Questions tagged [ssh]
SSH (Secure shell) is a protocol for secure communication between computers to execute remote commands, transfer data and tunnel TCP connections.
1,220
questions
6
votes
1
answer
30k
views
What is the difference between RSA1 & RSA in regards to SSH? Also when is the fingerprint & random art used?
I have searched this site for RSA1 with no results. From multiple google searches I have understood that RSA1 was used in SSH1 (which isn't recommended). However if its a single algorithm why are ...
- 293
21
votes
2
answers
18k
views
Is it secure to transfer an RSA public key by email?
I've set up my VPS'ssh server to accept only key-based identification: I disabled password-based connection.
As a consequence I am connecting from home with an RSA key generated prior to password ...
- 313
25
votes
2
answers
51k
views
How can I tunnel through an SSH server for application layer protocols such as HTTP/s and FTP?
Are there client programs that allow me to "tunnel" through my SSH enabled server for normal Internet requests such as HTTP(s)?
If so what are they and can someone point me in the right direction?
...
user13785
0
votes
3
answers
531
views
Make the public key unrecoverable given the private key
OpenSSL seems to bundle the private key together with the public key when it produces .pem files. Is there a way to prevent this from happening; i.e. prevent OpenSSL from creating a .pem private key ...
- 566
1
vote
4
answers
2k
views
Our logs showing a lot of SSH brute force attacks originating on Port 11
this forum has been brilliant so far. Just wondering if I can get a bit more help:
Can I get some info on a large amount of SSH brute force attacks originating from port 11 on the external host over ...
- 181
44
votes
5
answers
49k
views
How to set up OpenSSH to use x509 PKI for authentication?
I do not mean simply putting the public RSA key of a x.509 certificate into ~/.ssh/authorized_keys - I'm looking for a way to set up a ssh such that x.509 certificates signed by a pre-defined CA will ...
- 7,868
4
votes
3
answers
1k
views
How to secure a truecrypt container allowing access with multiple SSH public keys?
I would like to create a TrueCrypt container which can be accessed by multiple people. The container itself can be stored anywhere, e.g. in a shared folder in Dropbox or Google Drive, ...
I would ...
- 141
29
votes
2
answers
23k
views
What are the differences between ssh generated keys(ssh-keygen) and OpenSSL keys (PEM)and what is more secure for ssh remote login?
I have learned there are 2 methods to make SSH remote login easier and secure , those are;
ssh generated keys (using ssh-keygen)OpenSSH Keys
PEM (.pem) keys usually generated with OpenSSL (Amazon Web ...
- 393
1
vote
2
answers
3k
views
Is SSH2 still vulnerable to man-in-middle attacks?
With SSH using RSA public key authentication, can an attacker spoof the server IP address and connect with client to obtain client password?
- 311
15
votes
2
answers
54k
views
SSH Bad Protocol Version Identification String- What is it?
I need some help identifying some Bad Protocol version identification errors from our server.
We're getting the following:
sshd[xxxx]: Bad protocol version identification '\200\342\001\003\001' ...
- 181
7
votes
4
answers
3k
views
SSH: reusing public keys and known-man-in-the-middle
Usually, people recommend to use a single private-public key pair everywhere (if we're not talking about a possibility of compromising the private key):
Best Practice: “One per-user ssh key” or “...
- 201
14
votes
4
answers
3k
views
Attract Brute Force SSH Attacks
I posted a question on Server Fault, but got downvoted and had the question closed.
One of the comments suggested looking over here, so here goes:
For my senior project, I'm working on an application ...
- 315
7
votes
4
answers
17k
views
how safe is a home NAS with ssh access?
I'm thinking about acquiring a NAS from Synology (or QNap), these are pretty cool NAS and do much more than just storing files.
Some extras include:
ssh, ftp, telnet, mail servers
photo gallery (...
- 725
3
votes
3
answers
412
views
How to regain access to the server?
I have a Debian server with KVM available 24/7. It was recently broken into and its root password changed.
My hosting provider has restored my access and helped me change the password. But in the ...
- 133
15
votes
3
answers
28k
views
Disabling authentication via DSA keys in OpenSSH?
How can I disable DSA and ECDSA authentication on my server with OpenSSH 5.9? Sifting through the documentation material and doing a web search didn't yield any results - only an old bug report for ...
- 1,662
24
votes
1
answer
31k
views
What are the differences between the arcfour, arcfour128 and arcfour256 ciphers in OpenSSH?
What are the differences between the arcfour, arcfour128 and arcfour256 ciphers in OpenSSH?
I am interested about: speed and security implications.
I know that arcfour is fast for file transfers, ...
- 375
1
vote
1
answer
458
views
Implementing Secure Remote Password with Remote Desktop Application
I had read the Secure Remote Password Protocol paper written by Tom Wu. This protocol is resistant to dictionary attacks. I have also go through some papers regarding to VNC attacks due to weak ...
- 311
2
votes
2
answers
2k
views
Attacks in SSL and SSH
Assume that we have two end-host A and B connected by two routers R1 and R2. A wants to send a large file to B.
A decides to establish SSH connection with host B using public key authentication. Can ...
- 21
3
votes
2
answers
307
views
Why CAs instead of global fingerprint database?
Why do we use "too big to fail" CAs and the chain of trust instead of a global fingerprint database in a similar vein to how ssh works?
- 49
6
votes
3
answers
1k
views
Can I develop SSH-based tools within United States?
It is well known that development of open-source cryptographic tools is very problematic within the United States: all open-source ssh-based software was specifically developed outside of the US of A ...
- 1,964
25
votes
3
answers
157k
views
OpenSSH default/preferred ciphers, hash, etc for SSH2
When using OpenSSH server (sshd) and client (ssh), what are all of the default / program preferred ciphers, hash, etc. (security related) and their default options (such as key length)?
So, what are ...
- 352
27
votes
3
answers
10k
views
Which SSH security is stronger? 2 Factor or Public key
For SSH authentication, which is more secure?
2 Factor Authentication using a USB token/Google Authenticator(time based)
OR
Public/private key with password
Or could they be both used at the same ...
- 379
3
votes
3
answers
2k
views
length of ciphers versus length of key
ssh-keygen defaults to RSA (for SSH protocol 2) and a 2048 bit key.
At this description of ssh
The supported ciphers
are: 3des-cbc, aes128-cbc, aes192-cbc, aes256-cbc, aes128-ctr,
...
- 953
6
votes
4
answers
56k
views
Brute-force an SSH-login that has only a 4-letter password
Suppose, you know that a certain computer is only protected by such a short password, then you could just try every possible combination easily.
How would a script look like, that tries to crack that ...
- 2,390
2
votes
4
answers
1k
views
I think my server is under attack, what can I do to stop it? [duplicate]
Possible Duplicate:
Invalid users trying to log in to my server
I have a small ssh server mostly used for file sharing. A couple of other people and I use it and there are only 3 users. Recently ...
- 121
7
votes
2
answers
2k
views
Vulnerabilities of Secure Shells
I ssh into my school's engineering computer to submit large programmin projects on a regular basis. Are there any vulnerabilities or worries about using this channel so frequently? What makes a secure ...
- 85
4
votes
1
answer
705
views
What are some steps to take for securing a Linux server that aren't in this list of obvious ones?
Obvious things:
Disable root login (rather, don't enable it)
Secure SSH (no root login, key auth only, timeout after inactivity, whitelist users who can SSH in, etc.)
IP Tables firewall whitelisting ...
- 1,362
0
votes
1
answer
3k
views
SSH Log: "Accepted password for user..."
I have only port 29999 open for SSH connections. But in the log file I see entries like this:
Accepted password for user1 from 190.101.200.100 port 55805 ssh2
saying that a connection was accepted ...
- 105
0
votes
2
answers
248
views
Improve SSH logs
I want to improve my SSH log. I would like to basically be able to see failed attempts with ip address and the password used. is that possible?
Right now I see something like this:
Failed password ...
- 105
0
votes
3
answers
464
views
Petraeus scandal - what would have been a better way to communicate electronically [closed]
Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). ...
- 349
3
votes
1
answer
5k
views
How to restrict SSH access outside of LAN? [closed]
We have several dedicated servers.
We need to ensure "root" user can not be accessible through SSH outside of LAN.
I have searched and found the followings #
http://www.raspberrypi.org/phpBB3/...
6
votes
1
answer
2k
views
Replacing weak SSH fingerprint algorithms
Even though MD5 has been broken for years and its vulnerabilities have been used to create real-world rogue X.509 CAs and other horrible things, OpenSSH and PuTTY still use MD5 as the default public ...
- 267
12
votes
3
answers
17k
views
How to correctly secure a ssh session against MITM attack?
How do you improve the security of your ssh session against a man-in-the-middle attack?
- 123
195
votes
4
answers
223k
views
SSH key-type, rsa, dsa, ecdsa, are there easy answers for which to choose when?
As someone who knows little about cryptography, I wonder about the choice I make when creating ssh-keys.
ssh-keygen -t type, where type is either of dsa,rsa and ecdsa.
Googling can give some ...
- 2,590
2
votes
1
answer
451
views
Is the `ssh-agent`'s DSA signature deterministic?
In my hopes to use ssh-agent to generate a signature as password I implicitly assumed a deterministic signature. DSA is however supposed to take random value k for signing. However that randomness is ...
- 7,868
9
votes
3
answers
1k
views
Is piping a `ssh-agent` signed message as a password secure?
There's an encrypted filesystem on a server I ssh into using public key authentication. Since a forwarded ssh-agent can deterministically sign a message (see also the ssh-agent protocol section 2.6.2),...
- 7,868
57
votes
2
answers
58k
views
How does ssh public key authentication work?
My basic understanding is this:
The (connected to) server's sshd uses the public key to encrypt some message
The client's ssh or ssh-agent decrypts it and sends something back (the message's checksum?...
- 7,868
23
votes
2
answers
9k
views
Is it okay to widely share the RSA key fingerprint for a host?
When you ssh into a remote box for the first time or if the remote host's key fingerprint has changed (from what's stored in your known_hosts file) you get a warning and you are shown the fingerprint ...
user15392
3
votes
1
answer
2k
views
Why does the OpenSSH client on Mac OS X silently launch an ssh-agent for the user?
I'm confused by the difference in behavior of ssh clients I'm seeing on two different hosts. Just to be clear, this is the scenario:
"macbox" OS X using OpenSSH_5.2p1 ssh client
"sunbox" Solaris 10 ...
- 2,247
19
votes
2
answers
24k
views
Security Concerns with TCP Forwarding
Until now I've been setting TCP Forwarding in ssh always blindly to no but searching on the net, I have trouble finding out what the actual security threat is, when allowing it.
The one thing I did ...
- 953
3
votes
3
answers
246
views
Can the root of a system access to unencrypted data when using a double tunnel?
I connect to a DMZ gateway system (B) which is not secured. From this machine (B) I can connect to the final destination (C).
A-->B-->C
I created a ssh tunnel from A to B and forwarding the port 22 ...
- 31
6
votes
1
answer
2k
views
Are SSH packets encrypted even before new keys are sent?
What format does SSH use to exchange (encrypted / plain) packets before new keys are derived? SSH Document says that after key exchange, client and server use negotiated algorithm to encrypt the ...
4
votes
1
answer
467
views
What dangers are there in storing my private key on different servers?
This question is specifically concerned with storing keys in the cloud, and is somewhat applicable.
But I've got a laptop and a desktop computer at home - I'm the admin on both of those systems, and ...
- 1,795
56
votes
7
answers
72k
views
Invalid users trying to log in to my server
I'm seeing a lot of log entries that appear to be failed login attempts from unknown IP addresses.
I am using private and public keys to log in with SSH but I have noticed that even with private ...
- 671
254
votes
4
answers
437k
views
What is the difference between authorized_keys and known_hosts file for SSH?
I am learning the basics of SSH protocol. I am confused between the contents of the following 2 files:
~/.ssh/authorized_keys: Holds a list of authorized public keys for servers. When the client ...
- 2,763
8
votes
2
answers
43k
views
How to create ssh tunnel using netcat?
I want to create reverse connection between two machines, but these is a firewall in the middle preventing all connections, except ssh. I want to create ssh tunnel using netcat, could you please tell ...
- 437
2
votes
0
answers
3k
views
Hack scenario when a person has a non-superuser shell [closed]
Suppose that there are following three machines in the network:
Machine A:
Microsoft Server 2003 Service Pack 2
FileZilla 0.9.29 beta ftp server (TCP 21)
Mcafee ePolicy server (81), remote desktop ...
- 21
4
votes
3
answers
4k
views
sniff SSH password on the server
Is it possible on the server to log the password encoded by the remote user inside a log.
I want to make a honeypot to see the type of user/password used.
- 589
13
votes
5
answers
5k
views
Confusion: Why isn't a passhrase encrypted SSH key two factor auth?
I'm trying to figure out the best practices for accessing my devbox from a public terminal.
Most sources I've found recommend protecting the box with some kind of two factor authentication, such as ...
- 233
11
votes
7
answers
9k
views
How do RSA fingerprints protect from MITM attacks? [duplicate]
I understand that RSA fingerprints are used to verify that you are really connecting directly to who you want to connect to, and not someone else posing as that site.
Like when you do a git push, it ...
- 211