awesome-ssh
:computer: A curated list of SSH resources.
https://github.com/moul/awesome-ssh
Last synced: 15 days ago
JSON representation
Apps
Alternatives to *SSH*
- rsh - An unencrypted network protocol and application used to connect to remote computers and issue commands.
- GoTTY - Share your terminal as web application.
- ttyd - Share your terminal over the web.
- telnet - An unencrypted network protocol and an application used to connect to remote computers and issue commands.
Automation
- DSH - Dancer's shell / distributed shell - Wrapper for executing multiple remote shell commands from one command line.
- Ansible - App deployment, configuration management and orchestration over SSH.
- rtop - Interactive, remote system monitoring tool based on SSH.
- parallel-ssh - ssh.svg?style=social&label=stars)](https://github.com/ParallelSSH/parallel-ssh) - Provides parallel versions of OpenSSH and related tools.
- SSH Power Tool - Execute commands and upload files to many servers simultaneously without using pre-shared keys.
Multiplexers
-
tmux-cssh
- cssh.svg?style=social&label=stars)](https://github.com/dennishafemann/tmux-cssh) -
tmuxwith a ClusterSSH-like behavior. - clusterssh - Cluster admin via SSH.
-
tm
-
tmuxmanager / helper. -
i2cssh
-
csshXlike SSH tool for iTerm2. -
ClusterSSH
- Controls a number of
xtermwindows via a single graphical console. - tmux - Terminal multiplexer.
Network
- sshhub - Web Service: access your SSH servers behind firewalls (ssh-teamviewer).
- sshfs - Filesystem client based on the SSH File Transfer Protocol.
- ngrok - Introspected tunnels to localhost.
- localtunnel - Expose localhost servers to the Internet.
-
sshuttle
- Transparent proxy server that works as a poor man's VPN. Forwards over
ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling. -
sshttp
- SSH/HTTP(S) multiplexer. Run a webserver and a
sshdon the same port w/o changes. - switcher - Run SSH and HTTP(S) on the same port.
- sslh - Applicative Protocol Multiplexer (i.e: SSH + HTTPS).
- tund - SSH reverse tunnel daemon.
- wssh - SSH to WebSockets Bridge.
-
docker-volume-sshfs
- volume-sshfs.svg?style=social&label=stars)](https://github.com/vieux/docker-volume-sshfs) -
sshfsdocker volume plugin. - quicssh - QUIC proxy for SSH
- sshpiper - The missing reverse proxy for ssh scp.
- autossh - Automatically respawn SSH session after network interruption.
- Mosh - The mobile shell.
Servers
- sshportal - simple, fun, and transparent SSH (& Telnet) Bastion Server
- ssh2docker - SSH server to Docker containers.
- ssh-proxy - tooling/ssh-proxy.svg?style=social&label=stars)](https://github.com/ml-tooling/ssh-proxy) - Dockerized SSH bastion to proxy SSH connections to arbitrary containers.
- sshfront - Programmable SSH frontend.
- ssh-chat - chat.svg?style=social&label=stars)](https://github.com/shazow/ssh-chat) - Chat over SSH.
- sshcommand - Turn SSH into a thin client specifically for your app.
-
x84
- A python
telnet/sshserver for modern UTF-8 and classic cp437 network virtual terminals. In spirit of classic software such as ami/x, teleguard, renegade, iniquity. - teleport - Modern SSH server for clusters and teams.
- ShellHub - io/shellhub.svg?style=social&label=stars)](https://github.com/shellhub-io/shellhub) - A SSH gateway for remotely accessing any Linux device behind firewall and NAT.
-
whosthere
- A SSH server that knows who you are.
$ ssh whoami.filippo.io. -
sshmuxd
-
sshmuxfrontend.
*SSH* agent
-
ssh-ident
- ident.svg?style=social&label=stars)](https://github.com/ccontavalli/ssh-ident) - Different agents and different keys for different projects, with
ssh. - sshecret - Automatically create and manage multiple agents for multiple keys.
-
oh-my-zsh/plugins/ssh-agent
- my-zsh.svg?style=social&label=stars)](https://github.com/robbyrussell/oh-my-zsh) -
ssh-agentplugin forzsh.
`.ssh/config`
-
`assh`
- ssh-config.svg?style=social&label=stars)](https://github.com/moul/advanced-ssh-config) - Transparent wrapper (ProxyCommand) that adds regex, aliases, gateways, includes, dynamic hostnames to SSH and
ssh-config. Previously:advanced-ssh-config -
ansible-ssh-config
- ssh-config.svg?style=social&label=stars)](https://github.com/gaqzi/ansible-ssh-config) - Letting Ansible manage
ssh_config. -
ec2ssh
- A
ssh_configmanager for AWS EC2. -
ssh-config
- config.svg?style=social&label=stars)](https://github.com/dbrady/ssh-config) - A tool to help manage your
.ssh/configfile.
*SSH* keys / Authentication
- authy-ssh - ssh.svg?style=social&label=stars)](https://github.com/authy/authy-ssh) - Easy two-factor authentication for SSH servers.
- github-auth - auth.svg?style=social&label=stars)](https://github.com/chrishunt/github-auth) - SSH key management for GitHub users.
-
totp-ssh-fluxer
- ssh-fluxer.svg?style=social&label=stars)](https://github.com/benjojo/totp-ssh-fluxer) - A way to make sure your
sshdport changes every 30 seconds. - github-keygen - keygen.svg?style=social&label=stars)](https://github.com/dolmen/github-keygen) - Easy creation of secure SSH configuration for your GitHub account(s).
- kr - keygen.svg?style=social&label=stars)](https://github.com/KryptCo/kr) - Kr agent that route access request to the paired mobile phone where Kryptonite is installed.
- HIBA - Central management of access to a fleet of machines without pushing authorized_users files.
- cipherhub - Encrypt messages based on SSH public keys with easy import from GitHub.
- Slack notifications - ssh-session-notifications/)) - Guide to setup Slack notifications (can be modified for other services).
- ServerAuth - Automatically sync SSH access across servers
Testing / Honeypots
- sshmitm - SSH monkey-in-the-middle.
- ssh-hammer - hammer.svg?style=social&label=stars)](https://github.com/shazow/ssh-hammer) - SSH load testing tool.
- kippo - SSH Honeypot.
- ssh-audit - audit.svg?style=social&label=stars)](https://github.com/arthepsy/ssh-audit) - A tool for SSH server auditing.
- sshesame - A fake SSH server that lets everyone in and logs their activity.
Tools
- xxh - Bring your favorite shell wherever you go through the ssh.
-
sshrc
- Bring your
.bashrc,.vimrc, etc. with you when youssh. - kyrat - SSH wrapper script that brings your dotfiles always with you on Linux and OSX.
- ssh-vault - vault/ssh-vault.svg?style=social&label=stars)](https://github.com/ssh-vault/ssh-vault) - encrypt/decrypt files using ssh keys
- ssh-ping - tools.svg?style=social&label=stars)](https://github.com/vaporup/ssh-tools) - check if host is reachable using ssh_config
- SSHPry v2 - Spy & Control os SSH Connected client's TTY
- redial - Terminal Based SSH Session Manager for Unix Systems
Tools using the *SSH* protocol
- sftp - File transfer protocol over SSH.
- scp - Secure remote file copy utility over SSH.
- rsync - Fast incremental transfer utility that supports SSH.
-
curl
- Command line tool and library to transfer data (support
sftp).
Web
- Apache Guacamole - Apache Guacamole is a HTML5 based clientless remote desktop gateway. It supports standard protocols like VNC, RDP, and SSH.
- GateOne - HTML5-powered terminal emulator and SSH client.
- SSHmon - Real-time GUI to monitor SSH connections and establish port forwardings.
- Secure Shell chrome extension
- KeyBox - Web-based SSH console that centrally manages administrative access to systems.
Libraries
Alternatives to *SSH*
- sftp - SFTP support for the go.crypto/ssh package.
- go-sshkit - sshkit.svg?style=social&label=stars)](https://github.com/shazow/go-sshkit) - Toolkit for building SSH servers and clients in Go.
- Socker - Library for Go to simplify the use of SSH.
- go-sshkeys - Golang SSH Keys manipulation library
- jsch - Pure java, BSD licensed, SSH2 client library.
- ssh2 - SSH2 client and server modules written in pure JavaScript for node.js.
- paramiko - Native Python SSHv2 protocol library.
- net-ssh - ssh/net-ssh.svg?style=social&label=stars)](https://github.com/net-ssh/net-ssh) - Pure Ruby implementation of an SSH (protocol 2) client.
- crypto/ssh - Built-in SSH client and server library.
- libssh - The SSH library.
Resources
Community
Documentation
Security
-
Security/Guidelines/OpenSSH - MozillaWiki
-
sshd\_configfor6.7+,5.3. -
Applied-Crypto-Hardening
- Crypto-Hardening.svg?style=social&label=stars)](https://github.com/BetterCrypto/Applied-Crypto-Hardening) -
sshd\_configfor6.X -
01/14/2016
- Integer Overflow
CVE 2016 077[7-8].
Tutorials
- Best practices
- How to SSH login without a password
- Gist: SSH Recipes - Collection of recipes for writing awesome ssh config files.
- Granting Temporary Access to Your Servers (Using Signed *SSH* Keys)