Thema: SSH/SSL/VPN Tools...

[SiLæncer]

User-friendly and well-put-together piece of software that allows you to effortlessly import, manage, and configure OpenVPN profiles.

Freeware

https://client.pritunl.com

[SiLæncer]

Whats new:>>

Interface improvements

https://client.pritunl.com

[SiLæncer]

KiTTY is a fork of the popular PuTTY telnet and SSH client with additional features packaged as a portable app, so you can connect in to your systems on the go.

Whats new:>>

bug fix: crash in user command menu

http://kitty.9bis.net/

[SiLæncer]

Changelog

ADD Support for ChaCha20-Poly1305 cipher
ADD Ability to synchronize session and host name when creating or editing a session
ADD Added key mappings to enable/disable "Send Key Input to All Sessions" for the current tab
MOD Can choose whether or not to save when creating instant tunneling
FIX A session's command prompt string is displayed after exiting to the Local Shell
FIX Background color of highlights being applied incorrectly
FIX CLS (Clear Screen) command not working in the Local Shell
FIX Calling Xshell from the Local Shell initializes a previous version
FIX Changes to the VT mode option not sticking when editing multiple sessions
FIX Crash when closing multiple tabs in a Russian environment
FIX Crash when printing host key's RandomArt
FIX Error messages related to failed authentications
FIX Highlight previews not displaying properly in certain languages
FIX Local Shell Prompt apeears when using the reconnect command to reconnect to a SERIAL session
FIX Name validation not occurring when adding a search engine or when saving a layout
FIX Not connecting to the default port when the Adress Bar's protocol is set to FTP
FIX Offline activation explanation resources
FIX Resource cleanup related to CSV imports
FIX Session file disappears from the Session Manager when changing the file name's capitalization
FIX Some sessions open in different windows when opening multiple sessions simultaneously
FIX Unable to run software after upgrading from a free/evaluation license to a paid license
FIX Unable to send a new line character(n) with a Quick Button.
FIX When ending a Named Pipe Serial connection, the dialog box prompt does not display the session name

[close]

http://www.netsarang.com/products/xsh_overview.html

[SiLæncer]

WinSSHTerm helps you to be more productive. Using keyboard shortcuts and intelligent navigation tools allows you to quickly switch between or start new SSH sessions even if you have to manage many systems. It has built-in support for copying files and running X applications. The terminal colors are carefully selected to minimize the stress for your eyes. WinSSHTerm is easy to use, lightweight and stable.

Freeware

Changelog

Bug fix: Leaving full screen mode could cause WinSSHTerm to be completely off screen when using multiple monitors
Bug fix: Installing/Updating WinSCP now does not delete plink.exe/klink.exe
Right mouse button is now the default button for copy&paste
Added terminal font sizes

[close]

http://winsshterm.blogspot.com/

[SiLæncer]

mRemoteNG is a fork of mRemote: an open source, tabbed, multi-protocol, remote connections manager. mRemoteNG adds bug fixes and new features to mRemote.

It allows you to view all of your remote connections in a simple yet powerful tabbed interface.

mRemoteNG supports the following protocols:

    RDP (Remote Desktop/Terminal Server)
    VNC (Virtual Network Computing)
    ICA (Citrix Independent Computing Architecture)
    SSH (Secure Shell)
    Telnet (TELecommunication NETwork)
    HTTP/HTTPS (Hypertext Transfer Protocol)
    rlogin (Remote Login)
    Raw Socket Connections

License: GPLv2

Whats new:>>

Proper (one time only, if desired) popup for Overriding the FIPS check. Reference #222

https://mremoteng.org/

[SiLæncer]

Conveniently manage the hierarchy of SSH sessions and tunnels that are created during the port forwarding using this straightforward app.

License: GPLv2

https://sourceforge.net/projects/doffensshtunnel/

[SiLæncer]

Bitvise SSH Client (formerly Tunnelier) is a fast, secure FTP and terminal client with a variety of "tunnel" options to create secure connections, similar to a VPN. The program can forward Windows file shares over SSH, an FTP-to-SFTP protocol bridge, port forwarding and more. See forum discussion for adding secure FTP to existing portable software.

Includes support for single-click remote desktop forwarding for graphical server access, vt100, strong auto-reconnect and a scriptable console-mode SFTP client. Integrated SOCKS and HTTP proxy are available for dynamic forwarding. Security measures include wide encryption protocol support including public key exchange and optional integrated compression. Supports profiles and optional encryption of local passwords.

Functional in 64-bit.

Whats new:>>

Graphical SFTP:

Auto-completion improvements:

Regular files are no longer shown for auto completion of directory paths.
Tab and Shift+Tab now behave consistently with auto-completion in other apps.
File transfer events no longer cancel the auto-completion drop-down.
To improve UI responsiveness, directory listings are now performed in a background thread.

https://www.bitvise.com/ssh-client

[SiLæncer]

Changelog

Adam Ciarciński (1):

Fix subnet topology on NetBSD (2.4).

Antonio Quartulli (3):

add support for %lu in argv_printf and prevent ASSERT
buffer_list: add functions documentation
ifconfig-ipv6(-push): allow using hostnames

Arne Schwabe (7):

Properly free tuntap struct on android when emulating persist-tun
Add OpenSSL compat definition for RSA_meth_set_sign
Add support for tls-ciphersuites for TLS 1.3
Add better support for showing TLS 1.3 ciphersuites in --show-tls
Use right function to set TLS1.3 restrictions in show-tls
Add message explaining early TLS client hello failure
Fallback to password authentication when auth-token fails

Christian Ehrhardt (1):

systemd: extend CapabilityBoundingSet for auth_pam

David Sommerseth (1):

plugin: Export base64 encode and decode functions

Gert Doering (4):

Add %d, %u and %lu tests to test_argv unit tests.
Fix combination of --dev tap and --topology subnet across multiple platforms.
Add 'printing of port number' to mroute_addr_print_ex() for v4-mapped v6.
preparing release v2.4.7 (ChangeLog, version.m4, Changes.rst)

Gert van Dijk (1):

Minor reliability layer documentation fixes

James Bekkema (1):

Resolves small IV_GUI_VER typo in the documentation.

Jonathan K. Bullard (1):

Clarify and expand management interface documentation

Lev Stipakov (5):

Refactor NCP-negotiable options handling
init.c: refine functions names and description
interactive.c: fix usage of potentially uninitialized variable
options.c: fix broken unary minus usage
Remove extra token after #endif

Richard van den Berg via Openvpn-devel (1):

Fix error message when using RHEL init script

Samy Mahmoudi (1):

man: correct a --redirection-gateway option flag

Selva Nair (7):

Replace M_DEBUG with D_LOW as the former is too verbose
Correct the declaration of handle in 'struct openvpn_plugin_args_open_return'
Bump version of openvpn plugin argument structs to 5
Move get system directory to a separate function
Enable dhcp on tap adapter using interactive service
Pass the hash without the DigestInfo header to NCryptSignHash()
White-list pull-filter and script-security in interactive service

Simon Rozman (2):

Add Interactive Service developer documentation
Detect TAP interfaces with root-enumerated hardware ID

Steffan Karger (7):

man: add security considerations to --compress section
mbedtls: print warning if random personalisation fails
Fix memory leak after sighup
travis: add OpenSSL 1.1 Windows build
Fix --disable-crypto build
Don't print OCC warnings about 'key-method', 'keydir' and 'tls-auth'
buffer_list_aggregate_separator(): simplify code

[close]

https://openvpn.net/community/

[SiLæncer]

SSLCertScanner is the FREE SSL certificate scanner tool which can remotely scan, retrieve and validate the SSL certificate from any host either on the intranet or internet. It can greatly help you to track expired/rogue certificate on your SSL servers.

You can either enter the IP address or name of the host such as www.facebook.com. Also it supports both HTTPS (port 443) as well as LDAPS (port 636) service for scanning SSL certificate. On successful completion, important certificate details are displayed along with status of validation. You can also view the complete details of SSL certificate by simply double clicking on it.

It works on wide range of platforms starting from Windows XP to latest operating system Windows 10.

Freeware

Whats new:>>

Major release with support for SSL certificate retrieval from older TLS 1.0 or 1.1 based SSL servers.

https://securityxploded.com/sslcertscanner.php

[SiLæncer]

Whats new:>>

Fixed issue introduced in version 8.25 where the recent locations drop-down in the graphical SFTP interface would no longer function correctly.
Fixed issue introduced in version 8.24 where the SSH Server Remote Control Panel could no longer be launched when connected to SSH Server versions 7.xx and earlier.

https://www.bitvise.com/ssh-client

[SiLæncer]

Whats new:>>

In the graphical SFTP interface, the new directory auto-completion feature could cause the SSH Client to crash when entering a remote path. Fixed.

When using the GSSAPI key exchange method gssapi-keyex, the SSH Client could incorrectly log a warning about failing to save the server's host key. Fixed.

https://www.bitvise.com/ssh-client

[SiLæncer]

Whats new:>>

#1303: Exception on first connection with new SQL server database
#1304: Resolved several issues with importing multiple RDP Manager v2.7 files

https://mremoteng.org/

[SiLæncer]

Changelog

Security fixes found by an EU-funded bug bounty programme:

    a remotely triggerable memory overwrite in RSA key exchange, which can occur before host key verification
    potential recycling of random numbers used in cryptography
    on Windows, hijacking by a malicious help file in the same directory as the executable
    on Unix, remotely triggerable buffer overflow in any kind of server-to-client forwarding
    multiple denial-of-service attacks that can be triggered by writing to the terminal

Other security enhancements: major rewrite of the crypto code to remove cache and timing side channels.
We now provide pre-built binaries for Windows on Arm.
Hardware-accelerated versions of the most common cryptographic primitives: AES, SHA-256, SHA-1.
GTK PuTTY now supports non-X11 displays (e.g. Wayland) and high-DPI configurations.
Type-ahead now works as soon as a PuTTY window is opened: keystrokes typed before authentication has finished will be buffered instead of being dropped.
Support for GSSAPI key exchange: an alternative to the older GSSAPI authentication system which can keep your forwarded Kerberos credentials updated during a long session.
More choices of user interface for clipboard handling.
New terminal features: support the REP escape sequence (fixing an ncurses screen redraw failure), true colour, and SGR 2 dim text.
Pressing Ctrl+Shift+PgUp or Ctrl+Shift+PgDn now takes you straight to the top or bottom of the terminal scrollback.

[close]

http://www.chiark.greenend.org.uk/~sgtatham/putty/

[SiLæncer]

PuTTY Key Generator, also known by the PuTTYgen moniker, is a small yet efficient program that can generate RSA and DSA keys for use with the OpenSSH authorized_keys file. It is a component of PuTTY and can be installed automatically with the Telnet client, but the chances are you would also see it incorporated in other third-party software.

MIT License

http://www.chiark.greenend.org.uk/~sgtatham/putty/