Thema: SSH/SSL/VPN Tools...

[SiLæncer]

Changelog

This release contains mitigation for a weakness in the scp(1) tool and protocol (CVE-2019-6111): when copying files from a remote system to a local directory, scp(1) did not verify that the filenames that the server sent matched those requested by the client. This could allow a hostile server to create or clobber unexpected local files
with attacker-controlled content.
This release adds client-side checking that the filenames sent from the server match the command-line request,
The scp protocol is outdated, inflexible and not readily fixed. We recommend the use of more modern protocols like sftp and rsync for file transfer instead.

[close]

https://www.openssh.com

[SiLæncer]

Conveniently manage the hierarchy of SSH sessions and tunnels that are created during the port forwarding using this straightforward app.

License: GPLv2

Whats new:>>

New: Column Args in Variable Settings -> Executable Applications
Update (macos): Updated from Qt 5.11.0 to 5.12.1
Fixed (ticket 55): Not prompting for password properly. Thanks to Anthony Vitale for reporting.

https://sourceforge.net/projects/doffensshtunnel/

[SiLæncer]

TCP Over SSL Tunnel is a free SSL tool with SNI Host (Spoof Host) support.

Features:

TCP Over SSL Tunnel
SNI Host Support (Spoof Host)
Protocols SSLv23, TLSv1, TLSv1.1, TLSv1.2
Payload Support
Most Payload TAGS Supported, included [split] and [delay_split]
Direct Connection Support
Proxy Support
Internal SSH
Hide to Windows Try Icon System.
Show Logs
Black and White Font Text Color Change.

License: Open Source

https://sourceforge.net/projects/tcpoverssltunnel/

[SiLæncer]

Whats new:>>

Support for new TRA SSH Gateway in Telenor Norway

https://sourceforge.net/projects/doffensshtunnel/

[SiLæncer]

Changelog

Fixed an issue in how command line clients (sftpc, sexec, stermc, stnlc, spksc) were initializing the default key exchange algorithm list. This caused the following issues
If the -gkx parameter (or its -sspi alias) was passed to enable GSSAPI (Kerberos) key exchange, the requisite GSS key exchange algorithms had to be additionally enabled via -profile=..., -kexAlgs=... or -kexMod=.... The -gkx and -sspi parameters will now again correctly enable GSS key exchange algorithms as intended.
Outdated key exchange algorithms, such as diffie-hellman-group1-sha1, were enabled by default when they should not be. With this change, backward compatibility may be broken for users connecting to servers that require outdated key exchange algorithms. If you are connecting to such a server using one of our command line clients, you will need to enable the outdated algorithm using either -profile=..., specifying a profile where the algorithm is enabled; or via -kexMod=..., as in the following examples
sftpc -profile=CPathProfile.tlp ...
sftpc user@host -kexMod=diffie-hellman-group1-sha1 ...

[close]

https://www.bitvise.com/ssh-client

[SiLæncer]

Create secure virtual private networks (VPNs) for your friends or family with the help of this useful, open-source, and lightweight app.

License : GPLv3 (Donationware)

Changelog

- Fixes memory leaks;
- Fixes compilation on recent gcc/clang.
- Uses vcpkg to build Windows dependencies;
- Updates TAP-9 adapter in Windows installer.

[close]

https://www.freelan.org/

[SiLæncer]

WinSSHTerm helps you to be more productive. Using keyboard shortcuts and intelligent navigation tools allows you to quickly switch between or start new SSH sessions even if you have to manage many systems. It has built-in support for copying files and running X applications. The terminal colors are carefully selected to minimize the stress for your eyes. WinSSHTerm is easy to use, lightweight and stable.

Freeware

Changelog

    New feature "Quick-Connect"
    New shortcuts (Navigation->Shortcuts)
    Bug fix: Allow whitespaces in passwords (jump server)

[close]

http://winsshterm.blogspot.com/

[SiLæncer]

Changelog

* New features
  - New "ticketKeySecret" and "ticketMacSecret" options
    to control confidentiality and integrity protection
    of the issued session tickets.  These options allow
    for session resumption on other nodes in a cluster.
  - Added logging the list of active connections on
    SIGUSR2 or with Windows GUI.
  - Logging of the assigned bind address instead of the
    requested bind address.
* Bugfixes
  - Service threads are terminated before OpenSSL cleanup
    to prevent occasional stunnel crashes at shutdown.

[close]

https://www.stunnel.org/index.html

[SiLæncer]

Whats new:>>

Bug fixes
Minor changes to the GUI
The features 'connections in menu bar' and 'use a custom PuTTY/KiTTY session' are now free

http://winsshterm.blogspot.com/

[SiLæncer]

KiTTY is a fork of the popular PuTTY telnet and SSH client with additional features packaged as a portable app, so you can connect in to your systems on the go.

Whats new:>>

* Merge with 0.71 PuTTY version

* Unfortunately those patches are now broken:
** Cygterm port (https://code.google.com/archive/p/puttycyg/)
** Wincrypt port (https://github.com/ufrisk/puttywincrypt)
** Background image port (https://www.9bis.net/kitty/?page=covidimus&zone=en)
** ZModem port (http://leputty.sourceforge.net/)

http://kitty.9bis.net/

[SiLæncer]

Changelog

    ADD: Ability to use XFTP as the protocol for drag/dropping of files
    ADD: Experimental Features
    ADD: OpenSSH CA Support (Experimental Feature)
    ADD: Real Windows CMD Support (Experimental Feature)
    ADD: Recent Sessions List (Experimental Feature)
    ADD: Remote command of the SSH protocol
    MOD: Improvements to the Local Shell's ssh command's parameter values (help ssh)
    MOD: Removed character limit for Keyboard Interactive fields
    MOD: Xshell checks for write permissions when changing data folder path
    FIX: Added Ctrl+U(=Ctrl+Home) key values as kill signals
    FIX: Highlights of regular expressions no applying to certain strings
    FIX: Host name not recognized when connecting from the Local Shell
    FIX: Program does not recognize educational product numbers
    FIX: Quick commands are mistakenly shown in simple view mode
    FIX: Reconnect feature not functioning after disconnecting from a SERIAL connection.
    FIX: The Tab Menu's Show Status Icon option does not remain checked
    FIX: The user key option (-i) is only applied when opening a new window
    FIX: Unable to re-add forwarding rules that were once removed from the Tunneling Pane

[close]

http://www.netsarang.com/products/xsh_overview.html

[SiLæncer]

Changelog

    bugfix: unable to load boolean value with -kload option
    bugfix: wrong startup message with automatic password

0.71.0.2

    New window size calculus
    bug fix: fix the ssh version claim
    bug fix: automatic re-connection without pop-up

[close]

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

Changelog

    Security bugfixes

        Fixed a Windows local privilege escalation vulnerability caused insecure OpenSSL cross-compilation defaults. Successful exploitation requires stunnel to be deployed as a Windows service, and user-writable C:\ folder. This vulnerability was discovered and reported by Rich Mirch.
        OpenSSL DLLs updated to version 1.1.1c.

    Bugfixes

        Implemented a workaround for Windows hangs caused by its inability to the monitor the same socket descriptor from multiple threads.
        Windows configuration (including cryptographic keys) is now completely removed at uninstall.
        A number of testing framework fixes and improvements.

[close]

https://www.stunnel.org/index.html

[SiLæncer]

Whats new:>>

    bugfix: logevent function was broken
    bugfix: automatic reconnection (thanks to Leo)

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

Changelog

    When creating a new profile or when using the SSH Client's command line clients (sftpc, sexec, stermc, stnlc, spksc) without the -profile=... parameter, the SSH Client will now by default prefer Curve25519 and ECDH key exchange over traditional Diffie Hellman. Classic DH is significantly slower and more computationally expensive, while there continues to be no known reason to de-prefer Elliptic Curve cryptography. Existing profiles are unaffected and will keep their algorithm preference order.

    SFTP GUI:

        In Windows 10 version 1903, when using the Open action or when double-clicking a file whose extension has no file association, Windows may no longer offer to select a program with which to open the file, but may instead fail the action. The SSH Client will now automatically use Open with if the Open action fails in this manner.

        The SFTP GUI now supports mouse button 4 to trigger the Back action and mouse button 5 to trigger Forward, in a manner consistent with common browsers.

    There exist interim, but deployed versions of SSH implementations including SmartFTP which implement the no-flow-control extension based on a previous, non-final draft where the extension value was empty. Bitvise SSH Server, SSH Client and FlowSsh will now no longer disconnect when receiving an unrecognized no-flow-control extension value, but will attempt to continue; and will now treat an empty value as if the remote party sent "p" (for "preferred").

    Polished a few issues in BvSshUpdate, the SSH Client's command-line version update utility.

[close]

https://www.bitvise.com/ssh-client