Commit Graph

  • e02764bf4b .hkexsh_id file supports multiple authtokens (multi remote hosts, aliases for same remote host) Russ Magee 2018-09-14 11:58:10 -0700
  • d9b34fa631 GenAuthToken() now uses client-supplied ConnHost Russ Magee 2018-09-14 01:13:14 -0700
  • 1efc1337df -TODO items; scrub authCookie after use Russ Magee 2018-09-14 00:40:20 -0700
  • c9eb6bcb38 Added -a authtoken feature for scripted use Russ Magee 2018-09-13 23:51:49 -0700
  • 350f3f375e -hkexauth now always tries bcrypt even for nonexistent users (user enum timing attack resist) Russ Magee 2018-09-11 22:36:20 -0700
  • 140523dabb -Refactored HerraduraKEx negotiation into subroutine (anticipation of future multi-KEx support) Russ Magee 2018-09-11 00:04:38 -0700
  • bee0bececf -Bumped version to 0.2pre to reflect protocol break w/0.1pre -Added design principle note (no downgrade attack-enabling protocol features) Russ Magee 2018-09-10 20:28:41 -0700
  • dcb42d43f1 -BREAKING CHANGE: pre-KEx byte sent for KEx alg (default and only for now: KEX_HERRADURA) Russ Magee 2018-09-10 20:22:09 -0700
  • 5f1d57f987 Fixed hkexauth fields expected Russ Magee 2018-09-08 22:01:33 -0700
  • 8bca54ed7b -hkexpasswd: now can add new users -Removed unused disallowedCmdList (field 4) from CSV Russ Magee 2018-09-07 20:56:42 -0700
  • 075ca7521c Client now passes xterm-256color in Session Russ Magee 2018-09-07 20:37:47 -0700
  • 9e803ffc19 -Moved recCmd out of hkexsh and hkexshd into hkexsession.go (now abstract Session type) Russ Magee 2018-09-07 15:35:33 -0700
  • bff56a2c61 -Added -z option back to tarpipes -Moved remaining chatty fmt.Prints to log.Print Russ Magee 2018-09-06 16:37:17 -0700
  • b33e9de139 -Moved taunting of failed logins to client-side -Added byte auth pass/fail stage prior to shell/copy session start Russ Magee 2018-09-06 16:23:57 -0700
  • 9ff35a69fe -Converted exit status to uint32 (0-255: UNIX exit codes), above for OOB (out-of-band) status -Failed auth for shell logins now returns extended code CSEBadAuth to client Russ Magee 2018-09-06 13:50:56 -0700
  • 8a24fb113f client prints nonzero remote end exit status; comment cleanup Russ Magee 2018-09-06 11:40:13 -0700
  • db1b494d00 Fixed shell (interative & non-) exit status after cp status fixes Russ Magee 2018-09-06 00:16:44 -0700
  • a6979298fd Steps toward getting remote cp(tar) status back to client Russ Magee 2018-09-05 21:58:55 -0700
  • 963d1c8eb2 Some comment/dead test code cleanup Russ Magee 2018-09-05 20:36:32 -0700
  • b419b2e002 File copy remote close signal to ensure completed tar pipe data Russ Magee 2018-09-04 22:24:16 -0700
  • 0586f306c0 Removed debug time.Sleep Russ Magee 2018-09-02 21:50:25 -0700
  • 7295492aa3 hkexcp: fixed copy chunked payload logic (now 2*32-1 MAX_PAYLOAD_LEN w/chunking) Russ Magee 2018-09-02 19:58:13 -0700
  • c842d36319 README.md - added EXPERIMENTAL warning to hkexcp section Russ Magee 2018-09-01 10:44:13 -0700
  • 52ea229118 Fixed errors in copy scatter/gather logic. Added block-chunking to hc.Write() to allow writes of larger data blocks TODO: copies of files > hc.Read() block size fails w/incomplete tarfile (last partial block likely incorrectly written or client exits before data is flushed?) Russ Magee 2018-09-01 10:20:33 -0700
  • 022db4956c Update README.md: warning for -d displaying passwords to console/log Russ Magee 2018-08-31 15:01:16 -0700
  • 45d270b03e Merge branch 'hkexcp-proto' Russ Magee 2018-08-31 11:47:39 -0700
  • c1a23b68ae Merge branch 'master' of ssh://tripe.blitter.com/var/git/hkexsh Russ Magee 2018-08-31 11:47:27 -0700
  • a4b7707888 Update 'README.md' - hkexcp (file/dir copy) instructions Russtopia 2018-08-31 11:40:57 -0700
  • c3572d7c0c Fixed abs/relative path for client dest copies Russ Magee 2018-08-30 20:16:55 -0700
  • 143990da34 Scatter/gather for client->server copy now functional Russ Magee 2018-08-30 20:06:42 -0700
  • 6389ad49d5 Improved flag.Usage() for cp/sh and removed more recursiveCopy flag remnants Russ Magee 2018-08-26 00:12:42 -0700
  • 9025ee3c24 Cleaned up flag help txts; removed unused doCopyMode() recurs arg Russ Magee 2018-08-25 23:51:11 -0700
  • 1986ec6f0c Removed :port: from 'fancy' arg syntax; more improvements to src/dest file spec logic (esp. fixing bug in multiple src file/dir args to remote dest) Russ Magee 2018-08-25 23:38:58 -0700
  • ca2b6efd9b client->server and server->client file/dir copies minimally working Russ Magee 2018-08-24 23:22:07 -0700
  • 7867f84b87 WIP: server->client copy primitively functional; TODO client->server copy Russ Magee 2018-08-24 18:50:45 -0700
  • 0b9b8b8320 WIP tarpipe construction: server-side, TODOL client-side, -r behaviour Russ Magee 2018-08-23 11:03:19 -0700
  • 5859131678 Continuing groundwork for cp mode - refactor main client code into shell/copy subroutines; -r option Russ Magee 2018-08-06 22:29:51 -0700
  • c3f3bcb13f Added cp.cmd file - notes on using tar to bundle/xmit/extract over link Russ Magee 2018-08-06 13:36:29 -0700
  • 04e8b94b5d More misc. fixes to connection handling w/chaff e=0/1 client-side, both interactive and oneshot cmd (-x) Russ Magee 2018-08-06 00:06:09 -0700
  • 00e03c1d54 Misc. fixes to end-of-session conn handling. Outstanding bug w/client chaff enabled & truncated client data Russ Magee 2018-08-05 21:43:21 -0700
  • 5920e06748 Merge branch 'hkexcp-proto' of ssh://tripe.blitter.com/var/git/hkexsh into hkexcp-proto Russ Magee 2018-07-29 19:59:05 -0700
  • c6bfa2771b Simplified hostPortPath parsing (colons mandatory if specifying more than just host) Russ Magee 2018-07-29 13:22:35 -0700
  • 55cf5a9277 Improved 'fancy arg' parsing - gathering up otherArgs (non-flag) as path src list Russ Magee 2018-07-29 12:47:44 -0700
  • 5eb7d4d1e6 Initial (buggy) support for 'fancy arg' style ala ssh: eg user@example.org:port:path Russ Magee 2018-07-29 00:48:42 -0700
  • e3e38fb6fa Merge branch 'master' into hkexcp-proto Russ Magee 2018-07-19 22:40:40 -0700
  • 5ae6c8075b Grouped types Russ Magee 2018-07-19 22:39:06 -0700
  • f48b0c17ed Prep for hkexsh alternate op mode via symlink/exe name: hkexcp - a secure remote file copier Russ Magee 2018-07-18 22:32:49 -0700
  • f9fba3227b README.md line wraps Russ Magee 2018-07-14 13:54:44 -0700
  • 0d404470c1 Make hkexshd log IP not hostname to wtmp/lastlog Russ Magee 2018-07-14 13:15:58 -0700
  • f079b5b43d Fixed server root warning to output without -d flag to stdout Russ Magee 2018-07-13 20:26:48 -0700
  • a8a4f1671a Added -h handling to mintty_wrapper (MSYS/Win client) Russ Magee 2018-07-06 13:29:34 -0700
  • a3367fc6ae Fixes for MSYS Windows build (client) Russ Magee 2018-07-06 13:25:28 -0700
  • 94e06abbcb Updates to main Makefile (and added spinsult Makefile) Russ Magee 2018-07-04 23:07:09 -0700
  • 9edcc5110c Fixed syntax errors from re-org Russ Magee 2018-07-04 22:06:07 -0700
  • bd261a32e9 reorg to separate core KEx and net layer from app Russ Magee 2018-07-04 21:21:23 -0700
  • 9291fdcff6 Update TODO.txt (typos) Russtopia 2018-06-29 20:29:07 -0700
  • a74ae41e3b Added TODO.txt Russ Magee 2018-06-29 20:30:33 -0700
  • ddc85a64f3 Merge branch 'exitstatus' of Russtopia/hkexsh into master Russtopia 2018-06-29 19:42:00 -0700
  • 216bfa3326 Exit status of remote commands now reflect in client exit Russ Magee 2018-06-29 19:23:11 -0700
  • c64797f2d9 Basic server-side recording of exitStatus of pty(cmd). TODO: sending of exitStatus to client and client handling of said packet via a WritePacket() with unique existStatus op. Russ Magee 2018-06-29 16:54:20 -0700
  • aa48314ee9 Merge branch 'issue3-hkexshd-insufficient-privileges' of Russtopia/hkexsh into master Russtopia 2018-06-27 19:30:05 -0700
  • 011f6d161b #3: hkexshd: server should output error on startup if not run w/sufficient privileges Russ Magee 2018-06-27 19:28:03 -0700
  • dac467c1e6 Corrected Println -> Printf logs for login/cmd tracking Russ Magee 2018-06-27 19:13:14 -0700
  • 889203c9de host lookup for goutmp (wtmp) tracking Russ Magee 2018-06-27 19:09:35 -0700
  • 11fad87345 Pass remote host lookup to goutmp Russ Magee 2018-06-27 17:32:26 -0700
  • 2e9f3d7726 Updated README.md Russtopia 2018-06-27 15:40:48 -0700
  • f5a146255f Renamed go_login pkg to goutmp Russ Magee 2018-06-27 14:58:57 -0700
  • 22da88af7d Attempts to handle disconnects better.. TODO: torture tests and implement exit status for -x commands Russ Magee 2018-06-26 20:14:43 -0700
  • 4b997a4d0c Merge branch 'master' into logfile-housekeeping Russ Magee 2018-06-24 22:05:57 -0700
  • ec5fa5f434 Removed wiki dir Russ Magee 2018-06-06 23:33:13 -0700
  • 51e8e9e36a Added test wiki Russ Magee 2018-06-06 23:27:55 -0700
  • 8e67897d7f Fixed hkexshpasswd step 3 Russ Magee 2018-06-06 22:43:46 -0700
  • ac28e5ef7a Proto login accounting via utmp(x) and lastlog Russ Magee 2018-06-01 20:34:49 -0700
  • 6698861c15 Merge branch 'termsize-test' of ssh://blitter.com/var/git/hkexsh into termsize-test Russ Magee 2018-05-26 23:47:24 -0700
  • 0ba85e2ee8 Grr, added new Makefiles Russ Magee 2018-05-26 23:44:13 -0700
  • 4e28b8faf9 Grr, added new Makefiles Russ Magee 2018-05-26 23:44:13 -0700
  • ec37afc4d8 More Makefile fixes Russ Magee 2018-05-26 23:42:43 -0700
  • ffacd42baf Fixes to previous Makefile conditionals Russ Magee 2018-05-26 16:31:43 -0700
  • 1a707efeb8 Makefile cond for MSYS vs Linux Russ Magee 2018-05-26 15:54:54 -0700
  • fc1625a0ed Fixed termsize_linux.go errors and misnamed termsize_windows.go Russ Magee 2018-05-26 14:11:27 -0700
  • f92085bb86 Further work on term resizing platform support for Linux and Windows/mintty Russ Magee 2018-05-26 13:43:09 -0700
  • 89dd225910 Experiment - moved sigwinch goroutine out of main client Russ Magee 2018-05-20 14:48:24 -0700
  • 8f087e9ca1 Added -v option (version) Russ Magee 2018-05-12 18:41:39 -0700
  • dfeb0d709e Moved client chaff config up so it works for non-interactive (-x) invocations. Russ Magee 2018-05-06 18:20:12 -0700
  • a1f4e0342a Added chaff cmdline options to client & server Russ Magee 2018-05-06 17:41:09 -0700
  • 64e511c3c5 Moved mutex to front of Conn struct Russ Magee 2018-05-04 23:39:19 -0700
  • 70448dda08 No need for custom hkexsh.Copy() Russ Magee 2018-05-04 23:31:06 -0700
  • c5498642fc Got client hangup working again. Security scrub auth vars. Russ Magee 2018-05-04 23:25:26 -0700
  • 925e83bbba Added comment wrt. mutex lock scope in WritePacket Russ Magee 2018-05-04 14:40:06 -0700
  • a49a5d4cc2 Locking in WritePacket() apparently working, client and server-side chaffing functional Russ Magee 2018-05-03 23:53:47 -0700
  • 6d606bbbd9 Moved mutex into hkexsh.Conn (hkexnet) Russ Magee 2018-05-02 13:22:37 -0700
  • 4d85236d16 Chaffing slight improvements (rand size, timing). TODO: Move into hkexsh.Conn Russ Magee 2018-05-02 12:28:56 -0700
  • b8a07e9648 Chaff packets w/sync.Mutex to allow chaff & main goroutine to both input to server. TODO: smart chaff, mutating or mimicking recent input. Russ Magee 2018-05-01 02:39:45 -0700
  • 8162707ffa - got term resizing working (client SIGWINCH signals -> server_pty(rows,cols) Russ Magee 2018-04-28 19:28:37 -0700
  • 50f0433579 -Added error checking for all stages of hkex.Conn.Accept() and GetStream() -Server will log such errors without panic/exit -Const added but not yet used for 'chaff' packets Russ Magee 2018-04-28 16:05:33 -0700
  • c56d4d9ad9 hmac tampering indication implemented -- local and remote-side Russ Magee 2018-04-15 13:29:06 -0700
  • b45784e07b Minimal hmac channel verification w/close on tampering Russ Magee 2018-04-15 12:58:24 -0700
  • 351f58b6c5 misc. cleanup, LICENSE.{gpl,mit} updates Russ Magee 2018-04-07 13:04:10 -0700
  • ae5a8cfa3b Quick 'n dirty Makefile Russ Magee 2018-04-04 15:51:03 +0000
  • 5da70447b0 MSYS+mintty support; pkg renaming to hkexsh Russ Magee 2018-04-04 15:43:27 -0700