SSH Access Manager

•    PHP

SSH Key Management solution

ssh-permit-a38 - Central management and deployment for SSH keys

•    Rust

Central management and deployment for SSH keys

KeyBox - Web-based SSH console that centrally manages administrative access to systems

•    Java

KeyBox is an open-source web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding.

SSH.NET - SSH.NET is a Secure Shell (SSH) library for .NET, optimized for parallelism.

•    CSharp

SSH.NET is a Secure Shell (SSH-2) library for .NET, optimized for parallelism.This project was inspired by Sharp.SSH library which was ported from java and it seems like was not supported for quite some time. This library is a complete rewrite, without any third party dependencies, using parallelism to achieve the best performance possible.

geofront - Simple SSH key management service

•    Python

Geofront is a simple SSH key management server. It helps to maintain servers to SSH, and authorized_keys list for them. Read the docs for more details.

GoSSHa - Go SSH agent: can execute commands at thousands of servers and upload files to them

•    Go

Ssh client that supports command execution and file upload on multiple servers (designed to handle thousands of parallel SSH connections). GoSSHa supports SSH authentication using private keys (encrypted keys are supported using external call to ssh-keygen) and ssh-agent, implemented using go.crypto/ssh. GoSSHa is not designed to be used directly by end users, but rather serve as a lightweight proxy between your application (GUI or CLI) and thousands of SSH connections to remote servers.

ssh-chat - Chat over SSH.

•    Go

Custom SSH server written in Go. Instead of a shell, you get a chat prompt.The server's RSA key fingerprint is MD5:e5:d5:d1:75:90:38:42:f6:c7:03:d7:d0:56:7d:6a:db or SHA256:HQDLlZsXL3t0lV5CHM0OXeZ5O6PcfHuzkS8cRbbTLBI. If you see something different, you might be MITM'd.

awesome-ssh - :computer: A curated list of SSH resources.

A curated list of SSH apps, libraries and resources. Inspired by the awesome list thing.

ssh-mitm - SSH man-in-the-middle tool

•    Shell

This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and sessions are logged to disk. Of course, the victim's SSH client will complain that the server's key has changed. But because 99.99999% of the time this is caused by a legitimate action (OS re-install, configuration change, etc), many/most users will disregard the warning and continue on.

SSH ManaGeR (sshmgr)

•    Perl

sshmgr (quot;SSH ManaGeRquot;) is a Perl wrapper to the command line SSH client using the CPAN module AppConfig for profile support.

mole - cli app to create ssh tunnels

•    Go

Mole is a cli application to create ssh tunnels, forwarding a local port to a remote endpoint through an ssh server. The project provides a small automated infrastructure to help on funcional tests. Please refer to this document for more details about it.

mRemoteNG - Remote Connections Manager

•    Visual

mRemoteNG is the next generation of mRemote, a full-featured, multi-tab remote connections manager. It allows you to store all your remote connections in a simple yet powerful interface. Currently these protocols are supported:RDP, (Remote Desktop), VNC (Virtual Network Computing), ICA (Independent Computing Architecture), SSH (Secure Shell), Telnet (TELecommunication NETwork), HTTP/S (Hypertext Transfer Protocol), Rlogin (Rlogin), Raw Socket Connections.

ssh-cert-authority - An implementation of an SSH certificate authority.

•    Go

A democratic SSH certificate authority. Operators of ssh-cert-authority want to use SSH certificates to provide fine-grained access control to servers they operate, keep their certificate signing key a secret and not need to be required to get involved to actually sign certificates. A tall order.

vultr - :penguin: Vultr CLI and API client library

•    Go

Vultr CLI is a command line tool for using the Vultr API. It allows you to create and manage your virtual machines, SSH public keys, snapshots and startup scripts on your Vultr account. You can also use it to directly SSH into a Vultr virtual machine through the vultr ssh command.

kr - A dev tool for SSH auth + Git commit/tag signing using a key stored in Krypton.

•    Go

kr enables SSH to authenticate with a key stored in a Krypton (iOS or Android) mobile app. kr runs as an SSH agent, called krd. When a Krypton private key operation is needed for authentication, krd routes this request to the paired mobile phone, where the user decides whether to allow the operation or not. The private key never leaves the phone. kr currently supports MacOS (10.10+) and Linux (Debian, RHEL, CentOS, Fedora with systemd).

sshw - 🐝 ssh client wrapper for automatic login

•    Go

ssh client wrapper for automatic login. or download binary from releases.

rtop - rtop is an interactive, remote system monitoring tool based on SSH

•    Go

rtop is a remote system monitor. It connects over SSH to a remote system and displays vital system metrics (CPU, disk, memory, network). No special software is needed on the remote system, other than an SSH server and working credentials. Only Linux systems can be monitored, and most modern distros will work.

whosthere - A ssh server that knows who you are. $ ssh whoami.filippo.io

•    Go

A ssh server that knows who you are.When it tries to authenticate via public key, ssh sends the server all your public keys, one by one, until the server accepts one. One can take advantage of this to enumerate all the client's installed public keys.

ssh-badkeys - A collection of static SSH keys (public and private) that have made their way into software and hardware products

This is a collection of static SSH keys (host and authentication) that have made their way into software and hardware products. This was inspired by the Little Black Box project, but focused primarily on SSH (as opposed to TLS) keys. Keys are split into two categories; authorized keys and host keys. The authorized keys can be used to gain access to a device with this public key. The host keys can be used to conduct a MITM attack against the device, but do not provide direct access.

ssh-audit - SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

•    Python

ssh-audit is a tool for ssh server auditing.