Collaborate Disseminate
To test if a virus scanner is working one can use the EICAR test file. This is a well-known file which is not a working virus and can be recognized as such.
Does something similar exist to do tests with (private) ssh keys (e.g. inclusion i… Continue reading test ssh key set [closed]
I’ve recently had a conversation with a colleague (in a new job for me) around access to client’s servers which are deployed in their premises.
They have said that allowing ssh access to those servers is something that any CISO would run f… Continue reading Leaving SSH access to deployed on prem server — why is this bad?
I am trying to implement a Proxy jump between the client and server.
I am going through openssh server 8.9 documentation and did not find much information on usage and future problems using jump host using public keys.
I found from the doc… Continue reading Is there any downside of using for Proxy Jump using Public keys
While setting up a new VPS instance running Ubuntu, I found that I needed to set AllowTcpForwarding yes in /etc/ssh/sshd_config to achieve a remote VS Code connection. I am and will be the sole user who can log in on that instance, root lo… Continue reading Security Implications of Allowing TCP Forwarding to Use vscode-server
I am using hydra to bruteforce my router admin page. By scanning with nmap it is showing port 22 ssh is open and when i use medusa it is bruteforcing properly but with hydra i am using this command :
hydra -l admin -p admin ssh://192.168…. Continue reading Why hydra showing this error [ERROR] could not connect to ssh://192.168.0.1:22?
How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump.
I have the full PCAP for the SSH sessions, including the initial handshake and AES session keys from a memory dump of t… Continue reading How to decrypt SSHv2 using AES-256 session keys from memory dump?
On a machine supporting ssh, an RSA key is given but no username.
My idea was brute-forcing the SSH username with Hydra but I didn’t find any option to give the RSA key to Hydra.
Is it possible to brute force ssh usernames with an RSA key … Continue reading Hydra brute force ssh usernames with given RSA key
Beginner problem:
I have a mac (mac 1) computer connected to the internet via a router from an internet proveider in country A
I am now in country B and need to ssh from another mac (mac 2) into my mac in country A
I already set up the ma… Continue reading How to ssh into my remote (mac) computer from abroad?
We are looking to introduce signing of commits into our company.
Currently we are leaning towards using GPG kays, but we can consider SSH if what we want cannot be achieved with GPG.
We are using a private Gitlab instance.
What we need:
We… Continue reading Managing signed commits as an organization
I have attempted to verify using the link below, but it lists SHA512 fingerprints that do not match the 128 bit fingerprint I’m getting when my PC attempts to connect.
https://docs.github.com/en/authentication/keeping-your-account-and-data… Continue reading What is the correct process for verifying the github.com RSA SSH key? [closed]