Collaborate Disseminate
I wrote an openssh-key-v1 Protocol reader and extracted all fields according to the format definition:
"openssh-key-v1"0x00 # NULL-terminated "Auth Magic" string
32-bit length, "none" # ciphername lengt… Continue reading How to convert 64byte openssh-key-v1 to the resulting 32byte ed25519 private key
I wanted to know what efficient way is there to handle malicious attempts to connect to my server by single IPs. The attempts show up logged in /var/log/auth.log as Connection closed by IPaddress port XXX [preauth].
Additional info about s… Continue reading Efficiently handling malicious, single connection attempts to a server?
I have used PublicKey logins on a number of my servers for months without trouble. I generated the keys on my client machine and copied to the server’s ~/.ssh/authorized_keys using ssh-copy-id. All well and good until one machine stopped a… Continue reading sshd never accepts public key offer
Im currently trying to connect to the Heroku’s mysql cleardb database from beekeeper studio. My connection works when done normally. But when I use the ssh tunnel Im facing some issue.
Their documentation is also not so much descriptive to… Continue reading How do I connect using ssh tunnel to heroku’s cleardb mysql database from some gui tools like mysql workbench or beekeeper studio, when run on ubuntu
After stumbling upon some unknown folders in my unused OneDrive (posted question), I did some digging arround and found some interesting logs. Apparently, OpenSSH had been used for remote access on my machine. A description of the attack c… Continue reading OpenSSH artifacts, remote system access?
Although openssh is awesome, I’m interested in exploring some more lightweight FLOSS alternatives to use for connecting to servers I’m administrating (and using alone). Since I only need a minimal set of features (only public-private-key … Continue reading Recommendations on minimal alternatives to openssh
The security branch of my company worries that the use of older versions of OpenSSH (pre-7.4), where the only Key Exchange Algorithm available is SHA-1 is a major security issue. They suggest generating new public/private keypairs for all … Continue reading How does the weakness of SHA-1 introduce attack vectors in SSH?
I have GPG agent forwarding via SSH RemoteForward working, up to a point:
I can list my private and public keys on the remote host.
If I try to decrypt a file remotely, the PIN is prompted for but the text is stepped, garbled and the pas… Continue reading GPG Agent SSH Forward Pinentry
There is an existing client configured and running (SshClient) using apache mina to ssh to one of our internal jump boxes. It currently uses PEM based authentication. Due to compliance we have to switch to using internally signed certifica… Continue reading Using apache mina for ssh using signed ssh-rsa-cert-01 from Certification Authority
It shows that the ssh port of my metasploitable is open. But when I execute ssh-brute.nse script it doesn’t run. 192.168.0.107 is my metasploitable.
If after that I use -d to debug I get this error
Can’t execute any other script a… Continue reading nmap script is throwing an error