parallel-ssh - Asynchronous parallel SSH client library.

•    Python

---

Asynchronous parallel SSH client library. Run SSH commands over many - hundreds/hundreds of thousands - number of servers asynchronously and with minimal system load on the client host.

ssh library async aio asynchronous python-library parallel ssh-client parallel-ssh libssh2 libev ssh2 non-blocking gevent libssh ssh-library parallelssh non-blocking-io ssh-client-library

parallec - Fast Parallel Async HTTP/SSH/TCP/UDP/Ping Client Java Library

•    Java

---

Parallec: Parallel Async HTTP/SSH/PING/TCP Client library. Details at: http://www.parallec.io

http-client parallel-requests http parallel async udp api api-management polling akka tcp api-consumer ping ssh tcp-client parallel-ssh rest

OpenSSH - Keep your communication secret

•    C

---

OpenSSH encrypts all traffic (including passwords) to effectively eliminate eavesdropping, connection hijacking, and other attacks. Additionally, OpenSSH provides secure tunneling capabilities and several authentication methods, and supports all SSH protocol versions.

ssh secure cryptography scp sshd sftp

teleport - Privileged access management for elastic infrastructure.

•    Go

---

Teleport is built on top of the high-quality Golang SSH implementation and it is fully compatible with OpenSSH and can be used with sshd servers and ssh clients. Download the latest binary release, unpack the .tar.gz and run sudo ./install. This will copy Teleport binaries into /usr/local/bin.

ssh bastion firewall mfa two-factor u2f yubikey security ansible docker

sshj - ssh, scp and sftp for Java

•    Java

---

sshj is a SSHv2 library for Java. It provides support for ssh, scp and sftp for Java.

ssh ssh-client sftp sftp-client scp

ssh-copy-id-for-OSX - Quick Mac OSX port of the useful unix utility ssh-copy-id

•    Shell

---

It also changes the permissions of the remote user's home, ~/.ssh, and ~/.ssh/authorized_keys to remove group writability (which would otherwise prevent you from logging in, if the remote sshd has StrictModes set in its configuration).

totp-ssh-fluxer - Take security by obscurity to the next level (this is a bad idea, don't really use this please)

•    Go

---

For this, I present totp-ssh-flux, a way to make sure your sshd port changes every 30 seconds, and possibly causing your adversaries a small period of frustration. What you can see here is my phone (using a generic TOTP client) generating codes, that I can then use as the port to SSH into on a server.

ssh obscurity totp iptables

SSH.NET - SSH.NET is a Secure Shell (SSH) library for .NET, optimized for parallelism.

•    CSharp

---

SSH.NET is a Secure Shell (SSH-2) library for .NET, optimized for parallelism.This project was inspired by Sharp.SSH library which was ported from java and it seems like was not supported for quite some time. This library is a complete rewrite, without any third party dependencies, using parallelism to achieve the best performance possible.

ssh ssh-library security secure-shell

KeyBox - Web-based SSH console that centrally manages administrative access to systems

•    Java

---

KeyBox is an open-source web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding.

ssh ssh-console system-admin key-management ssl tls security

sshttp - SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.

•    C++

---

In case your FW policy forbids SSH access to the DMZ or internal network from outside, but you still want to use ssh on machines which only have one open port, e.g. HTTP, you can use sshttpd. Be sure you run recent Linux kernel and install nf-conntrack as well as libcap and libcap-devel if you want to use the capability feature.

sshttp - SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.

•    C++

---

SSH/HTTP(S) multiplexer. Run a webserver and a sshd on the same port w/o changes.

ssh - Easy SSH servers in Golang

•    Go

---

This package was built by @progrium after working on nearly a dozen projects at Glider Labs using SSH and collaborating with @shazow (known for ssh-chat).A bunch of great examples are in the _examples directory.

ssh ssh-server golang-package networking network-library go-library

vssh - Go Library to Execute Commands Over SSH at Scale

•    Go

---

Go library to handle tens of thousands SSH connections and execute the command(s) with higher-level API for building network device / server automation. Documentation and examples are available via godoc. Code is licensed under the Apache License, Version 2.0 (the "License"). Content is licensed under the CC BY 4.0 license. Terms available at https://creativecommons.org/licenses/by/4.0/.

ssh automation server network

bless - Repository for BLESS, an SSH Certificate Authority that runs as a AWS Lambda function

•    Python

---

BLESS is an SSH Certificate Authority that runs as an AWS Lambda function and is used to sign SSH public keys.SSH Certificates are an excellent way to authorize users to access a particular SSH host, as they can be restricted for a single use case, and can be short lived. Instead of managing the authorized_keys of a host, or controlling who has access to SSH Private Keys, hosts just need to be configured to trust an SSH CA.

SSHTools

•    C++

---

SSHTools is a suite of Java SSH applications providing a Java SSH API, SSH Terminal, SSH secured VNC client, SFTP client and SSH Daemon.

gradle-ssh-plugin - Gradle SSH Plugin

•    Groovy

---

Gradle SSH Plugin provides SSH facilities such as command execution or file transfer on Gradle. This is an open source software licensed under the Apache License Version 2.0. Feel free to open issues or pull requests.

gradle ssh

GoSSHa - Go SSH agent: can execute commands at thousands of servers and upload files to them

•    Go

---

Ssh client that supports command execution and file upload on multiple servers (designed to handle thousands of parallel SSH connections). GoSSHa supports SSH authentication using private keys (encrypted keys are supported using external call to ssh-keygen) and ssh-agent, implemented using go.crypto/ssh. GoSSHa is not designed to be used directly by end users, but rather serve as a lightweight proxy between your application (GUI or CLI) and thousands of SSH connections to remote servers.

meterssh - MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection

•    Python

---

MeterSSH is a way to take shellcode, inject it into memory then tunnel whatever port you want to over SSH to mask any type of communications as a normal SSH connection. The way it works is by injecting shellcode into memory, then wrapping a port spawned (meterpeter in this case) by the shellcode over SSH back to the attackers machine. Then connecting with meterpreter's listener to localhost will communicate through the SSH proxy, to the victim through the SSH tunnel. All communications are relayed through the SSH tunnel and not through the network. There are two files, monitor.py and meterssh.py.

ansible-ssh-hardening - This Ansible role provides numerous security-related ssh configurations, providing all-round base protection

•    Ruby

---

This role provides secure ssh-client and ssh-server configurations. It is intended to be compliant with the DevSec SSH Baseline. Warning: This role disables root-login on the target server! Please make sure you have another user with su or sudo permissions that can login into the server.

ansible ssh-configuration playbook role hardening protection ssh-server ssh-agent

Commons-SSH

•    Java

---

Commons-SSH is a thin bridge between different Java SSH implementations libraries. It doesn't contain any crypto-related code and created to be used by projects who doesn't want to care about export control regulations (let client to decide)