USA Linux Users Group Forum Index
Log in Register FAQ Memberlist Search USA Linux Users Group Forum Index Album

web browser SSH client?

 
Post new topic   Reply to topic   printer-friendly view    USA Linux Users Group Forum Index » Servers and Server Administration
View previous topic :: View next topic  
Author Message
VHockey86
Advanced Member


Joined: 12 Dec 2024
Posts: 988
Location: Rochester

PostPosted: Tue Jul 17, 2024 6:40 pm    Post subject: web browser SSH client? Reply with quote

MIS has our network locked down pretty tight...all outgoing traffic is even aggressively filtered. For one - I can't SSH to my server at home, which can be pretty annoying. We're stuck on windows boxes here and sometimes I just need to access a Linux box for one reason or another.

My boss says hes run SSH over the SSL port since it isnt filtered to access his box at home, but I've already got apache serving SVN over https...so I can't really hijack that port.

Does anyone know of a halfway decent ssh client that works in the browser (probably Java?). I know that webmin has a command window interface - something like that would probably be good enough. Ofc I'd want it to require login (if its SSH thats a given I guess) and run over https for some security.



_________________
Main Desktops : Kubuntu 10.4. ArchLinux 64-bit. Windows7 64-bit. Windows XP 32-bit.

MacBook: OS X Snow Leopard (10.6)
Back to top
View user's profile Send private message
crouse
Site Admin


Joined: 17 Apr 2024
Posts: 11833
Location: Iowa

PostPosted: Wed Jul 18, 2024 1:44 am    Post subject: Reply with quote

Mindterm is today probably the most widely spread client that implements the SSH1 and SSH2 protocols written in pure Java.
http://www.appgate.com/products/80_MindTerm/
Quote:

Mindterm is today probably the most widely spread client that implements the SSH1 and SSH2 protocols written in pure Java.

Some of the worlds leading manufactures of communication equipment has signed OEM agreements with AppGate and integrated Mindterm into their own solutions. Other users are in education sector and goverment.

MindTerm is free for personal use.

MindTerm is small, portable and secure. It contains an extremely powerful and easy to use SSH client that provides advanced features such as tunneling support, file transfer GUI as well as support for HTTP and SOCKS proxies.

MindTerm client also includes an integrated xterm/vt100 terminal emulator. It has the ability to run both a standalone application and as an applet.

Typical applications

* SSH Host access
* MindTerm is very well suited for technically skilled users in situations where you have an open network architecture with direct SSH based host and server access.
* Zero installation requirements
* With the Applet version of MindTerm it's possible to run a secure terminal session from a Java enabled web browser, e.g. when traveling and on lent computers.
* OEM integration
* Integration into other products to achieve java based secure terminal network access and/or file transfer.





----------------------------------------------------------------------------------------


CorkScrew - A Tool for Tunnelling SSH over HTTP Proxies etc.
http://wiki.kartbuilding.net//Corkscrew_-_ssh_over_https
Quote:

CorkScrew - A Tool for Tunnelling SSH over HTTP Proxies etc.

Situation: You want to ssh (via bash) to a computer via a HTTP/Socks Proxy with NO external access. The external box you have must accept ssh on port 443. I will perfect and make this easier.
[edit]
Firstly get Corkscew: http://www.agroman.net/corkscrew/

Or locally at: http://wiki.kartbuilding.net/corkscrew-2.0.tar.gz

mkdir /home/user/corkscrew
cd /home/user/corkscrew
wget http://www.agroman.net/corkscrew/corkscrew-2.0.tar.gz
gunzip *
tar -xvf cork....

We are going installing corkscrew in the user home directory Wink

Edit 'configure' and change this line (below) to install it in our home dir.:

ac_default_prefix=/home/user/corkscrew/cork..../


Then do the following to compile:

./configure
make
make install

[edit]
Edit .ssh/config

Use the following in .ssh/config, editing the User field as appropriate.

host externalserver.net
Hostname externalserver(443).net
Port 443
User username
LocalForward 3128 proxy.externalserver.net:3128
ProxyCommand corkscrew Internal_Proxy 8080 %h %p

Then simply login with:

ssh skynet.ie


More info at: https://wiki.skynet.ie/Users/CSIS

Thanks again to Skynet. This works sweet with Redbrick who dont allow external ssh, and who proxy everything.


Corkscrew is a tool for tunneling SSH through HTTP proxies.
http://www.agroman.net/corkscrew/
Quote:

Corkscrew is a tool for tunneling SSH through HTTP proxies.

Corkscrew has been compiled on :

* AIX
* HPUX
* Solaris
* FreeBSD
* OpenBSD
* NetBSD
* Linux
* Win32 (Cygwin)
* Mac OS X

Corkscrew has been tested with the following HTTP proxies :

* Gauntlet
* CacheFlow
* JunkBuster
* Squid
* Apache's mod_proxy

Please email me if you get it to work with another proxy. Installation is simple, check out the README.

News

Version 2.0 is finally here. Corkscrew has been tested against several proxies requiring HTTP authentication. Several flaws exist as only basic authentication is currently supported. Digest authentication may be supported in the future. NTLM authentication will most likely never be supported. Please read the documentation as some changes have been made to command line options again.

Version 1.5 introduces several performance bugfixes and will also run on Win32 with Cygwin. Upgrading is recommended.

Command line syntax has changed since version 1.3! View the README!

Downloading Corkscrew

Version 2.0 : http://www.agroman.net/corkscrew/corkscrew-2.0.tar.gz.

Return to agroman.net.
Updated: Aug 27 11:55 CST



_________________
Veronica - Arch Linux 64-bit -- Kernel 2.6.33.4-1
Archie/Jughead - Arch Linux 32-bit -- Kernel 2.6.33.4-1
Betty/Reggie - Arch Linux (VBox) 32-bit -- Kernel 2.6.33.4-1
BumbleBee - OpenSolaris-SunOS 5.11
Back to top
View user's profile Send private message Visit poster's website AIM Address
masinick
Linux Guru


Joined: 03 Apr 2024
Posts: 8615
Location: Concord, NH

PostPosted: Wed Jul 18, 2024 2:09 am    Post subject: It can be done Reply with quote

I use Mindterm from time to time when I want to interact between Windows desktops and Linux servers at work. I use Mindterm to open an SSH connection, then I start up a vnc server on the Linux server and connect to it using a vnc client on my windows desktop. I have a GNOME terminal running on a Debian server that often has five or six tabs open. I login to local sessions on the Linux server, then I ssh to many other Linux and Solaris servers and display in one of the open tabs. I do not run in full X graphical mode within these sessions, though if I were bent on doing it that is certainly possible. In the nineties when I ran on UNIX systems, I had full xterm sessions going to as many as a dozen other servers, all displaying back to my desktop. It can be done through SSH and SSL, but the overhead may be more than you care to deal with.



_________________
Brian Masinick
Distros: SimplyMEPIS
sidux - no CAPS!, antiX, Debian
Back to top
View user's profile Send private message Visit poster's website Yahoo Messenger
VHockey86
Advanced Member


Joined: 12 Dec 2024
Posts: 988
Location: Rochester

PostPosted: Wed Jul 18, 2024 4:31 pm    Post subject: Reply with quote

Hmm, I don't think the mindterm applet does quite what I'm looking for. It seems that the a java applet still just communicates over the standard SSH port.

Corkscrew looks like its just a linux app that works with a local proxy? Also it requires running 443 which I was hoping to avoid - but maybe just hosting my SSH server on 443 is the least hassle solution (then I shouldn't need anything special)



_________________
Main Desktops : Kubuntu 10.4. ArchLinux 64-bit. Windows7 64-bit. Windows XP 32-bit.

MacBook: OS X Snow Leopard (10.6)
Back to top
View user's profile Send private message
mwalling
New Member


Joined: 15 Jul 2024
Posts: 15
Location: Rensleer Co, NY

PostPosted: Wed Jul 18, 2024 4:43 pm    Post subject: Reply with quote

In high school all of the http traffic was routed through a proxy, and https was blocked, but we were still able to get ssh going through port 53. Is that an option on your network?

The other option I have used is telling PuTTY to run over the http-proxy. That works ok, but when the lunch hour internet-free-for-all starts, it will start lagging around 3 seconds.



_________________
Laptop, EeePC, Assorted Collection of Servers: Slackware 12.0
Desktop: Slamd64 12.0
Router: OpenWRT 7.09
Back to top
View user's profile Send private message Send e-mail Visit poster's website
VHockey86
Advanced Member


Joined: 12 Dec 2024
Posts: 988
Location: Rochester

PostPosted: Wed Jul 18, 2024 5:22 pm    Post subject: Reply with quote

haha, yea around lunch hour here I don't even try to use the internet, its useless.

I wasn't aware of the proxy stuff in putty - thanks for pointing that out.

I think all of our proxy stuff works automagically through the domain controller, I'm not really sure where to find the proxy settings - but I'll look into it.



_________________
Main Desktops : Kubuntu 10.4. ArchLinux 64-bit. Windows7 64-bit. Windows XP 32-bit.

MacBook: OS X Snow Leopard (10.6)
Back to top
View user's profile Send private message
d_riordan
Member


Joined: 08 Jan 2024
Posts: 245
Location: Leominster, Massachusetts, U.S.A.

PostPosted: Sun Jul 22, 2024 8:04 am    Post subject: Reply with quote

Since it's your home box (I assume that it's not being used for public access) have you considered binding SSH to a higher level port that's not being blocked at work?



_________________
*buntu 8.04
Back to top
View user's profile Send private message Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic   printer-friendly view    USA Linux Users Group Forum Index » Servers and Server Administration All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All content © 2024-2009 - Usa Linux Users Group
This forum is powered by phpBB. © 2024-2009 phpBB Group
Theme created by phpBBStyles.com and modified by Crouse