sshd on Windows (or equivalent)

Cromewell · Jul 23, 2015

I need to enable remote shell access on some Windows boxes.

I've tried a couple of the free ssh servers I could find, but they don't seem to work, or are feature limited in their free version (freesshd, winsshd). I need to support domain login.

I just found http://www.kpym.com/2/kpym/index.htm but have yet to try it out.

Is anyone using one and like it?

beers · Jul 23, 2015

You could probably install openssh on cygwin, but you might have some ldap dependencies if you want domain based authentication, not sure if it rides on top of the host's auth or not.

http://docs.oracle.com/cd/E24628_01/install.121/e22624/preinstall_req_cygwin_ssh.htm

Agent Smith · Jul 23, 2015

Just an FYI. There's been a recent hack exploit on OpenSSH.

Why not Telenet? That is Windows native.

I use third party firmware in the router called DD-WRT for SSH. I believe that is Dropbear and not OpenSSH.

beers · Jul 23, 2015

Agent Smith said:
Just an FYI. There's been a recent hack exploit on OpenSSH.

Why not Telenet? That is Windows native.

Which CVE specifically are you referring to?

Also, are you really, actually, honestly suggesting telnet over SSH?

Cromewell · Jul 23, 2015

I'm assuming this one: https://access.redhat.com/security/cve/CVE-2015-5600

In any event, a security flaw isn't as bad as an unsecured protocol. The bug will get fixed. Telnet is all well and good but I'm going to have connections going to Azure, I'd rather not use plaintext

Geoff · Jul 23, 2015

Agent Smith said:
Just an FYI. There's been a recent hack exploit on OpenSSH.

Why not Telenet? That is Windows native.

I use third party firmware in the router called DD-WRT for SSH. I believe that is Dropbear and not OpenSSH.

So instead of using OpenSSH due to an exploit, you'd rather have him use insecure telnet?

Agent Smith · Jul 24, 2015

I don't know what he is doing. Telnet would be an option.

beers · Jul 24, 2015

Agent Smith said:
I don't know what he is doing. Telnet would be an option.

Would you advise him to use FTP too?

PabloTeK · Jul 24, 2015

Agent Smith said:
I don't know what he is doing. Telnet would be an option.

Telnet is not an option for anything.

Ever.

Geoff · Jul 24, 2015

PabloTeK said:
Telnet is not an option for anything.

Ever.

Well, unless you want to watch Star Trek in a telnet window.

beers · Jul 24, 2015

Geoff said:
Well, unless you want to watch Star Trek in a telnet window.

Some people would claim you've made a horrible offense there

(unless there's a star trek one too

)

telnet://towel.blinkenlights.nl

Geoff · Jul 25, 2015

beers said:
Some people would claim you've made a horrible offense there (unless there's a star trek one too )

telnet://towel.blinkenlights.nl

Star Wars same thing

beers · Jul 25, 2015

Geoff said:
Star Wars same thing

Cromewell · Jul 25, 2015

PabloTeK said:
Telnet is not an option for anything.

Ever.

Sure it is. On a closed lab network.

In any event, thank you for the suggestions, I'll have to look at Cygwin.

I guess officially, Microsoft wants me to use RDP for secure remote admin. A MS ssh sever would be nice though.

Agent Smith · Jul 26, 2015

PabloTeK said:
Telnet is not an option for anything.

Ever.

Is for routers.

Agent Smith · Jul 26, 2015

Geoff said:
Well, unless you want to watch Star Trek in a telnet window.

You couldn't even watch Star Trash in SSH. SSH is meant for servers. I know, I have a built in SSH server in the router and it's not as fast as a VPN.

beers · Jul 26, 2015

On Topic:

You might be able to do some Powershell remoting, if you're into that kind of thing

http://www.howtogeek.com/117192/how-to-run-powershell-commands-on-remote-computers/

Off Topic:

Agent Smith said:
Is for routers.

Cleartext is cleartext. You're still transmitting everything in cleartext completely independent of what device it is. If your router is using telnet, that is a problem. The vast majority of devices support SSH.

Agent Smith said:
You couldn't even watch Star Trash in SSH. SSH is meant for servers. I know, I have a built in SSH server in the router and it's not as fast as a VPN.

That's probably because the service doesn't listen on SSH. Not sure how you were trying to use SSH incorrectly (port forward over the tunnel, maybe?) from a "speed comparison" on a remote shell

, but being a "security guy" you should always avoid Telnet for remote shell access.

Geoff · Jul 26, 2015

Agent Smith said:
You couldn't even watch Star Trash in SSH. SSH is meant for servers. I know, I have a built in SSH server in the router and it's not as fast as a VPN.

Huh? SSH is for remotely configuring a device, not even remotely comparable to the use for a VPN. You typically use SSH when on the same network or remote.

Agent Smith · Jul 27, 2015

beers said:
Cleartext is cleartext. You're still transmitting everything in cleartext completely independent of what device it is. If your router is using telnet, that is a problem. The vast majority of devices support SSH.

FFS. Nerds are nerds..

When you need to upload firmware, options, or even repair a router you use Telnet.

Not over the WAN, not over the WAN! God!

beers · Jul 27, 2015

Agent Smith said:
FFS. Nerds are nerds..

Nerd could be construed as mildly offensive depending on the end party.

When you need to upload firmware, options, or even repair a router you use Telnet.

You're free to keep acting foolish but please realize there are multiple people in this thread who do this professionally.

sshd on Windows (or equivalent)

Administrator

Moderator

Well-Known Member

Moderator

Administrator

VIP Member

Well-Known Member

Moderator

Active Member

VIP Member

Moderator

VIP Member

Moderator

Administrator

Well-Known Member

Well-Known Member

Moderator

VIP Member

Well-Known Member

Moderator