search

OpenBAS-Platform / openbas

Open Breach and Attack Simulation Platform
https://openbas.io
Other
684 stars 73 forks source link

Ability to choose a service account on linux #1179

Open jborozco opened 4 months ago

jborozco commented 4 months ago

Use case

To reproduce real attack environment, I want to be able to execute a custom payload through a non-system user.

After doing a POC and for a first MVP, we want to be able to define a Service Account (first on Linux) for the ability to:

-CRUD a Service account to be used for executing injects on endpoints as an admin -Execute a payload with elevated privilege by default

savacano28 commented 2 months ago

Scope: Paylaod custom, windows, openbas agent : https://www.notion.so/filigran/Ability-to-choose-non-system-user-to-execute-a-payload-91f0f341848e431895a8bfb463703082. Prs: Just include elevation_request: Openbas: https://github.com/OpenBAS-Platform/openbas/pull/1410 Collector: https://github.com/OpenBAS-Platform/collectors/pull/41

Prs POC: Openbas: https://github.com/OpenBAS-Platform/openbas/pull/1396 Agent: https://github.com/OpenBAS-Platform/agent/pull/14 Collector: https://github.com/OpenBAS-Platform/collectors/pull/41