RE: ssh and ids

From: Frank Knobbe (frank_at_knobbe.us)
Date: 06/22/04

  • Next message: Tony Rall: "Re: possible causes of source and destination ip from external network" 
    To: "Matthew F. Caldwell" <mattc@guarded.net>
Date: Tue, 22 Jun 2004 10:14:40 -0500

    On Mon, 2004-06-21 at 17:42, Matthew F. Caldwell wrote:
    > Applications that help in performing the "forensic" man in the middle
    > attack include ettercap http://ettercap.sourceforge.net or sshmitm (an
    > app from the dsniff suite) http://www.monkey.org/~dugsong/dsniff/

    I thought MITM attacks on SSH work only on version 1 and only passwords.
    Are you saying there are tools that can intercept SSHv2 traffic using
    only keys?

    Regards,
    Frank

  • Next message: Tony Rall: "Re: possible causes of source and destination ip from external network"

    Relevant Pages

    • Re: SHA-1 vs. triple-DES for password encryption?
      ... I was way too unclear about what I was saying, ... you wouldn't necessarily get a collision on ... I was envisioning an attacker ... > unlikely when the collision is in passwords, but, since we still don't ...
      (SecProg)
    • Re: PGP, Pellicano & FBIs "password-divining system"
      ... attention away from that fact by saying they got the passwords by ... so is passcoding methodology for the majority of ppl. ...
      (sci.crypt)
    • Re: Help With Time in a Bottle
      ... you will need to boot an OS CD and reformat the drive. ... I'm not saying that At Ease is not crackable, it's just not worth the time involved unless you have the skill and desire. ... You will not be able to get at the information on the drive unless you can figure out the At Ease Passwords. ...
      (comp.sys.apple2)
    • Re: Desktop-to-Desktop Connection Puzzle
      ... Your last messages seems internally inconsistent - which I think means I just don't understand what you are saying. ... Both desktops have had those names and sets of passwords for a couple of years. ... Only within the past week has the $C disappeared from System-3; it is still on System-4 and works fine there. ... Are you saying I need to change my usernames and passwords so they are identical on both machines? ...
      (microsoft.public.win2000.general)
    • Re: Export Passwords from AD
      ... I'm just saying it is not impossible and it is considered hacking. ... If you want to sync passwords between multiple sources, then use something like MS ILM 2007 FP1 and PCNS ... this one-by-one for users who want to use the Google account. ...
      (microsoft.public.windows.server.active_directory)