search

splunk / attack_range

A tool that allows you to create vulnerable instrumented local or cloud environments to simulate attacks against and collect the data into Splunk
Apache License 2.0
2.09k stars 351 forks source link

Error: remote-exec provisioner error #956

Open wenglokc opened 2 hours ago

wenglokc commented 2 hours ago

OS: Kali linux

I am having the following error after trying to build the attack_range. I could see both windows server and splunk instance being created and I can rdp and ssh to them. However I am unable to access the web gui for splunk and guacamole on port 8000 and 8080 respectively.

error

I've check some previous issue here https://github.com/splunk/attack_range/issues/737 that was similar to my error but I have verified that my ssh key generated was using rsa-2048.

splunk-james commented 2 hours ago

What is the config for your pub and priv SSH key? Are you using an exisiting key or generating a new one each time you build? If you are using an existing key have you set permissions correctly on the private key file?

wenglokc commented 1 hour ago

I generated a new one when I ran python attack_range.py configure

splunk-james commented 1 hour ago

Can you share your attack_range.yml file or at least the sections relating to the SSH configs?

wenglokc commented 1 hour ago

are you talking about this section?

image

splunk-james commented 1 hour ago

What are the permissions on that private key file and there should also be another section for the key name in aws, does That match?

wenglokc commented 59 minutes ago

Are you referring to this?

image

splunk-james commented 53 minutes ago

That looks like the attack range default yaml file and not the one generated by running 'python attack_range.py configure'

wenglokc commented 51 minutes ago

oh you meant this image