Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ability to choose a service account on linux #1179

Closed
jborozco opened this issue Jul 2, 2024 · 2 comments · Fixed by OpenBAS-Platform/collectors#41 · May be fixed by OpenBAS-Platform/agent#14
Closed

Ability to choose a service account on linux #1179

jborozco opened this issue Jul 2, 2024 · 2 comments · Fixed by OpenBAS-Platform/collectors#41 · May be fixed by OpenBAS-Platform/agent#14
Assignees
@savacano28 @Dimfacion @Jipegien @damgouj
Labels
feature use for describing a new feature to develop

Comments

@jborozco
Copy link

jborozco commented Jul 2, 2024 •
edited by EllynBsc
Loading

Use case

To reproduce real attack environment, I want to be able to execute a custom payload through a non-system user.

After doing a POC and for a first MVP, we want to be able to define a Service Account (first on Linux) for the ability to:

-CRUD a Service account to be used for executing injects on endpoints as an admin
-Execute a payload with elevated privilege by default
@jborozco jborozco added feature use for describing a new feature to develop needs triage use to identify issue needing triage from Filigran Product team and removed needs triage use to identify issue needing triage from Filigran Product team labels Jul 2, 2024
@jborozco jborozco modified the milestones: Release 1.4.0, Release 1.5.0 Jul 2, 2024
@savacano28 savacano28 self-assigned this Aug 19, 2024
@Jipegien Jipegien modified the milestones: Release 1.5.0, Release 1.6.0 Aug 22, 2024
@savacano28 savacano28 removed their assignment Aug 22, 2024
@Jipegien Jipegien self-assigned this Aug 23, 2024
@jborozco jborozco changed the title Ability to choose non-system user to execute a custom payload Ability to choose non-system user to execute a payload Aug 30, 2024
@damgouj damgouj self-assigned this Aug 30, 2024
@Dimfacion Dimfacion self-assigned this Sep 2, 2024
@guillaumejparis guillaumejparis self-assigned this Sep 2, 2024
This was referenced Sep 6, 2024
Draft
Merged
Closed
This was linked to pull requests Sep 9, 2024
[backend] POC Ability to choose non-system user to execute a payload #1396
Closed
[agent] POC Ability to choose non-system user to execute a payload OpenBAS-Platform/agent#14
Draft
[atomic-red-team] add elevation_required param OpenBAS-Platform/collectors#41
Merged
@savacano28
Copy link
Contributor

savacano28 commented Sep 10, 2024 •
edited
Loading

Scope: Paylaod custom, windows, openbas agent : https://www.notion.so/filigran/Ability-to-choose-non-system-user-to-execute-a-payload-91f0f341848e431895a8bfb463703082.
Prs:
Just include elevation_request:
Openbas: #1410
Collector: OpenBAS-Platform/collectors#41

Prs POC:
Openbas: #1396
Agent: OpenBAS-Platform/agent#14
Collector: OpenBAS-Platform/collectors#41

@savacano28 savacano28 mentioned this issue Sep 11, 2024
Merged
5 tasks
@RomuDeuxfois RomuDeuxfois reopened this Sep 17, 2024
@EllynBsc EllynBsc mentioned this issue Sep 25, 2024
Open
@EllynBsc EllynBsc modified the milestones: Release 1.8.0, Release 1.9.0 Sep 25, 2024
@EllynBsc EllynBsc changed the title Ability to choose non-system user to execute a payload Ability to choose non-system user to execute a payload - define a Service Account Sep 25, 2024
@EllynBsc EllynBsc changed the title Ability to choose non-system user to execute a payload - define a Service Account Chunk 1: define a Service Account, first step of having the ability to choose non-system user to execute a payload Oct 17, 2024
@EllynBsc EllynBsc changed the title Chunk 1: define a Service Account, first step of having the ability to choose non-system user to execute a payload Ability to choose a service account on linux Oct 17, 2024
@guillaumejparis guillaumejparis removed their assignment Oct 21, 2024
@jborozco
Copy link
Author

We changed our appraoch to this feature, closing this issue as duplicate of #1860 + #1861

@jborozco jborozco closed this as not planned Won't fix, can't repro, duplicate, stale Nov 15, 2024
@jborozco jborozco removed this from the Release 1.10.0 milestone Nov 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@savacano28 savacano28

@Dimfacion Dimfacion

@Jipegien Jipegien

@damgouj damgouj

Labels
feature use for describing a new feature to develop
Projects
None yet
Milestone
No milestone
8 participants
@savacano28 @guillaumejparis @Dimfacion @EllynBsc @jborozco @RomuDeuxfois @Jipegien @damgouj