Does Community Edition support ssh_elevate_method?

Building from Source and Advanced Topics
1

Hello, I noticed when using GMP protocol and in the TechDoc Portal, it is possible to add ssh elevate credential. I’ve seen threads where this feature was marked experimental and probably why it doesn’t show up in GSA. However I just wanted to confirm since it is partially possible.

But is it possible to set the escalation method? like su or sudo? how does it work currently by default?

I tried manually modifying the target like

<ssh_elevate_method>sudo</ssh_elevate_method>

but I do not think it works.

Using Greenbone Community Edition Containers

3

From the GMP docs for create_target, the tag is named <ssh_elevate_credential> not <ssh_elevate_method>. It represents a second credential to use to elevate privileges or switch user context after the initial SSH login. Therefore, it should have an id attribute with the value (str | UUID | None) – UUID of a ssh credential to use on target.

It is not a command method such as su or sudo. I’m not aware of a <ssh_elevate_method> function. The process is explained here in the OPENVAS SCAN docs.

1 Like