network security ssh tunneling david funk matt mclaughlin systems administrators computer systems...

Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Upload: ralph-phelps

Post on 29-Dec-2015

217 views

Category:

Documents

4 download

Report

Download

Embed Size (px):

TRANSCRIPT

Network SecuritySSH Tunneling

David FunkMatt McLaughlin

Systems AdministratorsComputer Systems Support

COE, University of Iowa

Using SSH Tunneling SMB Mount Remote Desktop

Page 3: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Direct Connect

Shareclient

SMB file serverPort 139

Tunnel

SMB file server

Share client

SSH client

SSH server

Port 22

encrypted

Port 139

sshd

Port 139

Page 5: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Download ToolsSetup lmhosts

rpccfg.exe http://download.microsoft.com Search for rpccfg

C:\windows\system32\drivers\etc\lmhosts 127.0.0.1 smb00

Page 6: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Set TCP Port 135

Listen only on interfaces specified by Bind value

HKLM\System\CurrentControlSet\Services\RpcSs Add ListenOnInternet REG_SZ N

Reboot

Page 7: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Configure RPC Configure host not to listen on 0.0.0.0:135

rpccfg –l Select interface number of non-loopback interface

rpccfg -a 65539 Reboot

Page 8: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Setup SecureCRT(or Favorite SSH Program)

SecureCRT Tunnel Ports

Z:"Port Forward Table V2"=00000002 port135|127.0.0.1,135|1|128.255.17.40|135|| port139|127.0.0.1,139|1|128.255.17.40|139||

Setup “Port Forward Filter” =allow,127.0.0.0/255.0.0.0,0

allow,128.255.20.23/255.255.255.255 deny,0.0.0.0/0.0.0.0,0

Page 9: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Remote Desktop TunnelBasic Setup

Make sure remote assistance and remote desktop are turned off under Start | Control Panel | System | Remote

Setup SSH with local port 3389 forwarded to remote port 3389 on target Windows computer

Page 10: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Setup Modified mstsc.exe

Allow connections to 127.0.0.1

Copy c:\windows\systems32\mstsc.exe and mstscax.dll to another folder

Set mstsc.exe in new location to run in Windows 98 compatible mode.

Page 11: Network Security SSH Tunneling David Funk Matt McLaughlin Systems Administrators Computer Systems Support COE, University of Iowa

Connect viaRemote Desktop

Connect SSH session

Start modified mstsc.exe

Connect to 127.0.0.1

Miss Kelly McLaughlin · Miss Kelly McLaughlin

SSH Secure Shell From: //en.wikipedia.org/wiki/Ssh

Peculiar SSH(1) · [email protected], \ ssh-ed25519. MACs ssh -Q mac. Host * MACs \ [email protected], \ [email protected]. Ciphers ssh -Q cipher-auth

McLaughlin Bennett

Cisco SSH Nasil Yapilir | Cisco SSH Ayari

66 McLaughlin

2016 SSH Healthcare Systems Modeling & Simulation Affinity Group Annual Report

McLaughLin centre

SSH Router CISCO-Servidor GNU/Linux. file8/7/2018 · SSH SERVER (config) ssh authentication—retries 3 SSH SERVER (config) ssh version 2 . Debianl [Corriendo] - Oracle VM Virtua180x

Model SSH-C and SSH-F - s3.amazonaws.comSSH...1 model ssh-c and ssh-f installation, operation and maintenance instructions instruction manual im084r06

all php - Dixie State Universitycit.dixie.edu/it/3100/joe-notes-2016/all_php.pdf · joe — joe@nsl-thegummioear: /etc/bind — ssh ssh yavin logx32 — ssh — ssh ssh yavin /etc/bind$

Configuring Secure Shell (SSH)...Configuring Secure Shell (SSH) • FindingFeatureInformation,page1 • PrerequisitesforConfiguringtheSwitchforSecureShell(SSH)andSecureCopyProtocol(SCP),page

The latest Rossiter-McLaughlin measurements of WASP systems

McLaughlin & McLaughlin - Worldwide Project …mclaughlinandmclaughlin.com/wp-content/uploads/2011/12/Brochure... · FMC Corporation GlaxoSmithKline ... Project Execution Plan : McLaughlin

McLaughlin-Buick 1908 ~ 1942 - Tin ... - · PDF fileMotoring Memories: McLaughlin-Buick, cont. ―However, it was also called and advertised as McLaughlin-Buick. Some models read McLaughlin

Delivering public services for the digital age Noel McLaughlin, B.Sc. (Hons), Business Systems Manager

Basic cryptography and SSH remote logins · Puttingitalltogether,cont. $ scp .ssh/id_rsa.pub remote.host:tmp.key remote$ cat tmp.key >> .ssh/authorized_keys remote$ chmod go-rwx .ssh

General Overview H2020 - Bottom -up SSH -Embedded SSH - Dedicated SSH - Reflective Societies

Configuring SSH and Telnet · Configuring SSH and Telnet Thischaptercontainsthefollowingsections: • ConfiguringSSHandTelnet,page1 Configuring SSH and Telnet Information About SSH

SSH - Columbia Universitysmb/classes/s09/l14.pdfSecure Shell: SSH Secure Shell: SSH Secure Shell: SSH Features of SSH Simple Login Sequence The Server’s Two Keys Authenticating the

Graviola Mclaughlin

Universal SSH Key Manager Datasheet · ticketing systems and e.g. your IAM infrastructure. Policy-based reports on the compliance of your SSH configurations and key environment. Compliance

Secure and Manage SSH Keys - BeyondTrust€¦ · Secure Shell (SSH) is a tool used to enable secured systems management, file transfers, and application automation that ships standard

MICHELLE MCLAUGHLIN and : CIVIL ACTION TOMMY MCLAUGHLIN…

1 CSE306 Operating Systems Projects CVS/SSH tutorial

SSH and keys - events.ubuntunet.net · SSH and system administration SSH gives you remote command-line access to systems Therefore a very attractive target for attackers Traffic is

Legal Systems and Variance in the Design of Sara McLaughlin

Configure SSH on Windows 10 | Configure SSH Server | Free SSH Server

Securing SSH Admin Access Pragma Systems Fortress SSH Cisco Enterprise Routing Products

SSH - Erlangerlang.org/documentation/doc-5.6.4/pdf/ssh-1.0.pdfSSH Reference Manual Short Summaries Erlang Module ssh [page 5] – Main API of the SSH application Erlang Module ssh

Melissa McLaughlin

Model SSH-C and SSH-F - Cloud Object Storage | Store ...SSH... · 1 model ssh-c and ssh-f installation, operation and maintenance instructions instruction manual im084r06

McLaughlin, John

Distributed computing services: cluster grids, HPC systems, clouds. · 2019. 4. 16. · SSH SSH Researcher Researcher Data Data Cluster Cluster • Users connect to the head node