Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/bvisonl/tunnel-radar
🚧 Under development 🚧
A tool to manage your SSH tunnels
Go
if you want to build the project from source (otherwise download one of the releases)# Download from the repository
$ git clone https://github.com/bvisonl/tunnel-radar.git
$ cd tunnel-radar
$ go build -o tunnel-radar
You should see a tunnel-radar
binary inside the folder
If you want the service to be registered as a service:
$ cp tunnel-radar.service /lib/system/systemd/tunnel-radar.service
$ systemctl daemon reload
Make sure to edit the tunnel-radar.service
to specify the correct path to the configuration file. By default, it looks for it in /etc/tunnel-radar/config.yml
You should see a tunnel-radar
binary inside the folder
tunnel-radar
feeds its configuration from a YAML file that. This is a full sample configuration:
tunnels:
serverA:
cliServerHost: "127.0.0.1"
cliServerPort: 7779
disabled: false # if true, this tunnel will have to be manually enabled
source: "0.0.0.0:6000"
remote: "127.0.0.1:6001"
destination: "whoami:80"
auth:
user: "root"
password: "root"
# Either password or key are required
# key: "/root/.ssh/id_rsa"
tunnel-radar
exposes some flags:
tunnel-radar
's CLI to communicate with the servicehost
to connect to when using CLI (defaults to 127.0.0.1)port
to connect to when using CLI (defaults to 7779)On Linux:
$ ./tunnel-radar -d -c config.yml
On Windows:
$ tunnel-radar.exe -d -c config.yml
You should see something like:
If so the service is ready to accept connections on the different enabled tunnels.
In order to run the cli
to manage the tunnels you can use the same binary with the flags specified above:
$ ./tunnel-radar -d -i -ih 127.0.0.1 -ip 7779
The prompt of the CLI will show up and then you can start communicating with the service like:
As of right now these are the available commands:
TBD.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.