Collaborate Disseminate
I am trying to pentest my router’s login page, but I get a "connection refused" error.
I get the same error when I try to pentest my kali login and my Windows login to my PC accounts and I’m not sure how to fix it.
sudo hydra -l … Continue reading I am trying to Pentest with hydra password cracking tools [closed]
When connecting to a host through SSH for the first time I get met with the message: Authenticity of host ***** can’t be established. ECDSA key fingerprint is SHA256 *******. Are you sure you want to continue to connect? (yes/no/[fingerpri… Continue reading What standards are there for sharing public SSH fingerprints?
I am having problem in connecting to an Amazon EC2 Linux instance from an old Mac OS machine running El Capitan. Unfortunately without any possibility to upgrade the OS.
Because all the other modern devices I have can connect to the instan… Continue reading Understanding ssh-rsa not in PubkeyAcceptedAlgorithms
Goal
The intention is to set up an SSH entrance which is more secure (or at least more obfuscated) than a default setup with Port Forwarding or VPN.
Previous research and context
TL;DR, see question at the bottom.
I have done a fair amount… Continue reading What are the risks of running SSH over Tor?
I am considering how to make my chat application a bit more secure. It has a similar structure to IRC, multiple users can join each server, and servers can be hosted by anyone. I have been using TLS so far, but it has the problem of requir… Continue reading Suitable method of encryption for user-hosted chat platforms
My understanding is that an ED25519-sk SSH key generated by OpenSSH generates a private key stub that lives on your host machine. This stub is just a reference to the actual private key that lives on the actual hardware key itself.
My unde… Continue reading Can someone with access to only my Yubikey gain access to my server that has SSH access via an ED25519-sk keypair?
To test if a virus scanner is working one can use the EICAR test file. This is a well-known file which is not a working virus and can be recognized as such.
Does something similar exist to do tests with (private) ssh keys (e.g. inclusion i… Continue reading test ssh key set [closed]
I’ve recently had a conversation with a colleague (in a new job for me) around access to client’s servers which are deployed in their premises.
They have said that allowing ssh access to those servers is something that any CISO would run f… Continue reading Leaving SSH access to deployed on prem server — why is this bad?
I am trying to implement a Proxy jump between the client and server.
I am going through openssh server 8.9 documentation and did not find much information on usage and future problems using jump host using public keys.
I found from the doc… Continue reading Is there any downside of using for Proxy Jump using Public keys
While setting up a new VPS instance running Ubuntu, I found that I needed to set AllowTcpForwarding yes in /etc/ssh/sshd_config to achieve a remote VS Code connection. I am and will be the sole user who can log in on that instance, root lo… Continue reading Security Implications of Allowing TCP Forwarding to Use vscode-server