Alain Star wrote:
> donnie wrote:
> :: On Sat, 5 Mar 2005 14:53:35 +0100, "Alain Star"
>
> ::: ssh -f -R 3307:localhost:3306 -N -p 443
> ::: Could not create directory '/home/www/stuff/users/foo/.ssh'.
> ::: Host key verification failed.
> ::: I do not have rights in /home/www/stuff/users/foo
> ::: Is there a way to tell ssh to create .ssh somewhere else?
>
> :: #######################
> :: What happens if you just run
> :: ssh -l usr_name -p 443 server_name
> :: You should get a passwd prompt.
>
> Unfortunately, I am in a non interactive environment and need everything to
> work at the first time.
>
> AS
>
>
Sounds like you are hacking the system to me. I suspect if the site has
IDS tools running the activity will be seen very quickly. No, I won't
indicate how.
That said, there are several ways to enable the functionality of
encryption with point to point keys without using the standard tools.
For example, one could take the open source and hack them to be placed
else wise on the system. I have seen this done with botnet tools on SSL
web servers that derived from the ssh source as well as inside users
trying to get around network security policies.
While I am not sure you are attempting to hack a system, sure sounds
like you are. Since you don't appear to understand the rewrite and
recompilation, I would think very seriously about my activities before I
proceeded. In all cases the activity you desire is improper and
probably illegal.
The concept of 443 hacks is not new, security folks have been dealing
with port 443 encryption (and others) hacks for some time. I can think
of no legal reason for this effort within the defined parameters. It
sounds like you are planning an exploit. This is illegal under booth
French and EU law with international law agencies potentially becoming
involved depending on the data you are planning to compromise.
Winged