obfuscated-openssh

obfuscated-openssh copied to clipboard

Man in the Middle Attack Vulnerability

1

Man in the middle attack vector found in `sshconnect.c` Duplicate: 1. Add ssh key for remote server, but add wrong IP 2. ssh now prompts: Are you sure you want...

zschuessler

zz

debug1: Obfuscation disabled

2

hi I deploy this patch at server end in /opt/ssh, and I add ObfuscatedPort and ObfuscateKeyword in sshd_config and start the sshd: /opt/ssh/sbin/sshd -f /opt/ssh/etc/sshd_config then I deploy the patch...

Jerry-Fix

./configure succeeds when using older version of libssl-dev but now it fails using libssl-dev 1.1.0g with this error ``` checking OpenSSL header version... 1010007f (OpenSSL 1.1.0g 2 Nov 2017) checking...

n1amr

Starting an improved version of OpenSSH with other developers

1

Dear brl, Our team of security developers want to start a more secure fork of OpenSSH on github we've been using for our operating system for a couple of years....

ghost

Hi, We discussed there might be some value on having your changes as a patch file, here it is. The first import (commit 3a68b4ddd20b7bc1bedb0ed2bb0bfee9718f058c) refers to the files as "Pristine...

DrDub

is this still developed?

1

hadifarnoud

Cougar

Even when password is enabled, for key generation only first 32 bytes of seed-password-iv buffer are used: ``` EVP_DigestInit(&ctx, EVP_sha1()); EVP_DigestUpdate(&ctx, buffer, OBFUSCATE_SEED_LENGTH + iv_len); EVP_DigestFinal(&ctx, md_output, &md_len); ``` So,...

ni4