jjshoots

Reverse SSH Jumphost

https://gist.github.com/rfairley/41f4a8e8b4c13f19d748ba4b0e600cc5

On all machines

1. Create ssh key pair.

On Jumphost

1. Disable password authentication by ensuring that PasswordAuthentication and ChallengeResponseAuthentication are set to no in /etc/ssh/sshd_config
2. (If sudo ufw status is active) Allow external connections on JUMPHOST_PORT by configuring the firewall (any number above 1024 is good, 12345 used here)

jjshoots

"""
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
"""

jjshoots

1. Add ingress rule from here:

• Login to oracle cloud (if you're using Brave browser, disable shields)
• Click hamburger on top left -> Networking -> Virtual Cloud Networks -> vcn** -> subnet** -> Default Security List
• Add ingress rule
• Source CIDR: 0.0.0.0/0
• IP Protocol: TCP
• Destination Port Range: PORT
• Save

2. Do this weird thing:

jjshoots

import time
import argparse
import glob
import hashlib
import os

# Type aliases
FULLPATH = str
FILENAME = str
FILEHASH = str