment from the machine or the app
and Hopper will clean itself up from anywhere it has spread to.
G'day Tony :)