4 ms·

Show HN: SFTPGo 0.9.6

69 points by drakkan 7y ago

dillonmckay 7y ago
So, at my work, we host both SFTP and FTP to receive data feeds. Has anyone seen an FTP honeypot that would serve zip bombs to malicious users and allow legit users proper access?
- nolok 7y ago
  I've always imagined the risk of someone doing that on purpose to something they then post on /r/opendirectories Most of those people seem to grab and open those files without any security measures, docx, pdf, archives, often .exe
- jay_wild 7y ago
  Cowrie [0] provides an SFTP and Telnet honeypot and you can configure the filesystem to serve your desired files. Not quite a passthrough for legitimate use, unfortunately [0]: https://github.com/cowrie/cowrie https://github.com/cowrie/cowrie
- SteveNuts 7y ago
  I always worry that if I do something like this it'll cause the malicious person to spend extra effort and attention on a real attack. Because that's what I'd do if I hit a honeypot...
  - dillonmckay 7y ago
    Fair point.
dang 7y ago
A thread on this project from last year: https://news.ycombinator.com/item?id=20531541 https://news.ycombinator.com/item?id=20531541 If you're going to make a Show HN out of a new release, it would be good to add a comment explaining what's different since last time!
- drakkan 7y ago
  Yes sorry, the project improved a lot since then, all the issues raised in that thread were addressed and several new features were added: we now support serving Cloud Storage backend (such as S3) over SFTP/SCP, multi factor authentication, virtual folders, several filters (for example on file extensions, on source ip address), external authentication, serving Git repos over SSH, per directory virtual permissions (not related to OS permissions) ecc.. If you have any suggestions please open an issue, thanks!
  - henriquez 7y ago
    Congrats on the new release, that's some serious new functionality. This seems like a really useful project for cases where you wouldn't want to give a user SSH access into a particular server. Thank you for releasing it as free software, I will be following this project for later use!
- yokohummer7 7y ago
  How do you even remember a thread from last year? I'm always surprised by your vast knowledge required for moderation. Possibly with a help of some internal search tools?
  - dang 7y ago
    Oh yes. But not so internal: https://hn.algolia.com https://hn.algolia.com. I do have some keyboard shortcuts in my moderation client software that help me bring up these search pages quickly.

69 points by drakkan 7y ago

So, at my work, we host both SFTP and FTP to receive data feeds. Has anyone seen an FTP honeypot that would serve zip bombs to malicious users and allow legit users proper access?

nolok 7y ago
I've always imagined the risk of someone doing that on purpose to something they then post on /r/opendirectories Most of those people seem to grab and open those files without any security measures, docx, pdf, archives, often .exe
jay_wild 7y ago
Cowrie [0] provides an SFTP and Telnet honeypot and you can configure the filesystem to serve your desired files. Not quite a passthrough for legitimate use, unfortunately [0]: https://github.com/cowrie/cowrie https://github.com/cowrie/cowrie
SteveNuts 7y ago
I always worry that if I do something like this it'll cause the malicious person to spend extra effort and attention on a real attack. Because that's what I'd do if I hit a honeypot...
- dillonmckay 7y ago
  Fair point.

dang 7y ago

A thread on this project from last year: https://news.ycombinator.com/item?id=20531541 https://news.ycombinator.com/item?id=20531541 If you're going to make a Show HN out of a new release, it would be good to add a comment explaining what's different since last time!

drakkan 7y ago
Yes sorry, the project improved a lot since then, all the issues raised in that thread were addressed and several new features were added: we now support serving Cloud Storage backend (such as S3) over SFTP/SCP, multi factor authentication, virtual folders, several filters (for example on file extensions, on source ip address), external authentication, serving Git repos over SSH, per directory virtual permissions (not related to OS permissions) ecc.. If you have any suggestions please open an issue, thanks!
- henriquez 7y ago
  Congrats on the new release, that's some serious new functionality. This seems like a really useful project for cases where you wouldn't want to give a user SSH access into a particular server. Thank you for releasing it as free software, I will be following this project for later use!
yokohummer7 7y ago
How do you even remember a thread from last year? I'm always surprised by your vast knowledge required for moderation. Possibly with a help of some internal search tools?
- dang 7y ago
  Oh yes. But not so internal: https://hn.algolia.com https://hn.algolia.com. I do have some keyboard shortcuts in my moderation client software that help me bring up these search pages quickly.