• Secure Shell (SSH) for establishing encrypted connections between computers
    • Port: TCP 22
  • OpenSSH is open-source fork of SSH (authenticate with password, public-key auth, host-based auth, keyboard auth, challenge-response auth, GSSAPI auth)
  • Rsync locally and remotely copying files
  • R-Services enable remote access between Unix hosts over TCP/IP over ports 512, 513, and 514

Interaction / Commands

  • Change authentication method
ssh -v username@IP_Adress -o PreferredAuthentications=password
  • Rsync
sudo nmap -sV -p IP_Adresss
  • Finding accessible shares, enumerating open share
nc -nv IP_Address 873 
rsync -av --list-only rsync://IP_Adress/share
  • R-services
sudo nmap -sV -p 512,513,514 IP_Adress
  • bypass authentication with /etc/hosts.equiv and .rhosts files

Footprinting

  • Use ssh-audit
./ssh-audit.py IP_Address