Thema: SSH/SSL/VPN Tools...

[SiLæncer]

Changelog

    New features:

    Allow unicode search string in --cryptoapicert option (Windows)

    User visible changes:

    Skip expired certificates in Windows certificate store (Windows) (trac #966)
    OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
    When using "--auth-user-pass file" with just a username and no password in the file, OpenVPN now queries the management interface (if active) for the credentials. Previously it would query the console for the password, and fail if no console available (normal case on Windows) (trac #757)
    Swap the order of checks for validating interactive service user (Windows: check config location before querying domain controller for group membership, which can be slow)

    Bug fixes:

    fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float")
    This can be used to disrupt service to a freshly connected client (no session keys negotiated yet). It can not be used to inject or steal VPN traffic. CVE-2020-11810, trac #1272)
    fix combination of async push (deferred auth) and NCP (trac #1259)
    Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
    Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
    mbedTLS: Make sure TLS session survives move (trac #880)
    Fix OpenSSL private key passphrase notices
    Fix building with --enable-async-push in FreeBSD (trac #1256)
    Fix broken fragmentation logic when using NCP (trac #1140)

[close]

https://openvpn.net/community/

[SiLæncer]

KiTTY is a fork of the popular PuTTY telnet and SSH client with additional features packaged as a portable app, so you can connect in to your systems on the go.

Whats new:>>

    feat: new configuration option: dblclick. If value is start, double click on session start the session rather than opening it.
    bugfix: [Crash] Crashing calling ‘Change Setting’ from system menu [#113]: trying to solve with two new gcc paramters: -mms-bitfields -march=i386
    bugfix: wrong filename for Default Settings session file in portable mode with file extention enabled

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

SoSSH is an application designed to help you streaming multimedia content via the SSH protocol. SoSSH can connect to a server and creates custom playlists. It comes with an intuitive interface and basic playback functions, which makes it suitable for any type of user, beginner or advanced.

License : GPLv3

https://sourceforge.net/projects/sossh/?source=directory

[SiLæncer]

Whats new:>>

    Security Advisory: one high severity fix in SSL_check_chain()
    OpenSSL 1.1.1g is now available, including a security fix

https://www.openssl.org/

[SiLæncer]

Connect to various devices or servers in your network by turning to this lightweight software solution that lets you manage several sessions.

Features

* Manage multiple sessions from one console with a tabbed interface
* Save credentials or private keys to any session for easy login
* Automate all scripts youre using when connection is established
* Find your saved session easily thanks to Windows Search integration
* No installation is needed

+ Support of SCP, SSH, Telnet, SFTP
+ Saving credentials (including private key) for auto-login
+ Support of multiple sessions in tabbed interface
+ Quick access to the most used sessions
+ Auto-reconnecting capability
+ Graphical SFTP file transfer
+ Support of post-connections scripts
+ Integration of Windows Search

Freeware

https://www.solarwinds.com/free-tools/solar-putty

[SiLæncer]

Whats new:>>

    bugfix: remove -mms-bitfields -march=i386, does not improve AMD situation.
    bugfix: BUG: When selecting a session inside a subfolder, the selection changes [#155]
    bugfix: In portable mode, Default Settings session file is created even is the flag defaultsettings is set to no
    feat: add local proxy command managment in winscp integration
    feat: new dynamic settings for PSCP and WinSCP intégration [#161]

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

Whats new:>>

    fix #1657 [feat] Support show ssh server info(network, file system and more)
    fix #1644 [feat] Add start directory option for ssh/sftp (#1664)

https://github.com/electerm/electerm

[SiLæncer]

NetMod is a lightweight utility that can act as a proxy server with advanced capabilities, namely the ability to modify requests and access blocked websites behind the firewall. As you probably hinted, the application comes with a built-in SSH client, OpenVPN and SSL/TLS tunneling, so you are able to access everything blocked for your system or geographic area.

Freeware

Changelog

-Bug Fix: OpenVPN cfg editor sometimes doesn't show
-Limit port value to 65535
-Improvements in OpenVPN settings
-Added OpenVPN sndbuf/rcvbuf size option in settings (OpenVPN Buffer Size)
-Added OpenVPN DNS Customization (See in settings and set DNS to system DNS)
-Added UDPGW Buffer size option in settings (SSH Options)
-Downgraded TAP-Driver to 9.21.2 (previous version still causes 1 GB limit in x86 OS, x64 OS no issue)
Now should not limit to 1 GB tested in different OS (WIN 10 x86/x64 and WIN 7 x86)

[close]

https://sourceforge.net/projects/netmodhttp/

[SiLæncer]

Whats new:>>

    feat: new dynamic settings for PSCP and WinSCP intégration [#161], add remote directory
    bugfix: complete refactoring of session selector in portable mode

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

Changelog

    Installation:

        The SSH Client no longer supports installation on Windows 10 versions 1507 and 1511. These versions contain a flawed cryptographic implementation which prevents a number of SSH algorithms from working correctly. The lowest Windows 10 version supported is 1607.

        During an initial, interactive installation; when installing into a non-default directory (e.g. outside of C:\Program Files (x86)\); the SSH Client installer will attempt to detect if any parent of the installation directory grants insecure permissions for non-administrative users. The installer will display a warning about installing into such insecure directories.

        When updating an installation in such a directory, the update will succeed, but the graphical SSH Client will display a warning.

    Graphical client:

        Some versions of Nvidia Surround modify Windows behavior in a way such that the window manager doesn't respect the SSH Client's fixed window width setting. The graphical SSH Client now works around this issue.

        In the Host key manager interface, a host key could be incorrectly placed into the wrong recognized vs. unrecognized category if there were keys in both categories. Fixed.

    Command-line clients:

        The command-line clients sftpc, sexec, stermc, stnlc and spksc now support the command-line parameter -sendExtInfo=n so that the user can disable sending of the client-side SSH_MSG_EXT_INFO message to a server which advertises support, but does not actually support it.

        Command-line clients will no longer display unnecessary warnings about failing to load update settings if the SSH Client was installed in an unattended manner and the graphical SSH Client has not yet been run.

    SSH:

        In rare circumstances, an SSH session could terminate in such a way that the SSH Client would crash. Fixed.

        The CrushFTP server, and other servers based on the J2SSH Maverick implementation, may advertise support for SSH_MSG_EXT_INFO (RFC 8308), but have a bug where the server disconnects if the client sends this message. Bitvise SSH Client and FlowSsh now attempt to detect these servers based on their SSH version strings, and disable sending of the client-side SSH_MSG_EXT_INFO if detected.

        OpenSSH 6.2 and 6.3 can be configured to enable AES GCM, but crash if it is used. Bitvise software versions 8.42 and higher will now disable AES GCM if the remote version string indicates an affected OpenSSH version.

    SFTP:

        The SFTP server which identifies itself as "SSH-2.0-SFTP Server" has a flawed SFTP v4+ text mode implementation. The default transfer mode with this server will now be Binary instead of AutoStd.

        The dialog interface for the Mirror feature could require multiple clicks on the OK button. Fixed.

    Remote Desktop forwarding:

        The SSH Client now delays deletion of the Remote Desktop profile that mstsc is launched with. This is intended to improve compatibility with Windows on ARM64.

    Terminal:

        The SSH Client's graphical terminal window implementation for classical terminals (xterm and other non-bvterm terminals) now implements improved mouse wheel scrolling, properly accumulating mouse wheel deltas.

        Some versions of Cmder have an issue which causes the Windows function ScrollConsoleScreenBuffer to fail unexpectedly. The bvterm client now works around this issue.

[close]

https://www.bitvise.com/ssh-client

[SiLæncer]

Changelog

    Version information:

        This version continues a minor upgrade access amnesty so that users who would otherwise upgrade to version 8.36 for a security fix can instead upgrade to the latest version with more fixes. The minimum upgrade access to use minor versions since 8.36 is October 27, 2019.

    Installation:

        The SSH Server no longer supports installation on Windows 10 versions 1507 and 1511. These versions contain a flawed cryptographic implementation which prevents a number of SSH algorithms from working correctly. The lowest Windows 10 version supported is 1607.

        During an initial, interactive installation; when installing into a non-default directory (e.g. outside of C:\Program Files\); the SSH Server installer will attempt to detect if any parent of the installation directory grants insecure permissions for non-administrative users. The installer will display a warning about installing into such insecure directories.

        When updating an installation in such a directory, the update will succeed, but the SSH Server Control Panel will display a warning.

    Control Panel and settings:

        The FTPS passive port is now configurable in Easy settings and has a default fixed value 20020. The previous default value, 0, would cause the passive port for data connections to be randomly selected each time the SSH Server was started. This required using Advanced settings to configure FTPS access from the internet when a router or firewall needed to be manually configured.

        The Log Folder Viewer now starts faster when the log directory contains many log files.

        The SSH Server Control Panel could crash when interacting with the Host keys and fingerprints interface in instance type settings for slaves and secondary masters. Fixed.

        During CSV import, boolean values are now recognized regardless of character case. Boolean values had to be lowercase previously.

    Reliability:

        The difference comparison algorithm used for logging settings changes had a rare corner case which would cause the SSH Server to stop in a controlled but definitely unintended way. Fixed.

    SSH:

        In rare circumstances, an SSH session could terminate in such a way that the SSH Server would crash. Fixed.

        OpenSSH 6.2 and 6.3 can be configured to enable AES GCM, but crash if it is used. Bitvise software versions 8.42 and higher will now disable AES GCM if the remote version string indicates an affected OpenSSH version.

        The SSH Server will now log the host key algorithm negotiated by a client in the message I_SESSION_KEY_EXCHANGE_ALGORITHMS.

    Authentication:

        In specific circumstances, a logon attempt could get stuck waiting for serialization due to the Penalty login attempt delay setting. The session would not be released until the next login attempt initiated by another session. Fixed.

        The log message I_LOGON_AUTH_DISCARDED has been changed from info-level to more appropriate trace-level.

    Subsystems:

        Improved protections on SSH Server subsystems for file transfer, terminal shell and exec requests. The improvements protect against SSH clients with non-administrative access which are nevertheless granted the ability to run arbitrary code, such as through unrestricted Command Prompt or PowerShell access. The improvements are not effective on Windows 7 and Windows Server 2008 R2 due to limitations in those Windows versions.

    BvShell:

        Fixed an issue where BvShell would log superfluous, non-informative info-level messages for each entry in a directory listing.

        BvShell now supports the command sh to enter a simulated sh-like shell. This is to improve compatibility with the SCP implementation in the IBM Workload Scheduler on AIX, which supports SCP but not SFTP, and expects to invoke an sh shell. These are some poor design decisions on behalf of IBM, so that further accommodations may still be needed.

[close]

https://www.bitvise.com/ssh-server-version-history

[SiLæncer]

Whats new:>>

bugfix: remove automatic file association: bug with McAfee

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/

[SiLæncer]

Whats new:>>

    [feat] Support local start directory (#1689)
    [feat] Support custom baudRate for serial port (#1688)
    [security] Add token verify for requests (#1687)
    [fix] Fix Drag file/folder to terminal support (#1681)

https://github.com/electerm/electerm

[SiLæncer]

WinSSHTerm helps you to be more productive. Using keyboard shortcuts and intelligent navigation tools allows you to quickly switch between or start new SSH sessions even if you have to manage many systems. It has built-in support for copying files and running X applications. The terminal colors are carefully selected to minimize the stress for your eyes. WinSSHTerm is easy to use, lightweight and stable.

Freeware

Whats new:>>

    New feature: Send connection info to quick connect window
    Cluster Mode: Tabs don't close so that the session can be reconnected
    New error handling when embedding PuTTY/KiTTY into a tab

http://winsshterm.blogspot.com/

[SiLæncer]

KiTTY is a fork of the popular PuTTY telnet and SSH client with additional features.

Whats new:>>

    Feat: new kitty.ini option hostkeyextension to define an extension for server host key files
    Feat: Adjust lines scrolled per mouse wheel turn [#166]

Quelle : https://github.com/cyd01/KiTTY/releases

http://kitty.9bis.net/