SSH ​

Tailscale replaces SSH well I think. Liked this visual guide to SSH.

Links ​

• SSH logins using keys (2005)
• Endlessh - SSH tarpit that very slowly sends an endless, random SSH banner. (HN)
• SeKey - Use Touch ID / Secure Enclave for SSH Authentication.
• BLESS - SSH Certificate Authority that runs as an AWS Lambda function and is used to sign SSH public keys.
• sslh - Applicative Protocol Multiplexer (e.g. share SSH and HTTPS on the same port).
• Guide to using YubiKey for GPG and SSH
• Eternal Terminal - Re-Connectable secure remote shell. (Web) (HN)
• ssh in https (Lobsters)
• WebSSH - Web based ssh client.
• Building interactive SSH applications (2019) (HN)
• Top 20 OpenSSH Server Best Security Practices (2020)
• Pwning your (web)server and network the easy way - or why exposing ~/.ssh/ is a bad idea (HN)
• jass - Tool to facilitate sharing of secrets using SSH keys.
• rtop-bot - Bot for Remote Server Monitoring over SSH.
• Awesome SSH
• ssh-vault - Encrypt/decrypt using ssh keys.
• Secretive - Store SSH keys in the Secure Enclave. (HN)
• sshcommand - Turn SSH into a thin client specifically for your app.
• How to SSH Properly (2020) (HN)
• Mosh - Tool used to connect from a client computer to a server over the Internet, to run a remote terminal. (HN) (Article) (HN)
• DIY Single Sign-On for SSH (2020) (Lobsters)
• ssh-p2p - SSH p2p tunneling server and client.
• SSH Tips & Tricks (2020) (HN)
• xxh - Bring your favorite shell wherever you go through the ssh. (HN)
• SSH Agent Explained (2020) (HN)
• SSH Emergency Access (2020) (HN)
• Smallstep - Single Sign-on SSH & Production Identity. Say Goodbye to SSH Key Management.
• Step CLI - Toolkit for working with your public key infrastructure (PKI).
• Lockbox - Personal centralised SSH key deployment to multiple boxes. (Lobsters)
• Ask HN: What do you use for SSH key management of teams? (2020)
• How to properly manage ssh keys for server access (2020) (HN)
• SSH tutorial - Small guide how to use SSH.
• TRASA - Zero Trust Service Access. (Web)
• PSSH - Provides parallel versions of OpenSSH and related tools, including pssh, pscp, prsync, pnuke and pslurp.
• SSHDog - Small portable SSH server in Go.
• SSH Through Websocket (2020)
• assh - Transparent wrapper that adds support for regex, aliases, gateways, dynamic hostnames, graphviz, json output, yaml configuration, and more to SSH.
• Roll your own Ngrok with Nginx, Letsencrypt, and SSH reverse tunnelling (2019)
• SSH Tunnelling Basics
• LazySSH - SSH server that acts as a jump host only, and dynamically starts temporary virtual machines. (HN)
• Passive SSH - Open source framework composed of a scanner and server to store and lookup the SSH keys and fingerprints per host (IPv4/IPv6/onion). (Presentation)
• Paramiko - Leading native Python SSHv2 protocol library.
• boxssh - Server that boxes you into a container.
• boringproxy - No-frills HTTPS/SSH tunneling solution with as much automation as possible. Designed for self-hosters. (Web)
• kr - Dev tool for SSH auth + Git commit/tag signing using a key stored in Krypton.
• SSH Access for Supercomputers (2021)
• sshh - Quickly SSH into hosts.
• A visual guide to SSH tunnels (HN)
• SSH Certificates Security Hardening (2021)
• MultiSSH - Connect to multiple SSH hosts simultaneously.
• How often should I rotate my ssh keys? (2021)
• remote pbcopy for use over ssh
• tosh - Imagine your SSH server only listens on an IPv6 address, and where the last 6 digits are changing every 30 seconds as a TOTP code.
• consrv - SSH to serial console bridge server.
• ssh-audit - SSH server & client auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc).
• SSH quoting (2021) (HN)
• ssh_config - Go parser for ssh_config files.
• SSH2-Promise - Powerful promise wrapper around ssh2 client.
• ReverseSSH - Lightweight SSH server behaving like a reverse shell.
• sish - HTTP(S)/WS(S)/TCP Tunnels to localhost using only SSH. Open source serveo/ngrok alternative.
• Rospo - Simple and reliable ssh tunnels with embedded ssh server in Go.
• vSSH - Go Library to Execute Commands Over SSH at Scale.
• sshportal - Jump host/Jump server without the jump, a.k.a Transparent SSH bastion.
• Two cable SSH: the fastest Raspberry Pi setup (2020)
• Keygen - SSH key pair generator.
• The pitfalls of using SSH-agent, or how to use an agent safely (HN)
• ssh-key-confirmer - Test ssh login key acceptance without having the private key.
• Hardening SSH with 2fa
• SSH Tunneling Explained (HN)
• SCP for GitHub Actions - GitHub Action that copy files and artifacts via SSH.
• Massh - Go package for running Linux distributed shell commands via SSH.
• SSH alternatives for mobile, low-latency or unreliable connections (2021) (HN)
• signmykey - Automated SSH Certificate Authority.
• ssh2-rs - Rust bindings to libssh2, an ssh client library.
• Simple SSH Security (2021) (HN)
• OpenSSH Guide
• It's Now Possible To Sign Arbitrary Data With Your SSH Keys (2021) (HN) (Lobsters)
• Portable OpenSSH - Complete implementation of the SSH protocol for secure remote login, command execution and file transfer.
• SSH-MITM - SSH audits made simple. (HN)
• SSH2 - SSH2 client and server modules written in pure JavaScript for NodeJS.
• Wish - Make SSH apps, just like that.
• promwish - Provides a simple wish middleware exposing some Prometheus metrics.
• age-plugin-remote - Expose local age identities to remote machines via SSH.
• go-ssh-client - Go package that helps you run command on remote host via SSH.
• sshw - ssh client wrapper for automatic login.
• Restricting SSH agent keys (2022) (HN)
• Best Practices for Securing SSH (2022) (HN)
• Wishlist - SSH directory.
• sshs - Terminal user interface for SSH.
• clidle - Play Wordle over SSH.
• Devzat - Chat over SSH. Like Discord but in the terminal, over SSH. (HN)
• SSH into your private machines from anywhere, for free, using Cloudflare Tunnel (2022) (HN)
• Rayon - Server monitor tool for Linux based machines using remote proc file system with script execution. Available for macOS.
• SSH-tools - Making SSH more convenient. (HN)
• lssh - TUI list select ssh/scp/sftp client tools.
• Melt - Backup and restore SSH private keys using memorizable seed phrases.
• ssh-key-algo - Script to check if the SSH key algorithm is up to date.
• Unix System Monitoring Over SSH
• If You're Not Using SSH Certificates You're Doing SSH Wrong (2019) (HN)
• Reverse SSH - SSH based reverse shell.
• sshtunnel - SSH tunnels to remote server.
• sshtun - Go package that provides a SSH tunnel with port forwarding.
• FastSSH - TUI that allows you to quickly connect to your services by navigating through your SSH config.
• wssh - SSH to WebSockets Bridge that lets you invoke a remote shell using nothing but HTTP.
• SSH tunnelling for fun and profit: Autossh (2016)
• openssh-keys - Rust library to handle OpenSSH public keys.
• ShellHub - Get seamless remote access to any Linux device. Centralized SSH for the edge and cloud computing. (Code)
• SSH Slides - Terminal-based Presentations Over SSH.
• Tunnel-SSH - Easy SSH tunneling.
• Warpgate - Smart SSH bastion host for Linux that can be used with any SSH client.
• ssh-cert-authority - Democratic SSH certificate authority.
• Trove's SSH Bastion
• sshconf - SSH configuration reading and modification library in Python.
• Working Remotely? Pair SSH with Teleport (2022) (HN)
• SSH SOCKS proxy but it's Tailscale (2022)
• Scriptable SSH through OpenSSH
• SSHConsole - Provides an SSH listener to your server which allows you to ssh commands to your server and receive the response back to your terminal.
• How to Store an SSH Key on a Yubikey (2022) (HN)
• Russh - Rust SSH client & server library.
• Tailscale SSH (2022) (HN) (Lobsters)af
• drgn.js - Modern SSH client built with web technologies.
• A toy remote login server (2022)
• ssh srv.us - Expose local HTTP services online.
• SSH Tips and Tricks (Lobsters)
• Ed25519 Deep Dive Addendum (2022)
• ssh-key-sync - Tool for managing ssh authorized_key files on servers.
• RustCrypto: SSH - Pure Rust implementation of components of the Secure Shell (SSH) protocol.
• Making an SSH client the hard way (2022) (Tweet) (HN)
• SSH port forwarding with Go (2022)
• Parallel-SSH - Asynchronous parallel SSH Python client library.
• Citadel - SSH Client & Server in Swift.
• SSH server hardening (2022) (Lobsters)
• AsyncSSH - Asynchronous SSH for Python.
• Sharing your SSH keys with GitHub
• pbproxy - Send your clipboard anywhere you can ssh to.
• A Visual Guide to SSH Tunnels: Local and Remote Port Forwarding (2022) (HN)
• Hardware-based SSH/GPG/age agent
• ssh whoami.filippo.io (2023) (HN)
• whoarethey: Determine Who Can Log In to an SSH Server (2023) (Lobsters) (HN) (Code)
• I don't understand terminals, shells and SSH (2023) (HN)
• napi-rs/ssh
• Dropbear SSH - Self-contained client/server for embedded systems.
• What is the Randomart Image for? (2023) (HN)
• libssh2 - SSH2 library.
• PAM-RSSH - Remote sudo authenticated via ssh-agent.
• We need better support for SSH host certificates (2023) (Lobsters)
• Forwarding ssh-agent through WebSockets
• SSH authorization keys experiments (2023)
• Closing a stale SSH connection (2023)
• xdg-open-svc - Service that you can run in your host, forward the socket over SSH, and use it to open URLs and etc from your target host.
• SSH over QUIC (HN)
• sshtunnel - Ultra simple SSH tunnelling for Go programs.
• snips.sh - Passwordless, anonymous SSH-powered pastebin with a human-friendly TUI and web UI.
• sshmux - SSH multiplexing library, allowing you to write "jump host" style proxies.
• sshpiper - Reverse proxy for sshd. all protocols, including ssh, scp, port forwarding, running on top of ssh are supported.
• An excruciatingly detailed guide to SSH (but only the things I find useful) (2023) (HN)