Arsenal: Victim#

Arsenal requires a victim system to Red Team (preferrably) hosting a Machine Learning algorithm or API endpoint.

However, hosting an algorithm is not required, an adversary may be interested in other AI-realted artifacts such as discovering hardware/compute capabilities of an adversary, exfiltrating data hosted on the system, etc. regardless of a hosted algorithm.

Currently, arsenal uses the package ml-vulhub to deploy vulnerable environments.#

An example use-case is an adversary that does reconnaissance on a victim’s system in order to gather information for targeting. Using arsenal within caldera, we can use the ability Gather Information for Remote Services to first investigate a victim system before deploying an agent to that system.

For instance, an agent that first performs remote reconnaissance, running from the Command-and-Control (C2) server could find that at a particular IP address the following services are running, in addition to ML services:

access_1

However, to extract additional resources or ML services, an agent would need to deployed on that vulnerable system.

access_2