rsrdesarrollo / sasshimi

SSH Tunnelling in "RAW mode", via STDIN/OUT without using forwarding channels

Emulate ssh -D behavior even if AllowTcpForwarding is disabled by administrator in sshd_config. This tool creates the tunnel sending serialized data through STDIN to a remote process (which is running a Socks5 Server) and receiving the response trought STDOUT on a normal SSH session channel.

Authors

• Raúl Sampedro - @rsrdesarrollo - Initial Work

Getting Started

These instructions will get you a copy of the project up and running on your local machine for development and testing purposes.

Prerequisites

You only need golang (>=1.10) to build this tool.

Installing

Just install the command line tool

go install github.com/rsrdesarrollo/SaSSHimi@latest

Usage

Just run it as a normal ssh client

SaSSHimi server user@localhost

You can fing more help using --help

$ SaSSHimi server --help

Run local server to create tunnels

Usage:
  SaSSHimi server <user@host:port|host_id> [flags]

Flags:
      --bind string                Help message for toggle (default "127.0.0.1:1080")
  -h, --help                       help for server
  -i, --identity_file string       Path to private key
      --remote_executable string   Path to SaSSHimi to run on remote machine

Global Flags:
      --config string   config file (default is $HOME/.SaSSHimi.yaml)
  -v, --verbose count   verbose level

Configuration File

Like SSH, SaSSHimi has a configuration file where you can set some basic config for your most common hosts. You can find a sample of the syntax of this file in config_sample.yml.

By default SaSSHimi try to find this config file at ~/.SaSSHimi.yaml. You can change this behaviour by using the --config flag.

ONLY USE PASSWORDS IN THE CONFIG AT YOUR OWN RISK

TODO

• Support Public key authentication.
• Support Enc Private Keys.
• Improve configuration file.
• Add more command options to control binding ports.
• Implement known_hosts support

Contributing

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to this project.

Versioning

We use SemVer for versioning. For the versions available, see the tags on this repository.

License

This project is licensed under the Apache License Version 2.0- see the LICENSE file for details

Acknowledgments

• @maramarillophotography for such an amazing logo ;)

sasshimi's Issues

Add Support for Multifactor

Currently, if you try to connect to a system with some form of multifactor (e.g. Duo, Google Auth, etc) the server freezes after sending credentials. Is a fix for this something that could be easily implemented?

I guess this is variable based on the system you're logging into. Is it possible to just have SaSSHimi just display stdout and send stdin like it would if you were sshing into a shell, and then drop back to normal operation after it detects you've logged in?

error

go version go1.16.5

go get github.com/rsrdesarrollo/SaSSHimi

github.com/rsrdesarrollo/SaSSHimi/server

../../.go/pkg/mod/github.com/rsrdesarrollo/[email protected]/server/server.go:244:57: undefined: unix.TCGETS
../../.go/pkg/mod/github.com/rsrdesarrollo/[email protected]/server/server.go:246:44: undefined: unix.TCGETS