Viewing profile — Nullence

With copy.fail going around turning off extra surface area like the whole AF_ALG kernel module could be useful, this tool generates a list of pids and their fds that have a running…

While I like the layout and having a good UI for managing virtual machines this project lacks any security features at all. Most notably, if you just set the auth cookie to "authen…

Howdy folk! After showing off my most recent project (Wag) I thought I'd pop reverse ssh (or RSSH) up here as well. I've been tinkering with RSSH for 3 or so years. Starting with t…

Thanks! It's been a bit of a labor of love for quite a while, these are the big three but there are a bunch of other little things. Like the time I had to optimise map insertion be…

Haha, me and a friend were both looking at the windows eBPF project and wondering if it might work. Im not really looking to support windows, but if someone comes to me and tells m…

Probably then is how you do TLS, i.e do you give your service a wildcard cert to capture any 443 traffic. Then how do you do that for things like ssh, or other non-http based proto…

Ironically I've also been thinking about this on and off for a bit, as it is definitely one of the pain points of using Wag at the moment. My only problem is that if you capture th…

Oh wag doesnt use username and password auth by default. Those are only available in the OIDC integration or if you use PAM auth.

Similar in terms of it uses wireguard definitely! I havent made a direct comparison in the documentation as it's not something I'm currently going toward. This project suits my nee…

Welp, I have no idea if anyone will read this as its been a little while since it was put up and is in a flagged comment, but hey I'll do a lil explanation of some of the issues I …

Ah the readme is definitely more geared to "how can I use this" rather than "how does this work. Primarily because I want people to have a reasonably good time setting it up, rathe…

Man Deguard definitely looks slick and the UI looks really nice! I'd be super interested to know how they track "session state" as their do seem to rely very heavily on adding prox…

I do plan on supporting IPv6 sometime soon, and doing something along the lines of mapping folks IPv4 addresses into private IPv6 space to reduce the risk of clashing with a users …

Yep! I do indeed have protections against bruteforcing TOTP codes, effectively each authentication has a number of "attempts" a user can make before their account gets locked, and …

Im not entirely sure what you mean by "eternal session keys" in the context of wag specifically. While the wireguard key effectively gives you the ability to talk to the wag server…

Howdy! Kind of forgot that I put this up, the registration url can also take an optional pubkey parameter, so you dont have to rely on the server generating the private key for you…

Howdy folk, I've been building this project as both a side project and my job for a little while now. The rationale behind it is while wireguard is a fantastic protocol cryptograph…