Section 1: user commands and tools
NAME swamp – SSL/TLS load-tester based on OpenSSL SYNOPSIS swamp -connect <address> [options] DESCRIPTION swamp is a utility that can be used to test and/or benchmark SSL/TLS servers. It is quite configurable and allows for various different characteristics of the server’s behaviour to be tested. OPTIONS -connect address Configures the address to which swamp should…
NAME sslsplit — transparent SSL/TLS interception SYNOPSIS sslsplit [-kCKwWOPZdDgGsrReumjplLSFi] -c pem proxyspecs […] sslsplit [-kCKwWOPZdDgGsrReumjplLSFi] -c pem -t dir proxyspecs […] sslsplit [-OPZwWdDgGsrReumjplLSFi] -t dir proxyspecs […] sslsplit -E sslsplit -V sslsplit -h DESCRIPTION SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics,…
NAME sslscan – Fast SSL/TLS scanner SYNOPSIS sslscan [options] [host:port | host] DESCRIPTION This manual page documents briefly the sslscan command sslscan queries SSL/TLS services, such as HTTPS, in order to determine the ciphers that are supported. SSLScan is designed to be easy, lean and fast. The output includes preferred ciphers of the SSL/TLS service,…
NAME ssldump – dump SSL traffic on a network SYNOPSIS ssldump [ -vTshVq -aAdeHnNqTxXvy ] [ -i interface ] [ -k keyfile ] [ -p password ] [ -r dumpfile ] [ -S [crypto|d|ht|H|nroff] ] [ expression ] DESCRIPTION ssldump is an SSL/TLS network protocol analyzer. It identifies TCP connections on the chosen…
NAME ssindex – generate index data for spreadsheet files SYNOPSIS ssindex [OPTIONS] [FILES] DESCRIPTION This manual page briefly documents the ssindex command. ssindex is a command line utility to generate index data for various spreadsheet file formats. It is primarily used by the Beagle indexing sub-system and search aggregator. OPTIONS This program follows the usual…
NAME sshuttle – sshuttle documentation SYNOPSIS sshuttle [options] [-r [username@]sshserver[:port]] <subnets …> DESCRIPTION sshuttle allows you to create a VPN connection from your machine to any remote server that you can connect to via ssh, as long as that server has python 2.3 or higher. To work, you must have root access on the local…
NAME sshpk-verify – verify a signature on data using an SSH key SYNOPSYS sshpk-verify -i KEYPATH -s SIGNATURE [OPTION…] DESCRIPTION Takes in arbitrary bytes and a Base64-encoded signature, and verifies that the signature was produced by the private half of the given SSH public key. EXAMPLES $ printf ‘foo’ | sshpk-verify -i ~/.ssh/id_ecdsa -s MEUCIQCYp……
NAME sshpk-sign – sign data using an SSH key SYNOPSYS sshpk-sign -i KEYPATH [OPTION…] DESCRIPTION Takes in arbitrary bytes, and signs them using an SSH private key. The key can be of any type or format supported by the sshpk library, including the standard OpenSSH formats, as well as PEM PKCS#1 and PKCS#8. The signature…
NAME sshpk-conv – convert between key formats SYNOPSYS sshpk-conv -t FORMAT [FILENAME] [OPTIONS…] sshpk-conv -i [FILENAME] [OPTIONS…] DESCRIPTION Reads in a public or private key and converts it between different formats, particularly formats used in the SSH protocol and the well-known PEM PKCS#1/7 formats. In the second form, with the -i option given, identifies a…
NAME sshpass – noninteractive ssh password provider SYNOPSIS sshpass [-ffilename|-dnum|-ppassword|-e] [options] command arguments DESCRIPTION This manual page documents the sshpass command. sshpass is a utility designed for running ssh using the mode referred to as "keyboard-interactive" password authentication, but in non-interactive mode. ssh uses direct TTY access to make sure that the password is indeed…
NAME sshmenu – GNOME applet for connecting to hosts using SSH. DESCRIPTION The SSHMenu applet puts all your most frequently used SSH connections on a handy menu in your GNOME panel (see below for non-GNOME versions. Click on a host name to open a new gnome-terminal window with an ssh connection to the selected host….
NAME SSHFS – filesystem client based on ssh SYNOPSIS mounting sshfs [user@]host:[dir] mountpoint [options] unmounting mountpoint DESCRIPTION SSHFS (Secure SHell FileSystem) is a file system for Linux (and other operating systems with a FUSE implementation, such as Mac OS X or FreeBSD) capable of operating on files on a remote computer using just a secure…
NAME sshfp – Generate SSHFP DNS records from knownhosts files or ssh-keyscan SYNTAX sshfp [-k <knownhosts_file>] [-d] [-a] [–type <algo>] [–digest <digest>] [<host1> [host2 …]] sshfp -s [-p <port>] [-d] [-a] [–type <algo>] [–digest <digest>] [-n <nameserver>] <domain1> [domain2] <host1> [host2 …] > DESCRIPTION sshfp generates RFC-4255 SSHFP DNS records based on the public keys…
NAME ssh2rpd – ROOT utility to help in authentication SYNOPSIS ssh2rpd arg1 arg2 DESCRIPTION Do know what to write here. OPTIONS –help Gives a short list of options available, and exit SEE ALSO root(1), rootd(1) See also the ROOT webpages: http://root.cern.ch ORIGINAL AUTHORS The ROOT team (see web page above): Rene Brun and Fons Rademakers…
NAME ssh-keyscan – gather SSH public keys from servers SYNOPSIS ssh-keyscan [-46cDHv [-f file ] ] [-p port ] [-T timeout ] [-t type ] [host | addrlist namelist ] DESCRIPTION ssh-keyscan is a utility for gathering the public SSH host keys of a number of hosts. It was designed to aid in building and…
NAME ssh-keygen – OpenSSH authentication key utility SYNOPSIS ssh-keygen [-q ] [-a rounds ] [-b bits ] [-C comment ] [-f output_keyfile ] [-m format ] [-N new_passphrase ] [-O option ] [-t dsa | ecdsa | ecdsa-sk | ed25519 | ed25519-sk | rsa ] [-w provider ] [-Z cipher ] ssh-keygen –p [-a rounds…
NAME ssh-import-id – retrieve one or more public keys from a public keyserver and append them to the current user’s authorized_keys file (or some other specified file) SYNOPSIS ssh-import-id [options] USER_ID_1 [gh:USER_ID_2] … [lp:USER_ID_n] ssh-import-id-lp USER_ID_1 [USER_ID_2] … [USER_ID_n] ssh-import-id-gh USER_ID_1 [USER_ID_2] … [USER_ID_n] OPTIONS -h | –help usage -o | –output F write output to file ‘F’ (default ~/.ssh/authorized_keys,…
NAME ssh-import-id – retrieve one or more public keys from a public keyserver and append them to the current user’s authorized_keys file (or some other specified file) SYNOPSIS ssh-import-id [options] USER_ID_1 [gh:USER_ID_2] … [lp:USER_ID_n] ssh-import-id-lp USER_ID_1 [USER_ID_2] … [USER_ID_n] ssh-import-id-gh USER_ID_1 [USER_ID_2] … [USER_ID_n] OPTIONS -h | –help usage -o | –output F write output to file ‘F’ (default ~/.ssh/authorized_keys,…
NAME ssh-import-id – retrieve one or more public keys from a public keyserver and append them to the current user’s authorized_keys file (or some other specified file) SYNOPSIS ssh-import-id [options] USER_ID_1 [gh:USER_ID_2] … [lp:USER_ID_n] ssh-import-id-lp USER_ID_1 [USER_ID_2] … [USER_ID_n] ssh-import-id-gh USER_ID_1 [USER_ID_2] … [USER_ID_n] OPTIONS -h | –help usage -o | –output F write output to file ‘F’ (default ~/.ssh/authorized_keys,…
NAME ssh-copy-id – use locally available keys to authorise logins on a remote machine SYNOPSIS ssh-copy-id [-f ] [-n ] [-s ] [-i [identity_file ] ] [-p port ] [-o ssh_option ] [user @ hostname ] ssh-copy-id –h | – DESCRIPTION ssh-copy-id is a script that uses ssh(1) to log into a remote machine (presumably…