Nullence

8 ms·

1.
Show HN: Detecting running processes using AF_ALG(github.com)
1 points by Nullence 5mo ago|0 comments
2.
by Nullence 1y ago
While I like the layout and having a good UI for managing virtual machines this project lacks any security features at all. Most notably, if you just set the auth cookie to "authenticated" you will have access to spin up as many V
3.
Reverse SSH – Have your SSH daemon connect back to you(github.com)
1 points by Nullence 2y ago|1 comments
4.
by Nullence 2y ago
Howdy folk! After showing off my most recent project (Wag) I thought I'd pop reverse ssh (or RSSH) up here as well. I've been tinkering with RSSH for 3 or so years. Starting with the incredibly dumb idea of going "I want ssh,
5.
by Nullence 2y ago
Thanks! It's been a bit of a labor of love for quite a while, these are the big three but there are a bunch of other little things. Like the time I had to optimise map insertion because the linux kernel does some truly insane locking w
6.
by Nullence 2y ago
Haha, me and a friend were both looking at the windows eBPF project and wondering if it might work. Im not really looking to support windows, but if someone comes to me and tells me it works I'll pop it on the read me
7.
by Nullence 2y ago
Probably then is how you do TLS, i.e do you give your service a wildcard cert to capture any 443 traffic. Then how do you do that for things like ssh, or other non-http based protocols.
8.
by Nullence 2y ago
Ironically I've also been thinking about this on and off for a bit, as it is definitely one of the pain points of using Wag at the moment. My only problem is that if you capture that route and then redirect it, or whatnot, your peers w
9.
by Nullence 2y ago
Oh wag doesnt use username and password auth by default. Those are only available in the OIDC integration or if you use PAM auth.
10.
by Nullence 2y ago
Similar in terms of it uses wireguard definitely! I havent made a direct comparison in the documentation as it's not something I'm currently going toward. This project suits my needs and is quite fun! But I'll try and give a
11.
by Nullence 2y ago
Welp, I have no idea if anyone will read this as its been a little while since it was put up and is in a flagged comment, but hey I'll do a lil explanation of some of the issues I ran in to, and how it works. How it works: In short, Wa
12.
by Nullence 2y ago
Ah the readme is definitely more geared to "how can I use this" rather than "how does this work. Primarily because I want people to have a reasonably good time setting it up, rather than having to go through my explanation on
13.
by Nullence 2y ago
Man Deguard definitely looks slick and the UI looks really nice! I'd be super interested to know how they track "session state" as their do seem to rely very heavily on adding proxies and other additional software layers in f
14.
by Nullence 2y ago
I do plan on supporting IPv6 sometime soon, and doing something along the lines of mapping folks IPv4 addresses into private IPv6 space to reduce the risk of clashing with a users real local network. Is there something specific you were thi
15.
by Nullence 2y ago
Yep! I do indeed have protections against bruteforcing TOTP codes, effectively each authentication has a number of "attempts" a user can make before their account gets locked, and an admin is then required to unlock it. Specifical
16.
by Nullence 2y ago
Im not entirely sure what you mean by "eternal session keys" in the context of wag specifically. While the wireguard key effectively gives you the ability to talk to the wag server, the session is effectively maintained by a map i
17.
by Nullence 2y ago
Howdy! Kind of forgot that I put this up, the registration url can also take an optional pubkey parameter, so you dont have to rely on the server generating the private key for you (docs are a little lacking so I understand the confusion!)
18.
Show HN: Wag, MFA and Enrollment for WireGuard(github.com)
149 points by Nullence 2y ago|58 comments
19.
Phatcrack: Distributed Hashcat for Password Cracking(github.com)
1 points by Nullence 2y ago|0 comments
20.
Show HN: Reverse SSH – Multiplexed Reverse Shell Catcher That Uses SSH(github.com)
8 points by Nullence 5y ago|0 comments