Hack The Sec-Leading Resource Of Linux Tutorial: Openssh

How to Deny/Allow Access for Users & Groups in OpenSSH

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #990000;"><u><i>Deny/Allow Access for Users & Groups in OpenSSH</i></u></span></h2>
<div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">For security purposes many times we required to restrict or allow for SSH access for specific Users or Groups. To make any changes edit <b>OpenSSH </b>configuration file <span style="color: red;">/etc/ssh/sshd_config</span> and do required changes for allowing or denying any user or group.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://2.bp.blogspot.com/-E5QiYPjRozA/Vrdxl30cZiI/AAAAAAAAATY/oDt4-l2Vrr0/s1600/OpenSSH-Server-www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="175" src="https://2.bp.blogspot.com/-E5QiYPjRozA/Vrdxl30cZiI/AAAAAAAAATY/oDt4-l2Vrr0/s320/OpenSSH-Server-www.hackthesec.co.in.jpg" width="320" /></a></div>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Allow/Deny Users and Groups:</span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">To allow or deny any user or group on OpenSSH, first edit configuration file<span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: red;">/etc/ssh/sshd_config</span></span> in your favorite editor and do changes as following examples.</span></div>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;"><u><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #0b5394;">1. Deny Users:</span></span> </u>To restrict for block specific user for SSH on server add the following rules. For example to restrict users raj, john and sarah.</span></div>
<pre class="pretty" style="background: none 0px 0px repeat scroll rgb(240, 240, 240); border-left-color: rgb(116, 183, 63); border-left-width: 3px; border-radius: 5px; border-style: none none none solid; line-height: 1.5em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 8px 20px 8px 18px; vertical-align: baseline;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><orange><span style="color: #990000;">DenyUsers</span></orange>  raj  john  sarah
</span></pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #0b5394;"><u>2. Deny Groups:</u></span></span> In place of restricting specific users we can also restrict groups in OpenSSH. For example to restrict support and marketing groups from ssh add following rules.</span></div>
<pre class="pretty" style="background: none 0px 0px repeat scroll rgb(240, 240, 240); border-left-color: rgb(116, 183, 63); border-left-width: 3px; border-radius: 5px; border-style: none none none solid; line-height: 1.5em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 8px 20px 8px 18px; vertical-align: baseline;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><span style="color: #990000;"><orange>DenyGroups</orange>  </span>support  marketing</span><span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #0b5394;"><u>3. Allow Users:</u></span></span> By default all users are allowed to login to OpenSSH server. But we can specifically allow any user, For example hackthesec and linuxos belongs to support group and we already have restricted that group members. So we can specify that users in Allow users to allow them specifically.</span></div>
<pre class="pretty" style="background: none 0px 0px repeat scroll rgb(240, 240, 240); border-left-color: rgb(116, 183, 63); border-left-width: 3px; border-radius: 5px; border-style: none none none solid; line-height: 1.5em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 8px 20px 8px 18px; vertical-align: baseline;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><span style="color: #990000;"><orange>AllowUsers</orange>  </span>hackthesec  linuxos
</span></pre>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;"><span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #0b5394;"><u>4. Allow Groups:</u></span></span> Similarly we can allow all the members of specific group which may be denied in any other group. For example user andrew and peter belongs to marketing group as well as admin group. So we can allow access to both users by allowing admin group.</span></div>
<pre class="pretty" style="background: none 0px 0px repeat scroll rgb(240, 240, 240); border-left-color: rgb(116, 183, 63); border-left-width: 3px; border-radius: 5px; border-style: none none none solid; line-height: 1.5em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 8px 20px 8px 18px; vertical-align: baseline;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><span style="color: #990000;"><orange>AllowGroups</orange>  </span>admin
</span></pre>
<h2 class="heading1" style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;"><u>Restart OpenSSH:</u></span></h2>
<div style="background-color: white; border: 0px; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: Georgia, Times New Roman, serif;">After doing any changes in configuration file, make sure to restart <b>OpenSSH </b>service as following.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"><span style="font-family: Courier New, Courier, monospace; font-size: large;"><span style="color: white;"># service </span><span style="color: lime;">sshd restart</span><span style="color: white;">
or
</span><span style="color: lime;"># systemd restart sshd</span></span></pre>
</div>
</div>

How to Deny/Allow Access for Users & Groups in OpenSSH

Deny/Allow Access for Users & Groups in OpenSSH For security purposes many times we required to restrict or allow for SSH access fo...

SysAid Help Desk 'rdslogs' Arbitrary File Upload

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="l-submain for_pagehead size_large" style="background: rgb(255, 255, 255); border: 0px rgb(232, 232, 232); box-shadow: rgba(0, 0, 0, 0.0784314) 0px -2px 0px -1px inset; box-sizing: border-box; color: #666666; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin: 0px auto; outline: 0px; padding: 90px 40px 0px; position: relative; vertical-align: baseline;">
<div class="l-submain-h g-html i-cf" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px auto; max-width: 1140px; outline: 0px; padding: 50px 0px; position: relative; vertical-align: baseline; z-index: 1;">
<div class="w-pagehead" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; text-align: center; vertical-align: baseline;">
<h1 style="background: transparent; border: 0px; box-sizing: border-box; color: #555555; font-family: 'Noto Sans'; font-size: 38px; font-stretch: normal; font-weight: 300; line-height: 1.4; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
SysAid Help Desk 'rdslogs' Arbitrary File Upload</h1>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.ytimg.com/vi/k3YVjoqW82Q/maxresdefault.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="180" src="http://i.ytimg.com/vi/k3YVjoqW82Q/maxresdefault.jpg" width="320" /></a></div>
<div>
<br /></div>
</div>
</div>
</div>
<div class="l-submain wpb_row" style="background: rgb(255, 255, 255); border: 0px rgb(232, 232, 232); box-sizing: border-box; color: #666666; font-family: 'Open Sans'; font-size: 14px; line-height: 24px; margin: 0px auto; outline: 0px; padding: 0px 40px; position: relative; vertical-align: baseline;">
<div class="l-submain-h g-html i-cf" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px auto; max-width: 1140px; outline: 0px; padding: 50px 0px; position: relative; vertical-align: baseline; z-index: 1;">
<table class="exploit_list" style="background-attachment: initial; background-clip: initial; background-color: rgb(239, 239, 239) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 3px !important; border-spacing: 1px; border: 1px solid rgb(221, 221, 221) !important; box-sizing: border-box; color: #666666; font-size: 14px; line-height: 24px; margin: 10px 0px; outline: 0px; padding: 1px !important; vertical-align: baseline; width: 583px;"><tbody style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">EDB-ID:</strong> 37667</td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">CVE:</strong> <a class="external" href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2995" rel="nofollow" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;" target="_blank">2015-2995</a></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">OSVDB-ID:</strong> N/A</td></tr>
<tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Verified:</strong> <span class="fa fa-check-circle-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Author:</strong> <a href="https://www.exploit-db.com/author/?a=3211" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;">metasploit</a></td><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Published:</strong> 2015-07-21</td></tr>
<tr style="background-attachment: initial; background-clip: initial; background-color: rgb(248, 248, 248) !important; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><td style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Exploit:</strong> <a href="https://www.exploit-db.com/download/37667" style="background-color: transparent; box-sizing: border-box; color: #337ab7; text-decoration: none; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;"><span class="fa fa-file-code-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span> Source</a> <a href="https://www.blogger.com/null" style="background-color: transparent; box-sizing: border-box; color: #337ab7; transition: opacity 0.3s, padding 0.3s, color 0.3s, background-color 0.3s, box-shadow 0.3s, border 0.3s;"><span class="fa fa-file-o" style="background: transparent; border: 0px; box-sizing: border-box; display: inline-block; font-family: "fontawesome"; font-size: inherit; font-stretch: normal; line-height: 1; margin: 0px; outline: 0px; padding: 0px; transform: translate(0px , 0px); vertical-align: baseline;"></span> Raw</a></td><td colspan="2" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 5px 10px; vertical-align: top;"><strong style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Download Vulnerable App:</strong> N/A</td></tr>
</tbody></table>
<div class="bootstrap-wrapper" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div class="exploit-meta clearfix" style="background: transparent; border: 0px; box-sizing: border-box; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<div class="info" style="background: transparent; border: 0px; box-sizing: border-box; float: left; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
</div>
</div>
</div>
</div>
</div>

SysAid Help Desk 'rdslogs' Arbitrary File Upload

SysAid Help Desk 'rdslogs' Arbitrary File Upload EDB-ID: 37667 CVE: 2015-2995 OSVDB-ID: N/A Verified: Author:...