Ansible/Jfrog

Ansiblebook

Node hosts: /etc/ansible/hosts

Playbook

Execute commands on node servers

Retrieve credentials of node servers from playbook

python3 /usr/share/john/ansible2john.py web.yaml

hashcat hash.txt --force --hash-type=16900 dict/rockyou.txt

cat pw.txt | ansible-vault decrypt

Sensitive data

Playbook contains a command, the command contains plaintext credential. Like mysql.yml

/var/log/syslog

Jfrog

Binary Repository Manager

Port 8082

ps aux | grep artifactory

• Check existing files and user interactions like creation, download, etc.

• Delivery malicious file (With user interaction)

• Database backup contains credential: /opt/jfrog/artifactory/var/backup/access

• Compromise database