Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/bit4bit/remoton
DEV STAGE
(Go) Own secure remote desktop multi-platform, own platform for sharing your desktop with software libre
Remoton desktop it's proof concept of Remoton Library
Commands
remoton-server-cert
generate certificates for secure connectionsremoton-server
handle connections between clients and supportsremoton-client-desktop
GUI version for sharing desktopremoton-support-desktop
GUI version for handling remote desktopEmail me bit4bit@riseup.net
What ever you like
See Releases
Please check at Releases
Install Go 1.4+ and
go get -u github.com/bit4bit/remoton/cmd/remoton-server
go install github.com/bit4bit/remoton/cmd/remoton-server
go get -u github.com/bit4bit/remoton/cmd/remoton-server-cert
go install github.com/bit4bit/remoton/cmd/remoton-server-cert
go get -u github.com/bit4bit/remoton/cmd/remoton-client-desktop
go install github.com/bit4bit/remoton/cmd/remoton-client-desktop
go get -u github.com/bit4bit/remoton/cmd/remoton-support-desktop
go install github.com/bit4bit/remoton/cmd/remoton-support-desktop
Before start, generate the self-signed certificate and key for server and clients. Just run:
~$ remoton-server-cert -host="myipserver.org"
copy cert.pem and key.pem to restricted folder, cert.pem will be shared with terminals -client/support-.
Start a server example: 192.168.57.11
~$ remoton-server -listen="192.168.57.11:9934" -cert "path/cert.pem" -key="path/key.pem"-auth-token="public"
Transfer cert.pem their users.
Now you can connect -terminal- a client (share desktop) or support (connect to shared desktop) we can use the GUI version, just run remoton-client-desktop or remoton-support-desktop
The will need the cert.pem for connect to server.
Remoton it's a library for building programmatically tunnels. See Doc
You can listen inbound connections on remoton server
import "github.com/bit4bit/remoton"
....
rclient := remoton.Client{Prefix: "/remoton", TLSConfig: &tls.Config{
InsecureSkipVerify: true,
}}
session, err := rclient.NewSession("https://miserver.com:9934", "public")
if err != nil {
log.Fatal(err)
}
defer session.Destroy()
//now can create a listener for every service you want
//example
listener := session.Listen("chat")
go func(){
for {
conn, err := listener.Accept()
//now you use conn -net.Conn-
}
}()
listener = session.Listen("rpc")
//or use it example RPC
srvRpc := rpc.NewServer()
srvRpc.Register(&Api)
go srvRpc.Accept(listener)
You can dial a active session.
import "github.com/bit4bit/remoton"
rclient := remoton.Client{Prefix: "/remoton", TLSConfig: &tls.Config{
InsecureSkipVerify: true,
}}
session := &remoton.SessionClient{Client: rclient,
ID: "misessionid", AuthToken: "mitoken",
APIURL: "https://miserver.com:9934"}
//now you can dial any service
conn, err := session.Dial("chat")
//use conn -net.Conn-
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.