search

future-architect / vuls

Agent-less vulnerability scanner for Linux, FreeBSD, Container, WordPress, Programming language libraries, Network devices
https://vuls.io/
GNU General Public License v3.0
10.99k stars 1.16k forks source link

ssh from yubikey or similar #503

Closed r3k2 closed 4 years ago

r3k2 commented 7 years ago

anyways to make vuls get the public key from ssh-add -L instead of a file?

kotakanbe commented 7 years ago

Is anyone using MFA such as yubikey?

r3k2 commented 7 years ago

@kotakanbe I have my keys on my yubikey so for example to be able to ssh to any of all our servers I need to have my yubikey plug into the USB... if not ssh wont auth because they keys are not on ~/.ssh/ but on the usb key. this is managed by gpg-agent that substitutes ssh-agent

r3k2 commented 7 years ago

@kotakanbe nevermind.. I just did a git pull updated everything and try it with one local server and it did pop me for my yubikey pass. [Oct 16 04:09:20] INFO [localhost] Validating config... [Oct 16 04:09:20] INFO [localhost] Detecting Server/Container OS... [Oct 16 04:09:20] INFO [localhost] Detecting OS of servers... [Oct 16 04:09:31] INFO [localhost] (1/1) Detected: ubuntu: ubuntu 16.04 [Oct 16 04:09:31] INFO [localhost] Detecting OS of containers... [Oct 16 04:09:31] INFO [localhost] Checking dependendies... [Oct 16 04:09:31] INFO [localhost] Checking sudo settings... [Oct 16 04:09:31] INFO [ubuntu] Checking... sudo apt-get update

hmm but I wonder.. what if I want to do a scan with out ssh? like external scan type openvas?

IssueHuntBot commented 5 years ago

@future-architect has funded $50.00 to this issue. See it on IssueHunt

kotakanbe commented 4 years ago

If you still want this, please re-open the issue.

r3k2 commented 4 years ago

Hello, sorry did not see this in time since we all moved to gitlab from github, yes we really need this. thanks @kotakanbe