modulogrc / modSIC

Modulo's Open Distributed SCAP Infrastructure Collector, or modSIC, makes it easier for security analysts to scan an environment vulnerabilities based on OVAL-Definitions. It's an open-source service specialized in distributed network assessments.
http://www.modsic.com.br
14 stars 13 forks source link

modSIC username and password #8

Open N1010N opened 6 years ago

N1010N commented 6 years ago

There is a question. I want to connect modSIC server which is running on another computer. how can I enter that computer's username and password to connect modSIC ( by using modSIC client) . as I know admin and Pa$$w@rd are username and password for modsic . I want to know How a client connects to a modsic server which is running on a remote computer. (In client GUI address is Ip of the remote computer, what about user and password of that PC)? Is the username and password that are defined in app.config?

luty81 commented 6 years ago

Every call to Modsic server must provide a token based on received username and password that will be validated in server side to authorize the request. To get this token the clients invoke the Login web method from Modsic server providing these username and password. This authentication flow is only to allow the clients to communicate with modsic server and its not integrated to Windows authentication, so you dont need to provide the credentials of the modsic server´s host.

The username and password to be sent to Modsic server are defined in app.config files of the current provided clients (client and graphical consoles). But, in this case "defined" means the values that will be sent to server, but its the server that rules the expected username and password. Nowadays, you cannot change this default credentials (at least in a easily way), because the server´s app.config has only the username and the hashed password. So, to define a new credentials (or change the admin password) you must be able to generate this computed hash in the same format that Modsic server does and the solution has no tool to do that. Its not hard to implement that tool, if you want to know more about this part, just take a look to $\Modulo.Collect.Service\Controllers\Hash.cs file.

Regarding your question about the GUI fields are you talking about the File > Options... menu window ? If so, is exactly the place where you must provide the modsic Server credentials (admin / Pa$$w@rd).

N1010N commented 6 years ago

Thank you dear @luty81, actually, my answer is in the first paragraph of your reply. In your reply, you said that I should Invoke the login web method from Modsic server. what do you mean (the login web method)? Assume that I am using computer A (username: A, password:123, IP: 172.17.10.8) and want to connect to the Modsic server running on the Computer B (username: B, password 1234, IP: 173.18.1.2). On the computer A, I run Modsic client GUI, what information should I input? ( In step2 (select Target) section what are the address, username, password, and Adm.password? what about the File>Option... ?)

luty81 commented 6 years ago

I should Invoke the login web method from Modsic server. what do you mean (the login web method)? I meant this method its an endpoint on modsic server. I just mentioned this in order to try to explain the flow of communication between clients and the server. You dont need to concern about this if you arent developing a new client.

About your scenario, you should input the default modsic server credentials in the options window of the client GUI (File -> Options):

image

and in the client GUI main window, in group called "Step 2: Select Target", you need to put computer A details like this:

image

Its highly recommended that the user "A" is an administrator of computer "A" in order to collect properly all objects of oval definitions. If your computers is part of some domain, and the A is a local user, maybe you will need to fill the username field with ".\A" or "A@172.17.10.8"

I know its a bit confuse, but try that and let me know if you managed to collect like that.

N1010N commented 6 years ago

Thank you, dear, everything works