ait-testbed / ait-testbed/attackbed

Make MGMT-Host Secure

Open
#8 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Jinja
Stars
18
Forks
7
PR merge metrics
No merged PRs in 30d

Description

In scenario1(videoserver) some attacks need actions executed from admin-pc. In order to make those hosts accessible by attackm8, the mgmt-host is allowed to have password-login via ssh. This is insecure in environments where the mgmt-host is hosted with a public ip(public cloudprovider).

I can think of possible solutions like:

1. create another jumphost, that is only for the simulation and has no floating-ip
2. add the inet-network to the adminpcs so that they are dual-homed and can directly accessed by attackm8

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.