ssh-audit
mfsbsd
Our great sponsors
| ssh-audit | mfsbsd | |
|---|---|---|
| 21 | 5 | |
| 3,117 | 470 | |
| - | - | |
| 8.5 | 3.8 | |
| 7 days ago | 3 months ago | |
| Python | Makefile | |
| MIT License | BSD 2-clause "Simplified" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ssh-audit
-
Terrapin Attack for prefix injection in SSH
No. Mitigations are available now. Follow the recommendations from ssh-audit (master version). [0]
0. https://github.com/jtesta/ssh-audit
- SSH-audit: SSH server and client security auditing
- Quick/simple question checking for SSH vulnerabilities
- Why so many bots?
-
How to secure my self-hosted website?
Match Address 10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 PasswordAuthentication yes ```` You may audit your SSH service by https://github.com/jtesta/ssh-audit
-
Why does my SSH private key still work after changing some bytes? (2016)
Off topic: audit tool for OpenSSH config files.
Posted here because SSH algorithms are a moving target.
https://github.com/jtesta/ssh-audit/tree/e50ac5c84d46e902e02...
-
SFTP (SSH) Cipher Sanity Check
In addition to ssllabs, I'll recommend jtesta's ssh-audit.py
mfsbsd
-
Build Initramfs Rootless
I'm very new to BSD in general, but I find it very fun and interesting!
However, I need pointers to get started.
> You won't be spoon-fed, and are expected to have read the manuals and other documentations...
I read a lot of FreeBSD and NetBSD documentation to get to the point of compiling my own kernels, but I don't think I ever read about the equivalent concept of Linux cpio/initramfs for BSD. My minimal images use a UFS filesystem.
Here, after checking https://mfsbsd.vx.sk/ and https://github.com/mmatuska/mfsbsd/blob/master/scripts/mdini... I think mfsbsd is just a using tmpfs so it may not exactly the same thing as initramfs, that allows booting linux from a bzImage + initrd
I'll keep searching, it's not super high priority at the moment, but it's something I'd like to do with (Free|Net)BSD.
- MfsBSD: ISO file that create a working minimal installation of FreeBSD
-
Does anyone still use digitalocean for freebsd vms
I suspect it depends on how much support and/or hand-holding you need from your hosting provider. I'd hesitate to run an unofficial build/image but I believe the alternative on DO is to use mfsbsd (a memory-file-system installer for FreeBSD) which is also an unofficial build/image.
-
Is there a way to load the FreeBSD installer to RAM?
The common answer here is to use mfsbsd which puts all the installer's requirements onto a RAM disk so you should (in theory) be able to pull the install media and plug in other devices as needed
-
FreeBSD SSH Hardening
I looked into this for a project a couple of years ago and ended up using mfsbsd instead.
https://github.com/mmatuska/mfsbsd
What are some alternatives?
Pritunl - Enterprise VPN server
yubikey-agent - yubikey-agent is a seamless ssh-agent for YubiKeys.
testssl.sh - Testing TLS/SSL encryption anywhere on any port
dedupfs - A Python FUSE file system that features transparent deduplication and compression which make it ideal for archiving backups.
tinyssh - TinySSH is small server (less than 100000 words of code)
ufw-docker - To fix the Docker and UFW security flaw without disabling iptables
occambsd - An application of Occam's razor to FreeBSD
Samba - https://gitlab.com/samba-team/samba is the Official GitLab mirror of https://git.samba.org/samba.git -- Merge requests should be made on GitLab (not on GitHub)
mistborn
tarsnap - Command-line client code for Tarsnap.