Collaborate Disseminate
Recently patched vulnerabilities in MatrixSSL and wolfSSL, two open-source TLS/SSL implementations / libraries for embedded environments, have emphasized the great potential of using fuzzing to uncover security holes in implementations of cryptographic… Continue reading Vulnerabilities in cryptographic libraries found through modern fuzzing
I have a custom SSH server (just wrapper code for https://pkg.go.dev/golang.org/x/crypto/ssh) and I want to show banner if and only if user cannot authorize. I’ve tried to modify serverAuthenticate method, but without success. The main iss… Continue reading Show user banner if it cannot authenticate over SSH [closed]
I am doing remote devevelop on a remote dev machine. From the remote machine, I need to SSH to other servers and services like the Github. Everything is on the Internet. My desktop is much more secure than the remote dev machine and so I d… Continue reading Securely SSH a server from an intermediary remote machine (possibly with Yubikey)
Is it right to assume, that when i build up a tunnel with ssh -D from outside my LAN and then access my only locally exposed server via FTP, it can be called ‘safe’? Tunnel is established on the same device, where i configure FileZilla to … Continue reading Securely access server via FTP through SSH tunnel
I use the net-ssh ruby library to connect to various servers. Around 2 months ago, a large subset of the servers we connect to stopped working, these servers belong to several major banks. We’re seeing a "connection disconnected by re… Continue reading SSH server disconnecting when valid auth request is provided and responding with seemingly invalid SSH_MSG_USERAUTH_PK_OK
I was wondering if it’s possible to only store and read a ssh private key on a yubikey and not read the private key the yubikey generated from a client computer?
Currently the only way it seems to work is that I store the private key on cl… Continue reading Reading SSH private key physically stored on yubikey to remote into external PC
I am on hack the box and I ran nmap -A IP_address and this is the output I received. I am wondering if I can do something with the ssh hostkey.
We have a situation where we have an architecture that calls for a Web based UI for querying some data and the data input is through rsync over SSH. I think it would be easier to manage and more secure if we just tunnel SSH through HTTPS s… Continue reading SSH over HTTPS or Directly open Non Standard port
I have a MacBook M1 on which I have been using a Yubikey 5 to authenticate SSH logins to various systems. I recently got a Yubikey 5C so I wouldn’t have to use adapters. I moved my keys over to it using the backup I created when I set up m… Continue reading SSH authentication with GPG failing with a new Yubikey with the same gpg keys as the old one
How can i connect ssh without a password? I just have key and fingerprint.
OpenSSH9.1
SSH-2.0-OpenSSH_9.1
Key type: ecdsa-sha2-nistp256
Key: AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBLI3KDVYxrlo7g82GgzoWkCc
xm10/gYvfH0EXu/pWFm… Continue reading How to connect ssh without password? [closed]