knacky/mimic
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat(backend): default verify_tls to false for lab/redteam Mythic

Browse Source 
flip default to False at model, API fallback, adapter, and factory layers.
add migration 0008 flipping c2_config.verify_tls server_default to false.
suppress urllib3 InsecureRequestWarning when verify_tls is off.
adapt c2 tests to new verify_tls default.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Knacky
2026-06-21 21:03:05 +02:00
parent ee5fda6059
commit 0fab40b486
6 changed files with 46 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
backend/tests/test_c2_config.py
View File

@@ -206,13 +206,13 @@ def test_get_config_returns_has_token_not_cleartext(
assert "s3cr3t" not in str(body)
def test_get_config_verify_tls_default_true(
def test_get_config_verify_tls_default_false(
client: FlaskClient, admin_token: str
) -> None:
eng = _make_engagement(client, admin_token)
_put_config(client, admin_token, eng["id"])
_put_config(client, admin_token, eng["id"], verify_tls=False)
resp = client.get(f"/api/engagements/{eng['id']}/c2-config", headers=_h(admin_token))
assert resp.get_json()["verify_tls"] is True
assert resp.get_json()["verify_tls"] is False
# ---------------------------------------------------------------------------