SSH

General

• http://en.wikipedia.org/wiki/Secure_Shell
• https://wiki.archlinux.org/index.php/Secure_Shell

• O'Reilly's SSH, The Secure Shell: The Definitive Guide: 1.5. History of SSH
• http://blog.hyfather.com/blog/2013/04/18/ssh-uses-four-tcp-segments-for-each-character/

Server/client

• http://www.openssh.org/
  • http://en.wikipedia.org/wiki/OpenSSH

• https://matt.ucc.asn.au/dropbear/dropbear.html
  • http://en.wikipedia.org/wiki/Dropbear_(software)

Keys

• https://wiki.archlinux.org/index.php/SSH_Keys

Default file name format;

~/.ssh/id_rsa and ~/.ssh/id_rsa.pub
  RSA key

~/.ssh/identity and ~/.ssh/identity.pub
  DSA key (old)

Creating

ssh-keygen
  create a key. rsa is default.

Distributing

ssh-copy-id [-i [identity_file]] [user@]remote

ssh-copy-id username@remote-server.org

ssh-copy-id -i ~/.ssh/id_ecdsa.pub '-p 221 username@remote-server.org'

Multiple keys

ssh -i ~/.ssh/id_rsa_example.org

Config

~/.ssh/config

Host example.org
 IdentityFile ~/.ssh/id_rsa_example.org

• http://nerderati.com/2011/03/simplify-your-life-with-an-ssh-config-file/

to sort

• ietf: Managing SSH Keys for Automated Access - Current Recommended Practice

• SSH Can Do That? Productivity Tips for Working with Remote Servers
• Tips for Remote Unix Work (SSH, screen, and VNC) [1]

• http://blog.hypergeometric.com/2012/02/22/ssh-dos-and-donts/
• http://www.cyberciti.biz/tips/linux-unix-bsd-openssh-server-best-practices.html

• http://opensourcehacker.com/2012/10/24/ssh-key-and-passwordless-login-basics-for-developers/
• http://vimeo.com/54505525

• HOWTO: set up ssh keys
• Using Rsync and SSH - Keys, Validating, and Automation
• http://www.karan.org/blog/index.php/2009/08/25/multiple-ssh-private-keys

• http://www.cmdln.org/2008/02/11/restricting-ssh-commands/
  • http://www.hackinglinuxexposed.com/articles/20030115.html
  • https://github.com/gabor-udvari/authprogs
    • https://raw.github.com/gabor-udvari/authprogs/master/authprogs

• http://linux.die.net/man/1/ssh-keyscan

• http://en.wikipedia.org/wiki/Ssh-agent

• https://github.com/authy/authy-ssh

• http://www.unixwiz.net/techtips/ssh-agent-forwarding.html

randomart

VisualHostKey=yes

• http://superuser.com/questions/22535/what-is-randomart-produced-by-ssh-keygen
  • http://www.dirk-loss.de/sshvis/drunken_bishop.pdf

SCP

scp -P [port] file.txt user@remotehose:~/file.txt

When scp on remote is initiated, it done so with -t flag, which is undocumented but might be required for precise command persmission configuration.

• https://blogs.oracle.com/janp/entry/how_the_scp_protocol_works

SSHFS

• http://fuse.sourceforge.net/sshfs.html
  • http://en.wikipedia.org/wiki/SSHFS

sshfs user@address:/home/user/dir dirtomountto -p [port]
  mount

fusermount -u dirtomountto
  unmount

• Notes on SSHFS

Security

• http://www.semicomplete.com/articles/ssh-security/

• http://blog.sucuri.net/2013/07/ssh-brute-force-the-10-year-old-attack-that-still-persists.html

• https://wiki.archlinux.org/index.php/Sshguard
• https://wiki.archlinux.org/index.php/Fail2ban

Honeypot

• https://code.google.com/p/kippo/
  • http://blog.macuyiko.com/2011/03/running-ssh-honeypot-with-kippo-lets.html

X11 forwarding

• http://blog.samat.org/2006/05/08/best-ssh-options-for-x11-forwarding

See GUI#X_Forwarding

Tools

• https://github.com/turicas/sbc

To sort

• https://wiki.archlinux.org/index.php/Shfs - older Linux kernel module which allows you to mount remote filesystems using a plain shell (ssh) connection

Multi factor

• http://undeadly.org/cgi?action=article&sid=20130616112437