Proxy Credentials

Owned by Glen Epperson (Unlicensed)
Last updated: Nov 03, 2017 by Conor McCann
2 min read

Problem

Setup Child or Proxy credentials for SSH

Solution

Configure primary credentials through the UI as normal.

View configured credentials

                       SELECT * FROM [Credential]
  • Note the CredentialID which will be used to access the Proxy Server.

To Set up a Proxy Credential

                       INSERT INTO ConnectionProxy 
     ( ConnectionProxyTypeEnumID, Hostname, ProxyCommand, Username [, Password] ) 
SELECT ConnectionProxyTypeEnumID, 'ProxyHostName','ssh #hostname' ,'username' [,'password'] 
FROM ConnectionProxyTypeEnum 
WHERE ProxyType = 'ssh'
  • ProxyHostName = The Proxy Server name or IP Address
  • ProxyCommand = 'ssh #hostname' ( The #hostname will be replaced by iQSonar at time of scanning )
  • Examples:
'ssh #hostname'
'ssh -i opensshkeyname -l username #hostname' - ( this format was used when the SSH keys still required a passphrase to be entered )
  • Prompt = Not normally used
  • PostCommandDelaySeconds = Not normally used
  • Username = Username used to connect from Proxy Server to Target Server
  • Password = [Optional] This value is only used if needed, when connecting from Proxy Server to Target.

Filter by label

There are no items with the selected labels at this time.

 

 

Problem

Setup Child or Proxy credentials for SSH

Solution

Configure primary credentials through the UI as normal.

View configured credentials

                       SELECT * FROM [Credential]
  • Note the CredentialID which will be used to access the Proxy Server.

To Set up a Proxy Credential

                       INSERT INTO ConnectionProxy 
     ( ConnectionProxyTypeEnumID, Hostname, ProxyCommand, Username [, Password] ) 
SELECT ConnectionProxyTypeEnumID, 'ProxyHostName','ssh #hostname' ,'username' [,'password'] 
FROM ConnectionProxyTypeEnum 
WHERE ProxyType = 'ssh'
  • ProxyHostName = The Proxy Server name or IP Address
  • ProxyCommand = 'ssh #hostname' ( The #hostname will be replaced by iQSonar at time of scanning )
  • Examples:
'ssh #hostname'
'ssh -i opensshkeyname -l username #hostname' - ( this format was used when the SSH keys still required a passphrase to be entered )
  • Prompt = Not normally used
  • PostCommandDelaySeconds = Not normally used
  • Username = Username used to connect from Proxy Server to Target Server
  • Password = [Optional] This value is only used if needed, when connecting from Proxy Server to Target.

Related articles

Filter by label

There are no items with the selected labels at this time.