3 ms·
Moxie actually published a nice lighweight port knocking daemon that: * Does not bind to sockets * Is not written in C * Prevents replay attacks * The only
by rmrfstar 6y ago
Moxie actually published a nice lighweight port knocking daemon that:
* Does not bind to sockets
* Is not written in C
* Prevents replay attacks
* The only code that runs as root is just tailing kern.log and is like 15 lines
It probably needs to roll from SHA1 to SHA256 and Python2 to Python3, but otherwise seems sound.
[1] https://moxie.org/software/knockknock/ https://moxie.org/software/knockknock/
- Forbo 6y agoLooks like there is a pull request to change it from authenticate-then-encrypt to encrypt-then-authenticate that hasn't been merged for over five years. Thinking this project might be abandoned, unfortunately. :-( Edit: It appears there may be an active fork here: https://github.com/indyprime/knockknock https://github.com/indyprime/knockknock Still digging through to see if the encrypt-then-authenticate change made it into this version. Edit 2: It looks like it still uses authenticate-then-encrypt. I sent an email to the maintainer of that fork, we'll see what happens. ^__^
- demosito666 6y agoThis is freaking genius!