Collaborate Disseminate
An OpenSSH bug that was reclassified as a vulnerability after it was fixed has made scary headlines – but the sky isn’t falling Continue reading Vulnerability in OpenSSH “for two decades” (no, the sky isn’t falling!)
I have generated an RSA key-pair on a computer, and I want to check if the RSA private key is encrypted (protected) with a passphrase.
Note that the problem is not that I forgot the passphrase, but rather that I want to gen… Continue reading Checking if an RSA private key is passphrase protected
Currently, I am doing a penetration testing laboratory with a server with the following services:
Nmap scan report for 10.0.11.125
Host is up (1.3s latency).
Not shown: 998 closed ports
PORT STATE SERVICE VERSION
21/tcp op… Continue reading From FTP to SSH
I am no crypto expert in any way so please bear with me if my question is kind of stupid.
We use OpenSSH key pairs on a regular basis and due to the asymmetric nature of key pairs, as far as I understood the concept, giving … Continue reading Are mkpasswd SHA512 hashes secure for the public?
In this Ask the Admin, I’ll show you how to get started with the OpenSSH client in the Windows 10 April 2018 Update.
The post OpenSSH Comes Out of Beta in Windows April 2018 Update appeared first on Petri.
Continue reading OpenSSH Comes Out of Beta in Windows April 2018 Update
I am looking to implement access controls through CA-signed public ssh keys, as described in the article Scalable and secure access with SSH.
I am trying to conceive how our security team will manage this on the CA side. On… Continue reading For CA-signed ssh keys, how to see various attributes: principals, identity, serial number, options, validity time, etc
I have read a degree of mixed reports on the security implications and/or value of allowing TCPKeepAlive yes in /etc/ssh/sshd_config (for OpenSSH-server). Anything definitive on the security best practices regarding TCPKeepAl… Continue reading OpenSSH-server: Are there any security implications and/or value of/for ‘TCPKeepAlive yes’
In the first part of this two-part series, I’ll show you how to get started with PowerShell Core for managing heterogenous cloud environments.
The post Managing Linux, Windows, AWS, and Azure Using PowerShell Core Part 1: Installing PowerShell Core and Modules for Azure and AWS appeared first on Petri.
In this second part, I’ll look at how to manage Linux and Windows systems remotely using PowerShell Core.
The post Managing Linux, Windows, AWS, and Azure Using PowerShell Core Part 2: PowerShell Remoting Over SSH appeared first on Petri.
According to the end of RFC 4253 § 6, the random padding introduced to each SSH packet is an arbitrary multiple of 8. It mentions that random padding lengths can mitigate traffic analysis:
Note that the length of the conc… Continue reading Does OpenSSH use padding of random lengths?