ssh-based (SOCKS5) password proxy
I'd like to share to a friend an access to the intranet of a place because he forgot his password. I was thinking to use on a server of mine ssh -D '*:1080' me@intranet.com, and then let my friend connect to my server on port 1080 to forward him to the intranet. However I'm affraid to let the door open to some crazy bots. That's why I'd like to add a password, but it appears that ssh does not support SOCKS5 passwords…
I tried to see if netcat or nginx could help me by adding an intermediate step between my friend and ssh but for now I found no easy solution as netcat does not support SOCKS5 password server mode either…
Note that I'd like a "secure" solution if possible that does not send the password in cleartext, and also I don't want to install anything on intranet's side.
Any idea?
Thanks!
proxy passwords openssh socks5
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
add a comment |
I'd like to share to a friend an access to the intranet of a place because he forgot his password. I was thinking to use on a server of mine ssh -D '*:1080' me@intranet.com, and then let my friend connect to my server on port 1080 to forward him to the intranet. However I'm affraid to let the door open to some crazy bots. That's why I'd like to add a password, but it appears that ssh does not support SOCKS5 passwords…
I tried to see if netcat or nginx could help me by adding an intermediate step between my friend and ssh but for now I found no easy solution as netcat does not support SOCKS5 password server mode either…
Note that I'd like a "secure" solution if possible that does not send the password in cleartext, and also I don't want to install anything on intranet's side.
Any idea?
Thanks!
proxy passwords openssh socks5
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
@KamilMaciorowski No, this script runs on the server, because I don't have access to my friend's computer. So my friend would connect to my server on port 1080, and then he is forwarded to the intranet.
– tobiasBora
Jan 28 at 22:30
I tried to clarify a bit, thanks @KamilMaciorowski
– tobiasBora
Jan 28 at 22:48
add a comment |
I'd like to share to a friend an access to the intranet of a place because he forgot his password. I was thinking to use on a server of mine ssh -D '*:1080' me@intranet.com, and then let my friend connect to my server on port 1080 to forward him to the intranet. However I'm affraid to let the door open to some crazy bots. That's why I'd like to add a password, but it appears that ssh does not support SOCKS5 passwords…
I tried to see if netcat or nginx could help me by adding an intermediate step between my friend and ssh but for now I found no easy solution as netcat does not support SOCKS5 password server mode either…
Note that I'd like a "secure" solution if possible that does not send the password in cleartext, and also I don't want to install anything on intranet's side.
Any idea?
Thanks!
proxy passwords openssh socks5
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
I'd like to share to a friend an access to the intranet of a place because he forgot his password. I was thinking to use on a server of mine ssh -D '*:1080' me@intranet.com, and then let my friend connect to my server on port 1080 to forward him to the intranet. However I'm affraid to let the door open to some crazy bots. That's why I'd like to add a password, but it appears that ssh does not support SOCKS5 passwords…
I tried to see if netcat or nginx could help me by adding an intermediate step between my friend and ssh but for now I found no easy solution as netcat does not support SOCKS5 password server mode either…
Note that I'd like a "secure" solution if possible that does not send the password in cleartext, and also I don't want to install anything on intranet's side.
Any idea?
Thanks!
proxy passwords openssh socks5
proxy passwords openssh socks5
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
edited Jan 28 at 22:48
tobiasBora
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
asked Jan 27 at 17:20
tobiasBoratobiasBora
1063
1063
@KamilMaciorowski No, this script runs on the server, because I don't have access to my friend's computer. So my friend would connect to my server on port 1080, and then he is forwarded to the intranet.
– tobiasBora
Jan 28 at 22:30
I tried to clarify a bit, thanks @KamilMaciorowski
– tobiasBora
Jan 28 at 22:48
add a comment |
@KamilMaciorowski No, this script runs on the server, because I don't have access to my friend's computer. So my friend would connect to my server on port 1080, and then he is forwarded to the intranet.
– tobiasBora
Jan 28 at 22:30
I tried to clarify a bit, thanks @KamilMaciorowski
– tobiasBora
Jan 28 at 22:48
@KamilMaciorowski No, this script runs on the server, because I don't have access to my friend's computer. So my friend would connect to my server on port 1080, and then he is forwarded to the intranet.
– tobiasBora
Jan 28 at 22:30
@KamilMaciorowski No, this script runs on the server, because I don't have access to my friend's computer. So my friend would connect to my server on port 1080, and then he is forwarded to the intranet.
– tobiasBora
Jan 28 at 22:30
I tried to clarify a bit, thanks @KamilMaciorowski
– tobiasBora
Jan 28 at 22:48
I tried to clarify a bit, thanks @KamilMaciorowski
– tobiasBora
Jan 28 at 22:48
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1398980%2fssh-based-socks5-password-proxy%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1398980%2fssh-based-socks5-password-proxy%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
@KamilMaciorowski No, this script runs on the server, because I don't have access to my friend's computer. So my friend would connect to my server on port 1080, and then he is forwarded to the intranet.
– tobiasBora
Jan 28 at 22:30
I tried to clarify a bit, thanks @KamilMaciorowski
– tobiasBora
Jan 28 at 22:48