
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
Interactive SSH tunnel management. Console UI powered by ncurses.
gem install ssh_tunnels
ssh_tunnels -c config.yml
Alternatively, default to using ~/.ssh_tunnels.yml
for configuration:
ssh_tunnels
There are two ways to configure an SSH gateway. Both can be used together, but at least one must be defined:
default_gateway
section in your configuration file.gateways
section in your conifguration file.The default_gateway
is a map containing these keys:
host
: hostname or IP address of gateway (required).port
: SSH port on gateway (default: 22
).user
: Username on gateway to connect with (default: $USER
).The gateways
section is also a map, but each key represents a named gateway, and each gateway is configured using the same parameters as default_gateway
.
Each named gateway can be referred to in the gateway
field for each tunnel.
# config.yml
default_gateway:
host: gateway.example.com
gateways:
aws:
host: 111.111.111.111
user: ubuntu
azure:
host: 222.222.222.222
user: william
The tunnels
section is a map where each key represents a named tunnel. Each tunnel can be configured using the following parameters:
host
: The remote host to connect to from the gateway.remote
: The remote port to use for forwarding.local
: The local port to bind to (defaults to the remote
port).# config.yml
default_gateway:
host: gateway.example.com
gateways:
aws:
host: 111.111.111.111
user: ubuntu
tunnels:
my_host:
local: 1234
host: my.host.example.com
remote: 4567
other_host:
gateway: aws
local: 1111
host: other.host.example.com
remote: 5555
Pull requests are welcome.
The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that ssh_tunnels demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.