SHARED HOST INTEGRATED PASSWORD SYSTEM (SHIPS)

SHIPS is a solution to provide unique and rotated local super user or administrator passwords for environments where it is not possible or not appropriate to disable these local accounts. SHIPS also attempts to address secure sharing of these accounts when they must be controlled by multiple parties. Client systems may be configured to rotate passwords automatically. Stored passwords can be retrieved by desktop support personnel as required, or updated when a password has to be manually changed in the course of system maintenance. By having unique passwords on each machine and logging of password retrievals, security can be improved by making networks more resistant to lateral movement by attackers and enhancing the ability to attribute actions to individual persons.

When performing penetration tests, our common attack vector is through compromising one host and pivoting to other systems with the information obtained. It is common to see large-scale breaches utilizing this method and that is where SHIPS comes into play.

SHIPS is designed to make post-exploitation more difficult and minimize what systems attackers gain access to. Once SHIPS is set up, there isn’t much else that is needed and it’s simple to integrate into existing business processes.

How to Get Shared Host Integrated Password System (SHIPS)

Option 1
To download Shared Host Integrated Password System (SHIPS), type the following command in Linux:
git clone https://github.com/trustedsec/SHIPS

Option 2
View on Git.

How to Get Help with Shared Host Integrated Password System (SHIPS)
For bug reports or enhancements, please open an issue on this projects GitHub page.