SSH (Secure shell) is a protocol for secure communication between computers to execute remote commands, transfer data and tunnel TCP connections.

learn more… | top users | synonyms

1
vote
1answer
14 views

Managing SSH key access to AWS servers behind bastion

enter link description hereI currently have an AWS setup with 3 VPCs, one for the bastion, then a Dev and a Prod VPC, those last two only being SSH accessible via the bastion of course (layout from ...
2
votes
5answers
72 views

Best practice to guard against an app copying private ssh keys stored under ~/.ssh?

Given that any application running as the logged in user will have read access to that user's ~/.ssh folder, it seems trivial for the application to copy that user's private key and send it over the ...
0
votes
0answers
17 views

What is the correct way to set up a VPN and then only allowing SSH from that VPN? [migrated]

What is the correct way to set up a VPN and then only allowing SSH from that VPN? I want to set this up to remove my SSH from the open internet and only allow access via a dedicated VPN connection, ...
1
vote
6answers
278 views

Can people know the server I'm connecting to despite being on SSH/HTTPS? [duplicate]

I understand that by connecting securely over SSH or HTTPS, the data that I transfer is cryptographically secure. However, can someone spying on my connection still determine the server I'm sending it ...
4
votes
2answers
53 views

Managing passwordless SSH authentication from servers to server

I have a bunch of servers that need to transmit data to one server using SCP. What is the best practice for using SSH key-based authentication? Option 1: Create a unique private key for each host and ...
2
votes
1answer
72 views

PPP over SSH - is this correct?

I see a lot of talk online about whipping up a VPN connection using PPP over SSH. This term confuses me, as SSH is an app tier protocol and PPP operates on the data-link layer. So, my question is: ...
1
vote
1answer
63 views

Repeated security questions after remote key has changed

I reinstalled one of my machines and gave it new ssh keys, which should yield warnings when I connect to it from a machine I have connected from earlier. First I get the big warning that the remote ...
4
votes
1answer
106 views

Protecting SSH service with many inexperienced users

One of the universities I know has a rather unique password policy. They issue shell accounts to all computing students with strong passwords that are unchangeable. It is done via the passwd -n flag ...
41
votes
3answers
8k views

My friend revealed both private and public keys for his server. How serious is this?

A friend of mine managed to expose both id_rsa and id_rsa.pub file from his server via apache. I mentioned to him that this is serious security issue but he brushed this off like it was no big deal. ...
1
vote
1answer
101 views

Private VPN server in public cloud

I need to encrypt all my traffic, because I often work in unsecure network environments. My questions is this: if I buy my server from VPS providers (amazon ec2, digitalocean, etc) - how secure ...
4
votes
3answers
148 views

Does SSH password authentication provide the server with the password?

If an attacker takes control of a server and a user tries to SSH into it using password authentication, can the attacker get the password? I was under the impression that there was an algorithm in ...
2
votes
3answers
74 views

How secure is socks5 proxy over ssh?

At work we are all using Windows 7+, with full administrative privileges. Each PC has a dedicated IP and a proxy is used. It is set as a HTTP proxy and the option to use this for all types of ...
1
vote
0answers
70 views

Adding a binary to the firmware of a routing device [closed]

I've been playing around with a router d-link dwr-921 and found some vulnerabilities in the web interface. I still haven't managed to get shell access and now I'm thinking about modifying the firmware ...
1
vote
2answers
49 views

Detect SSH InBound / Oubound Connections

I'm noodling with the idea of managing SSH connections on Linux server using a program (not sure what it will be written in yet) that monitors inbound and outbound connections. Is there a way to ...
3
votes
1answer
59 views

Is it possible for an SSH MITM to attack only if the key isn't in the known_hosts?

I was trying to connect a server using a different port when the network seemed too slow. It gives an ECDSA key, while the previous key in the known_hosts is RSA. I refused to continue the connection ...
6
votes
1answer
630 views

Is it possible having only public key from SSH keypair to see if private key is password protected?

As a person responsible for security I wonder on this subject. To provide best security I don't want to accept/deploy public keys for users if private key is not password protected. However there ...
4
votes
3answers
420 views

SFTP on Windows - is it likely to be disabled?

I'm a software engineer and I'm maintaining a product that allows a user to run commands and scripts on Linux servers via an SSH connection. We now need to extend this functionality onto Windows. We ...
1
vote
2answers
69 views

Public/private key auth and VPN

If a server uses public/private key authentication to access SSH, will there be any advantage of restricting the access of SSH over VPN? This link describes both approaches to solve brute force ...
9
votes
3answers
615 views

Can an attacker “simulate” a private IP address?

I have a SSH server with a rule that does not allow password connections outside the local network. So people already on the local network, either physically or via VPN, are allowed to connect with ...
3
votes
2answers
50 views

Security of nested ssh

First of all, by nested ssh, I mean the following way of using ssh: ssh usera@Bob 'ssh usera@C' suppose A wants to login on server C, but for some reason C is not directly available to A (e.g. C's ...
3
votes
2answers
83 views

Can you use ssh for secure inter app communication on the same device?

I use ssh to get an encrypted connection between servers and local machines all the time. It's fast, it's secure, and there's a way to do it in nearly every system programming language that I've used ...
1
vote
1answer
64 views

Are OpenSSH vs OpenSSL public key format names mismatched?

I generated a key pair vis OpenSSH and later wanted to generate PEM encoded public key. I noticed that generated public key differs when generated by OpenSSH vs OpenSSL when using same format name ...
2
votes
1answer
62 views

Will two virtual machines running on the same physical host machine get the same value from /dev/random?

Will two virtual machines running on the same physical host machine get the same value from /dev/random if read over the same time period? Say that Virtual-machine-1 wants to generate its ssh host ...
1
vote
1answer
67 views

Why does the server ssh public key not look like the key in client known hosts?

From my naive understanding of ssh, the server shares its public key ( /etc/shh/ssh_host_rsa_key.pub ) with the client, who then adds it to the list of known hosts ( /user/.ssh/known_hosts ). So, I ...
0
votes
2answers
71 views

Server compromised with magento vulnerability, possible rootkit

I am experiencing a security issue with one server that it happens that I manage. I will try to cite all relevant facts as briefly as possible. I am asking for any additional information and course of ...
2
votes
0answers
145 views

Convert RSA openSSH key/putty key to gpg key [closed]

Scenario Two work sites, site 1 and site 2. Two Linux servers, server A and server B. Server A is reachable from both sites, while server B is reachable from site 1 only. Two Windows workstations, ...
2
votes
0answers
61 views

Does enabling VPN on our router increase the risk of our network being exposed to the outside network? [closed]

We are thinking about using VPN to connect our remote office and the main office and also support developers working from home. To do this, we are planning to purchase 2 CISCO (or similar) routers to ...
0
votes
0answers
77 views

Risks of having SSH private key stolen

I'm afraid this is quite a common question, but searching several times through the questions did not prove useful, and I'm really eager of knowledge here :D I understand that keeping SSH private key ...
4
votes
2answers
247 views

Sharing RSA keys between PGP and SSH protocols: Does this pose a security risk?

If I generate a PGP subkey that only has the authentication capablity and use this to generate an SSH keypair to authenticate Git for example, does this pose a security threat? When I do, should I ...
1
vote
1answer
247 views

Metasploit SSH Error: could not settle on kex algorithm

I am running a trial of Cobalt Strike which runs over the Metasploit Framework. I am trying to perform an SSH related attack on my laptop, and I get the error in the title for all SSH related attacks. ...
2
votes
0answers
59 views

chroot ssh users [closed]

I am using CentOS 7. I need to give shell access to ssh users but restrict them in a jail. I have used jailkit to set up the jail. I have copied all necessary libraries, binaries that are needed for ...
4
votes
1answer
567 views

SSH Key: Ed25519 vs RSA

A lot of people recommend using Ed25519 instead of RSA keys for SSH. The introduction page of Ed25519 (http://ed25519.cr.yp.to/) says: [..] breaking it has similar difficulty to breaking [..] RSA ...
3
votes
2answers
325 views

What stops an SSH server from MITMing logins?

When I read this question about what gets signed with the private key by the client I wondered: What stops the following scenario from happening: A client connects to an SSH server. The SSH server ...
1
vote
2answers
264 views

Break in attempts from secureserver.net

Over the last few weeks I have seen dozens if not hundreds of break-in attempts from ip addresses which map back to secureserver.net. I know these are GoDaddy machines from the who is look up. ...
2
votes
1answer
383 views

Are there any security implications in creating an SSH key for the root user?

I've written an install script on a server to quickly set up new sites in the /srv directory. It needs to do a git clone, and has to be run via sudo in order to have the permissions to do all the ...
4
votes
1answer
122 views

Analyzing log files for forensics homework?

Suppose two users have done a murder at 6pm at Dunkin Donuts, I have got the hard disks on site, disk1 and disk2. How do I identify the time and order of each user's activities on the hard disks? ...
1
vote
0answers
110 views

Logging all traffic crossing SSH proxy

Is there a way to log SSH sessions proxied through a machine (User-> SSH Proxy -> Server (with SSH)) without modifying the SSH daemon on the proxy? I need to log all the commands as well as responses ...
13
votes
4answers
795 views

Managing multiple SSH private keys for a team

I have a medium-sized team (~10 people, but we expect to grow) that manages a set of EC2 servers on AWS (currently a few dozens, but this is also expected to grow). As EC2 requires you to have an ...
2
votes
1answer
26 views

How is composed “public host key and certificates (K_S)” in SSH_MSG_KEX_DH_GEX_REPLY message? (SSH2 key exchange)

I'm trying to implement SSH2 key exchange in Java, and having some difficulties. The RFC4419 states, that: The server responds with: byte SSH_MSG_KEX_DH_GEX_REPLY string server public host ...
1
vote
1answer
88 views

SSH: What's the difference or interplay between /etc/ssh/[host files] and ~/.ssh/[public key]

I'm new to SSH after a decade of dabbling with Ubuntu and other Linux builds. Today I successfully setup SSH, but I had a few hangups and headaches along the way. Although the system is now running ...
2
votes
1answer
122 views

someone may be doing something nasty

I have an ssh server. earlier toady, I was about to login to my server, when I got a message that said something along the lines of "Someone may be trying to do something nasty" and indicating a man ...
1
vote
3answers
215 views

Sharing a common public and private SSH keys for a cluster of machines

I guess this is way to settle an internal debate I am having with myself. In my provisioning process, I am wanting to share a common public and private ssh keys for each machine in a clusters, ...
1
vote
2answers
61 views

How to handle disk encryption for remote connection?

I have at my workstation, an ubuntu 14.04 installation with full disk encryption. I now have to travel frequently for days and am planning to ssh into this machine from my chromebook to work remotely. ...
1
vote
1answer
42 views

Things to do to ensure that data is secured on my virtual server [closed]

I'm not much of a server administrator but I'm maintaining a virtual server with Ubuntu OS where my website is hosted. I often use ssh, ftp and MySQL. As my website gets popular, I want to make sure ...
2
votes
1answer
57 views

Using Google Authenticator for SSH sessions

So I have an SSH tunnel which I use with dynamic port forwarding to the alternate http port on the client. For initializing this connection, I'd like to implement an additional verification step, ...
2
votes
1answer
158 views

How to view all SSH authorized_keys for a unix server

How would I view all the authorised SSH clients from a unix server? I know that cat ~/.ssh/authorized_keys shows authorised keys if logged in from root. Can other users set their own authorised keys ...
1
vote
0answers
147 views

Metasploit ssh_enumusers stops instantly [closed]

When I try to run the : http://www.rapid7.com/db/modules/auxiliary/scanner/ssh/ssh_enumusers using the given options besides proxies I get the output: msf auxiliary(ssh_enumusers) > run [*] ...
0
votes
1answer
39 views

Custom publickey authentication

I'm working on a REST account management system over https that should support both username/password and username/publickey authentication schemes. I.e. when a user registers an account, they may ...
5
votes
1answer
74 views

Relationship between HTTPS and SSH Public Keys

I can use my private key to generate a public key for use with ssh. I can use the same private key to generate a CSR, to generate a CLIENT certificate for HTTPS. Specifically, my SSH public key is: ...
0
votes
1answer
66 views

Is it worth it to use sshguard when only allowing ssh login from specific IP?

I'm running a VPS (under ArchLinux) and was wondering if sshguard was useful in the following case. My iptables rule for SSH in looks like this : iptables -A INPUT -p tcp --source $Trusted --dport ...