search

olacabs / jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
https://jch.olacabs.com/userguide
Other
718 stars 162 forks source link

Register function #9

Open NitescuLucian opened 7 years ago

NitescuLucian commented 7 years ago

How can I disable the register function?

kmadhusudhan commented 7 years ago

Are you running on single user mode or corporate mode ?

NitescuLucian commented 7 years ago

Corporate Mode and I don't want only one user and also I don't want to allow anyone to register and have access to confidential data.

NitescuLucian commented 7 years ago

@KMadhuSudhan I am fine even with hardcoded solutions :)

shadsidd commented 7 years ago

@NitescuLucian Well jackhammer was built with the idea of collaboration. We take that as a feature request though very straight forward fix could be made available. No timelines commitment.

NitescuLucian commented 7 years ago

@shadsidd well.. You see I am ok woth shareing and everything.. But i give you the case: I have a company, I have found vulnerabilities on my assets, and I don't want to make them available and with explotation information to everyone ho has access to the platform :).. Ok then I will post a quick and brutal fix and then maybe I can help develop a more approval based registration :)

sidheshenator commented 7 years ago

@NitescuLucian use Nginx to block the registration/signup page. Pretty hacky solution but works. :) You can make the Nginx service and configuration part of the docker-compose.yml.

NitescuLucian commented 7 years ago

@sidheshenator Can you teach me how?

sidheshenator commented 7 years ago

@NitescuLucian I would recommend you read this article - https://www.cyberciti.biz/faq/nginx-block-url-access-all-except-one-ip-address/ This will help you block the /signup page. AFA, making it part of the docker-compose.yml is concerned, I'll try to implement it on my fork :)

NitescuLucian commented 7 years ago

@sidheshenator ok I will also try on a fork! If yo manage in time please refer the commit :)