TTPForge icon indicating copy to clipboard operation
TTPForge copied to clipboard

💡 [REQUEST] - Incorporate support for cli interaction during ttpforge execution.

Open cedowens opened this issue 1 year ago • 0 comments

Implementation PR

No response

Reference Issues

No response

Summary

When running TTPs via ttpforge using an expect routine that requires user command interaction (ex: running a ttpforge that ssh's into another machine using password-based auth), TTPForge hangs at the point in the expect script where the user input is captured. TTPForge hangs indefinitely which essentially breaks the TTP.

Recommendation will be to add support for routines such as expect routines that need user interaction during execution.

Basic Example

Here is an example of an expect script (which could be executed by ttpforge) where this currently hangs:

steps:

  • name: example inline: | /usr/bin/expect -c ' set timeout -1 puts -nonewline "Enter your ssh password: " stty -echo flush stdout gets stdin pword stty echo spawn /bin/bash expect "bash" send -- "ssh $user@$server\n" expect "password:" send -- "$pword\r" expect "$" send -- "whoami\r" expect "*$" expect eof '

Specifically, forge hangs right at the "send -- "$pword\r" command.

Drawbacks

none

Unresolved questions

No response

cedowens avatar May 15 '24 19:05 cedowens