Implementing robust authentication mechanisms is crucial to safeguard sensitive information. One such method gaining popularity for its effectiveness is Time-based One-Time Passwords (TOTP). In this article, we set up TOTP with OpenSSH, a widely used and versatile protocol for secure remote access. By integrating TOTP into your OpenSSH configuration, you enhance the security of your…
Continue reading →
Using SSH jump hosts (also known as bastion hosts or SSH gateways) with Ansible allows you to securely access and manage servers in a remote network or behind a firewall. Jump hosts act as intermediaries, forwarding your SSH connection to the target hosts. You can configure Ansible to use jump hosts for managing remote servers.…
Continue reading →
SSH tunneling is a method for securely transmitting network traffic between two devices, typically a local machine (client) and a remote server, using the Secure Shell (SSH) protocol. It creates an encrypted communication channel over an untrusted network, such as the internet, to protect the data being transmitted. SSH tunneling can be used for various…
Continue reading →
Ansible, a powerful open-source automation tool, simplifies the management of infrastructure, applications, and data across your IT environment. At the heart of Ansible’s magic lies SSH (Secure Shell) – the trusted protocol for secure remote access. Configuring SSH connections in Ansible is a fundamental step in reaching its capabilities for server provisioning, configuration management, and…
Continue reading →
In this presentation we will crack the password of a general Linux user via SSH in our personal lab. The machine from which we start the attack is a Kali Linux box, and the attacked machine is an ordinary Debian Linux on which a user set a weak password. Unfortunately the security settings are weak…
Continue reading →