Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Credentials failure after using Site.copy #307

Closed
yahanvesh opened this issue Nov 22, 2017 · 3 comments
Closed

Credentials failure after using Site.copy #307

yahanvesh opened this issue Nov 22, 2017 · 3 comments

Comments

@yahanvesh
Copy link

yahanvesh commented Nov 22, 2017

Expected Behavior

I expect copying a site should also copy the saved credentials in the earlier site.

Current Behavior

But i see that after copy a site, if i launch a scan, it fails citing credentials failure and it only works if i agains manually input the password in the form.

@asalazar-r7
Copy link
Contributor

This is part to do with how the console handles credentials. There are 2 types of credentials those tide to a Site and Global ones. With global ones it's a reference and therefore copying credentials is as easy as giving the new site a reference to the credential. With site specific credentials we don't have this reference base because each site will modify it's credential according to its need. This however causes a problem with the copy command as it knows there is a credential on the site you want to copy but the console due to security reasons will not return the password for that credential. When saving a site this looks normal because the save assumes the credential is being saved with a blank password and doesn't know better.

The potential fix to this is to not copy over site credentials as part of the gem.

@yahanvesh
Copy link
Author

Thanks! Im now trying with Global Shared Credentials instead of Site Specific Credentials.
Im getting adhoc errors with ssh authentication, whether its SiteSpecifc or Shared Credentials.
The credential worked sometimes when i used it in SiteSpecific and used Test Connection to verify Authentication succeded.

For SharedCrednetials, i couldnt get it to work so far, getting below ssh errors.
2017-11-22T09:03:01 [INFO] [Thread: Scan 2790897] [Site: TestCreds1] Loaded protocol helper: SSH
2017-11-22T09:12:57 [INFO] [Thread: 10.10.27.196:22/TCP] [Site: TestCreds1] [Preference: 1.0] Attempting handshake via SSH
2017-11-22T09:12:57 [INFO] [Thread: 10.10.27.196:22/TCP] [Site: TestCreds1] [ssh.banner] Matching against banner: OpenSSH_7.5
2017-11-22T09:12:57 [INFO] [Thread: 10.10.27.196:22/TCP] [Site: TestCreds1] Asserting ServiceFingerprint [[certainty=0.9][description=OpenBSD OpenSSH 7.5][family=OpenSSH][product=OpenSSH][protocol=SSH][vendor=OpenBSD][version=7.5]]
2017-11-22T09:12:58 [INFO] [Thread: 10.10.27.196:22/TCP] [Site: TestCreds1] Failed to establish SSH session: com.rapid7.net.NetException: Unsupported KEX: diffie-hellman-group14-sha1

@yahanvesh
Copy link
Author

I believe the issue has something to do with my ssh settings, and not nexpose now. Closing the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants