SSH (Secure shell) is a protocol for secure communication between computers to execute remote commands, transfer data and tunnel TCP connections.

learn more… | top users | synonyms

0
votes
2answers
100 views

What are the risks associated with SSH'in from corporate LAN to untrusted server on the Internet

At work (a huge organisation) I found a server on the LAN that opens SFTP connections to 2 servers across the Internet. I assume the remote hosts are in the other parties DMZ. I know you are not ...
2
votes
1answer
34 views

What's the importance of sshd's setting RekeyLimit?

man sshd_config page states: RekeyLimit Specifies the maximum amount of data that may be transmitted before the session key is renegotiated, optionally followed a maximum amount of time ...
1
vote
1answer
403 views

Digital Ocean “Droplet” allgedly compromised for trivial, unpublicized website. Should I be worried abouty my own machine?

I got a message from D.O. about my Droplet saying they shut it down because there was a lot of outgoing traffic that looked like an attack. The site I had on that server was not very known at all. ...
0
votes
1answer
80 views

SSH scan against D-Link routers: is there a (new) exploit?

TL;DR if you have a D-Link router perhaps it wouldn't be a bad idea to check its SSH settings and/or username/passwords. I am a long-time user of fail2ban on several machines, almost all Ubuntu 12 ...
0
votes
1answer
28 views

How is protected connection between the client and the server carried out when using cloud storage?

How is protected connection between the client and the server carried out when using cloud storage? Based on use of VPN connections or protected protocols at various levels (SSH, TLS/SSL, IPSec)? But ...
5
votes
0answers
29 views

Authentication Agent Protocols for SSH

Is the protocol described at https://tools.ietf.org/html/draft-ietf-secsh-agent-02 actually implemented by any ssh agent? pageant implements a different protocol as does OpenSSH's ssh-agent.
1
vote
0answers
41 views

NISTIR 7966 (Security of Automated Access Management Using Secure Shell) - is there anything new?

Tatu Ylönen (the creator of SSH protocol) and two others authored a report recently, offering their views on SSH key management. I have read the report, and am struggling to identify whether it is ...
1
vote
0answers
75 views

Using SSH Private keys in Production environment

I have a need to scp a bunch of files from a production box to my development environment. I am a developer and have limited read access to the production machines. Instead of entering password for ...
1
vote
0answers
179 views

SSH PermitLocalCommand Security

After a quick search, I haven't been able to find lay risk assessments of the PermitLocalCommand option in ssh. Are there known vulnerabilities that allow arbitrary code execution on the local host ...
1
vote
0answers
118 views

SSH using pre-existing session (symmetric) keys

Is there at present a way to open a SSH connection using pre-existing symmetric session keys? In other words, if I create a list of symmetric keys can I send that list to the recipient on a CD or USB ...
1
vote
0answers
67 views

Central Authentication Server

I have many client devices that I need to reverse SSH tunnel into. I am finding that managing all these certificate files are becoming cumbersome. I am looking into a centralized authentication ...
1
vote
0answers
53 views

Considerations when implementing a key based SSH-like auth scheme

I have a SMTP server where all the users (for an unrelated reason) will have public keys tied to their username and registered with the server. I want to add a non-standard extension that uses these ...
1
vote
0answers
95 views

Test S/KEY support for PCI compliance - CVE-2007-2243

In order for our business to be PCI compliant, we need to prove that we are not vulnerable to CVE-2007-2243. This states that: OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is ...
1
vote
0answers
132 views

Why my proxy is still having some connections blocked

I am behind a firewall in France. I connect to proxy A, in Ireland with Dante via SSH port 22 and make a tunnel forwarding port 1080. The proxy works as expected but still having a port range ...
0
votes
0answers
36 views

Silent security on android

I saw a DEFCON talk about owning back a stolen PC/Mac, with a SSHd daemon and a dynamic-ip service installed,running in background. I was wondering if is it possible to achieve tha same results on an ...
0
votes
0answers
58 views

Expiration / enforce change of passphrase for private ssh keys

Out of curiosity, and also to check whether this is doable at all: Is there any way using standard tools to assign an expiry date [only] to the passphrase of an ssh private key, or to enforce the ...
0
votes
0answers
94 views

Do SSH private keys always contain enough information to derive a public key?

I am working on a persistence model for SSH Private keys. The technology used is Java. Since the persistence structure of the public and private keys is pretty similar and using some of the Java APIs ...
0
votes
0answers
71 views

Find the location of a hidden host

I'm doing a penetration test for a client who wants me to try and target a specific server. I have managed to get credentials(hard-coded in an in-house app) to a limited account on this server that ...
0
votes
0answers
42 views

Pwn Plug like tunneling suite

Is there some sort of a (free) SSH tunneling suite like the one on the Pwnie Express' Pwn Plug (R2)? It has SSH over HTTP, DNS, ICMP, and other covert tunneling options and uses BackTrack 5 as a SSH ...