#ssh

[lien] Piloter ses serveurs avec un émulateur de terminal web - Journal du Hacker (RichardDern) #security #history #gik #ssh #net #emu

SSH to Telia Sagemcom router #networking #server #ssh #router

https://askubuntu.com/q/1560763/612

"Fun" discoveries I've learned today: if you stick `ssh <host> whoami; exec nc %h %p` into your ProxyCommand for SSH, things break badly. Apparently you can't recursively ssh inside a proxycommand.

#ssh #linux

[lien] OpenSSH: Post-Quantum Cryptography #security #gik #ssh

Gogs Zero-Day RCE (CVE-2025-8110) Actively Exploited

A zero-day vulnerability in Gogs, a popular self-hosted Git service, has been discovered and is being actively exploited. The flaw, identified as CVE-2025-8110, is a symlink bypass of a previously patched RCE vulnerability. It allows authenticated users to overwrite files outside the repository, leading to Remote Code Execution. Over 700 compromised instances have been identified on the internet. The vulnerability affects Gogs servers (version <= 0.13.3) exposed to the internet with open-registration enabled. The attack chain involves creating a repository with a symbolic link, then using the PutContents API to overwrite sensitive files. The malware used in the attacks is based on the Supershell framework, designed for establishing reverse SSH shells.

Pulse ID: 6939bd82d7768abb3cf0a04a
Pulse Link: https://otx.alienvault.com/pulse/6939bd82d7768abb3cf0a04a
Pulse Author: AlienVault
Created: 2025-12-10 18:35:46

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #ELF #InfoSec #Malware #OTX #OpenThreatExchange #RAT #RCE #RemoteCodeExecution #SSH #Vulnerability #ZeroDay #bot #AlienVault

RE: https://mastodon.social/@rsm92/115388458241776968

Okk, entirely disabling the gcr-ssh-agent was not the right approach! Unfortunately some programs like Element depend on it.

Instead create/edit:
~/.config/autostart/gnome-keyring-ssh.desktop

with:

[Desktop Entry]
Type=Application
Name=Disable GNOME Keyring SSH
Exec=/bin/true
Hidden=true

#ssh #security #linux #gnome

Quiz-Frage: Was macht der folgende Befehl und für was könnt man dies gebrauchen?

ssh -L 8080:localhost:80 server

#GNU #Linux #SSH

https://blog.gslin.org/archives/2025/12/10/12777/%e4%b8%ad%e5%9c%8b%e7%9a%84-nanokvm-%e5%85%a7%e8%97%8f%e9%ba%a5%e5%85%8b%e9%a2%a8%e4%bb%a5%e5%8f%8a%e7%9b%a3%e8%81%bd%e8%bb%9f%e9%ab%94/

中國的 NanoKVM 內藏麥克風以及監聽軟體

#aircrack #amixer #arecord #backdoor #china #ip #kvm #linux #mic #micphone #nanokvm #network #security #ssh #tcpdump #wifi

哥们我真的服了，为了termius的多端同步，我按照这个帖子https://linux.do/t/topic/891211 的操作，专门到淘宝买了100里拉的兑换码，用BT下载了win10镜像，vmware安装了iso，然后配置可能是内存cpu给少了，干啥都很卡，然后注册了新的outlook邮箱，更新了Microsoft Store，下载了termius，然后注册登陆，最后进去终于看到了85里拉/年的选项，结果各种失败报错，就卡在最后的subscription，然后宿舍熄灯了，不得不关掉电脑🤬🤣

搞之前还去咸鱼了，结果卖家告诉我没货？😇

#termius #ssh #vmware #windows #win10 #Microsoft #linuxdo #土耳其

Almost forgotten direct laptop->laptop connection. But 100gb data transfere does remember me that marvellous possibility! #scp #ssh

When a person loses access to their TOTP (e.g. phone wiped) and didn't properly save their TOTP's scratch code they have to; they have to rely on the instance admins to authenticate with them that it is really their account, this can be a quite difficult and lengthy process to safely verify this.
Something that has come up in these situations is that such people usually have a (verified) SSH key added to their account and could use that to prove they are the owner of the account, by the possession of such SSH key.
This patch adds a new SSH command that streamlines this process to a self-service, no involvement of instance admins are needed. This is similar to how Gitlab does this: https://gitlab.com/gitlab-org/gitlab-shell/-/merge_requests/74
When the user wants to make use of this self-service, they simply have to execute ssh git@git.example.org totp_recovery_code, they might need to specify with -i ~/.ssh/path_to_key a verified key if this isn't the default key, and confirm they want to regenerate the TOTP recovery code and fill in their password

This #ssh #random creature is... kind of dragon-snail? I clearly saw its triangular shell and ears in these dots
Maybe my brain was also corrupted with Monster Hunter and that healing green #snail there → https://monsterhunterwiki.org/wiki/Escuregot

#drawing #art #MastoArt #CreativeToots #krita #ArtWithOpenSource #dragon #dragonart