Collaborate Disseminate
Im trying to build RAT to test on my computer. I use ngrok for hacking on WAN. But ngrok has a problem of changing its subdomain once the connection is reset. So, I cant use ngrok for hacking over WAN. I tried using ngrok sub… Continue reading Any Alternative to Ngrok for constant Connection?
The Goal
Create a secure process to open a firewall port on a server (on demand), start a listening server, and ultimately close the firewall port. This would improve security by not always having a port open for DoS and port… Continue reading Concept using ssh to create dynamic firewall. Good or Bad idea?
Created a digital ocean droplet.
However, I am having a challenge on ssh.
I can not understand the debug log below as well. Anyone advice
dibon@dibon:~$ ssh -v root@159.89.xx.cc
OpenSSH_7.2p2 Ubuntu-4ubuntu2.4, OpenSSL 1…. Continue reading Can not ssh on Digital Ocean droplet
When I watch the logs on my server there are always many hundred IP addresses with failed ssh logins.
Because fail2ban only slows the attack process down, I decided that I need another solution. First with SSH key-based logi… Continue reading What is the most private option for 2FA with OpenSSH?
Well the question is as simple as that . Because I recently noticed that the openssh-server uses AES-CTR for the symmetric encryption and I wondered why ?
From what I heared AES-CTR is a block cipher mode that can be run in … Continue reading Why does the openssh-server not use GCM by default?
Please bear in mind that I have no cyber-security background at all, but have been tasked by my company with making certain applications on our platform FIPS-compliant.
From what I’ve discussed with my co-workers, our platform requires a … Continue reading What is the general approach to create FIPS compliant SSH?
Is there a site, which provides a list of weak cipher suites for (Open-)SSH? I know for example that arcfour is not recommended, but there is a whole list of other cipher suites offered, where I am not quite sure.
Is there any risk in running ssh daemon with no root privilege using this method: how-can-i-make-this-daemon-init-run-as-a-non-root-user?
Debian Developer’s Best Practices for OS Security says the same thing:
• Starts th… Continue reading what are the disadvantages of running SSH daemon without root?
I’d like to use Jenkins’ ssh-slaves, but the openjdk-1.8.0-131 crypto is crippled. To fix the ciphers I need to get the Java Cryptography Extensions from the Oracle site. My specific problem is that I can only use a shell on … Continue reading How to enable JCE in a command line environment
This might be complete nonsense but I’ve heard people talking about so I’m interested to see if it’s valid: I’ve heard people saying that SOCKS and SSH are more secure/private than a VPN because they rigorously enforce a kill… Continue reading SSH Proxy vs VPN Killswitch