From 2a1d1fd31b58ae19e60464fa88ce476e0358e45b Mon Sep 17 00:00:00 2001
From: Keith McCammon <keith@mccammon.org>
Date: Sun, 21 Oct 2018 11:31:17 -0600
Subject: [PATCH] macOS and Linux connection proxy test

Configure basic connection proxy on macOS or Linux using http_proxy or
https_proxy environment variables.
---
 atomics/T1090/T1090.yaml | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 atomics/T1090/T1090.yaml

diff --git a/atomics/T1090/T1090.yaml b/atomics/T1090/T1090.yaml
new file mode 100644
index 00000000..0829f135
--- /dev/null
+++ b/atomics/T1090/T1090.yaml
@@ -0,0 +1,34 @@
+---
+attack_technique: T1090
+display_name: Connection Proxy
+
+atomic_tests:
+- name: Connection Proxy
+  description: |
+    Enable traffic redirection.
+
+    To undo changes made by this test:
+      unset http_proxy
+      unset https_proxy
+
+    Note that this test may conflict with pre-existing system configuration.
+
+  supported_platforms:
+    - macos
+    - linux
+
+  input_arguments:
+    proxy_server:
+      description: Proxy server URL (host:port)
+      type: url
+      default: 127.0.0.1:8080
+
+    proxy_scheme:
+      description: Protocol to proxy (http or https)
+      type: string
+      default: http
+
+  executor:
+    name: sh
+    command: |
+      export #{proxy_scheme}_proxy=#{proxy_server}