Web based SSH Puns

I'm looking for a web based front end that can let me SSH inside a web browser, as well as RDP.

Just wondering if anyone has thought about adding Xterm.js to the web interface so if you need to ssh in you don't need anything extra to do it. Xterm.js is used by ProxMox, Portainer, and many others and it is open source.

https://xtermjs.org/

Hi Reddit,

I have some services running behind a Vouch proxy. I would like to be able to use a web-based terminal to access the box.

Security is done using Vouch, so I just need a web-based terminal.

I prefer applications made in Go.

Anyone come across something similar to Shell NGN, a web-based SSH client? I use MobaXterm on Windows, which is excellent, but I'd prefer to use something I can access from anywhere.

EDIT: Thanks for all the answers so far. To be clear, I'm looking for a client, with multiple host capability, not session sharing and definitely not remote desktop. Please have a look at the client I linked to understand the requirements.

There are times when I need to manage some of my machines while I'm away from home and I don't have my personal laptop on hand or my VPN file to connect to my server. I would like a secure way to connect to my server maybe a webshell or web based SSH would be appropriate? Recommends for a web based SSH?

I've heard about Shellinabox, but have yet to try it.

Do you guys have any thoughts ? I am just wondering what sort of usecases there are.

Would it be useful if you are able to create a unique url of the SSH session to share with friends ?

What's a good way of protecting a management network? (This would provide access to things like server iLO/iDRAC, as well as SSH access to switches (e.g. Arista, Cisco, Juniper etc.), and SSH access to routers (pfSense, VyOS)

Ideally we'd want things like auditing access, logging of commands, role-based ACLs, possibly 2FA integration etc.

Some of those services are command-line based (SSH), but others are website-based (iLO/iDRAC).

I saw this pre-packaged Docker container with a bastion box setup here:

https://github.com/cloudposse/bastion

There's also Gravitational's Teleport, which is meant to be pretty good - however, that seems to be SSH only, and for Linux only (not sure how it'd work with SSH into switches). It doesn't seem like it'd cover accessing web-based iLO/iDRAC consoles.

And Netflix's Bless (https://github.com/Netflix/bless) but SSH only

Are there other bastion-type projects, or services that people recommend?

Hi, I saw this reddit post which precisely describes my problem. I cannot use ssh or the web UI but if I ping my machine just once with

ping -c 1 192.168.1.20

ssh and the web UI start working for a few minutes; then the same problem again. Here's the tcpdump when the services are not reachable:

11:47:43.060004 IP 192.168.1.122.47842 > 192.168.1.20.8006: Flags [S], seq 1334214748, win 64240, options [mss 1460,sackOK,TS val 2141245646 ecr 0,nop,wscale 7], length 0
11:47:43.060137 IP 192.168.1.20.8006 > 192.168.1.122.47842: Flags [S.], seq 3135261566, ack 1334214749, win 65160, options [mss 1460,sackOK,TS val 3651874356 ecr 2141245646,nop,wscale 7], length 0
11:47:43.308351 IP 192.168.1.122.47844 > 192.168.1.20.8006: Flags [S], seq 1220713825, win 64240, options [mss 1460,sackOK,TS val 2141245897 ecr 0,nop,wscale 7], length 0
11:47:43.308375 IP 192.168.1.20.8006 > 192.168.1.122.47844: Flags [S.], seq 1288613813, ack 1220713826, win 65160, options [mss 1460,sackOK,TS val 3651874604 ecr 2141245897,nop,wscale 7], length 0
11:47:44.075905 IP 192.168.1.122.47842 > 192.168.1.20.8006: Flags [S], seq 1334214748, win 64240, options [mss 1460,sackOK,TS val 2141246662 ecr 0,nop,wscale 7], length 0
11:47:44.075932 IP 192.168.1.20.8006 > 192.168.1.122.47842: Flags [S.], seq 3135261566, ack 1334214749, win 65160, options [mss 1460,sackOK,TS val 3651875372 ecr 2141245646,nop,wscale 7], length 0

So it seems to me the proxmox box (192.168.1.20) is sending an SYN-ACK to my machine (192.168.1.122) but it is never sends the ACK back to the proxmox server to complete the TCP connection establishing phase. Here's the tcpdump after a short ping:

12:08:29.245928 IP 192.168.1.122.47850 > 192.168.1.20.8006: Flags [S], seq 1977059420, win 64240, options [mss 1460,sackOK,TS val 2142491801 ecr 0,nop,wscale 7], length 0
12:08:29.245961 IP 192.168.1.20.8006 > 192.168.1.122.47850: Flags [S.], seq 3577059704, ack 1977059421, win 65160, options [mss 1460,sackOK,TS val 3653120542 ecr 2142491801,nop,wscale 7], length 0
12:08:29.246920 IP 192.168.1.122.47850 > 192.168.1.20.8006: Flags [.], ack 1, win 502, options [nop,nop,TS val 2142491807 ecr 3653120542], length 0
12:08:29.248501 IP 192.168.1.122.47850 > 192.168.1.20.8006: Flags [P.], seq 1:606, ack 1, win 502, options [nop,nop,TS val 214249

So to harden my Debian 8 based server, I was following this tutorial.

After I generated the SSH key via (with my email instead)

cd ~/.ssh
ssh-keygen -t rsa -b 4096 -C "your_email_here"

I tried to add the public key to my server via (with my server IP instead)

ssh-copy-id -i ~/.ssh/id_rsa.pub 144.76.225.175

However, to do that, it asked me for my password, which at this point wasn't working anymore? (I disabled rootlogin in /etc/ssh/sshd_config as described before).

At this point I am logged out and can't figure out how to login as root again. I saved the generated key fingerprint and its randomart image.

What is my server asking actually asking for, when it is asking for my root password now?

Thank you!

Hi all,

Im using OMV6 and was really happy until today it suddenly stopped working.
The last change i made was combining some shares with MergerFS. This was working perfect until i got to the last stage that i wanted to move my server into a closet (because of the noise).

I used the exact same ethernet cable but a different power supply. But since then i cant access the server via SSH or web Gui. I connected the server again to a monitor and the same power supply to see if i got some errors but everything looks the same as it was in working order.

I do however get a response when I ping the server but the response is some weird ipv6 address:

ping schurk.local

Pinging schurk [fe80::225:64ff:feb4:39e6%34] with 32 bytes of data:

Reply from fe80::225:64ff:feb4:39e6%34: time=1ms
Reply from fe80::225:64ff:feb4:39e6%34: time=1ms
Reply from fe80::225:64ff:feb4:39e6%34: time=2ms
Reply from fe80::225:64ff:feb4:39e6%34: time=5ms

Ping statistics for fe80::225:64ff:feb4:39e6%34:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:
Minimum = 1ms, Maximum = 5ms, Average = 2ms

When I try to resolve this IP into a ipv4 I get an error:

ping -4 schurk.local
Ping request could not find host schurk.local. Please check the name and try again.

Is there a way i can run the omv-firstaid command because i can't seem to find a way to do that. Already accessed the Grub terminal but the command does not work there. Also tried with booting the installation ISO but there's no option to run first aid.

Would be really nice if i could fix this without having to reinstall everything because i just spend a sh*t load of hours configuring my music collection in Plex. :s

Let me know if maybe there's an other way to look at this problem.

Thanks!

Hi, I was wondering if anyone can help me troubleshoot an issue I am having with the web-based SSH in Lightsail. I have an instance with Plesk installed and a couple months ago I upgraded the OS to Ubuntu 18.04. After the upgrade, the SSH client on the Lightsail site stopped working. It connects and disconnects immediately and does not display an error. I am able to connect using an SSH client on my phone and computer. Could someone help me find the logs that might indicate what is causing this. I am pretty new to managing a server and just using it to host some hobby software, so I am not that familiar with how to troubleshoot this. Thanks!

See teaser trailer here: https://youtu.be/JfIbKKfjihA

Maybe an easy fix, but it's over my head right now.

I lost power yesterday due to some storms. I have 2 raspberry pi's running on PoE, 1 with the proper raspberry pi PoE adapter and the other with a generic PoE adapter. Both are connected to my TP Link T2600G switch.

I will use the last 3 of the IP to clarify each.

• 185 – primary pi-hole – generic PoE adapter – 3 years old – w/ unbound @ 127.0.0.1
• 183 – secondary pi-hole – official PoE adapter – <6 months old – w/ unbound @ 127.0.0.2

185 and 183 both powered on when power returned, however, 183 was making a high pitch “hissing” noise which I determined was coming from the PoE adapter. It also would not boot the pi OS. I swapped with a new SD running pi OS, still no boot. I removed the adapter and used generic, still no boot.

Got it, figure this Pi is dead thanks to a loss in power and buying another new one is going to take forever with current stocks.

My issue is this. I can connect to 185 via SSH no problems. I ran pihole -up to even check for updates and all was well, but I cannot connect to it via browser when I type the IP/admin. I receive “unable to connect”.

Am I missing something on why I can’t access the web GUI for 185?

Any help is appreciated. It may be something simple and I am just overthinking it.

debug token for 185 is; https://tricorder.pi-hole.net/Fyp5bvQq/

Thanks

Something like http://www.serfish.com/console/ but actually free without having to deal with a captcha every 30 secs.

Remote connections to ssh, vnc, web server, or any service running on your Pi as easy as one click!

1. Download the remoteit app to your computer (Downloads)

2. Install remoteit on your Pi with a single command (How-to Documentation)

3. Use the r3 pulldown menu in the Menu Bar to launch your remote connections (see example in video)

Access remote connections to services on your Pi from the r3 pulldown menu with one click

hi I want to provide a ssh access through an html page.

what is the best way ?

FYI My app use angularjs.

Hi everyone,

I set up Wireguard and it seems to be working as I can SSH into my machines when connected via Wireguard. Unfortunately I cant call any web services, e.g. accessing my NAS via IP in the browser etc.

When using LTE everything works fine but from a remote network (which has not the same subnet) anything thats called via the browser is not working. But even traceroutes show the correct trace to the e.g. NAS IP.

[Interface]
PrivateKey = xx
Address = 10.6.0.4/24
DNS = 192.168.0.1, 1.1.1.1
MTU = 1420

[Peer]
PublicKey = xx
PresharedKey = xx
AllowedIPs = 192.168.0.0/24
Endpoint = xx:51820

Any idea?

So to harden my Debian 8 based server, I was following this tutorial.

After I generated the SSH key via (with my email instead)

cd ~/.ssh
ssh-keygen -t rsa -b 4096 -C "your_email_here"

I tried to add the public key to my server via (with my server IP instead)

ssh-copy-id -i ~/.ssh/id_rsa.pub 144.76.225.175

However, to do that, it asked me for my password, which at this point wasn't working anymore? (I disabled rootlogin in /etc/ssh/sshd_config as described before).

At this point I am logged out and can't figure out how to login as root again. I saved the generated key fingerprint and its randomart image.

What is my server asking actually asking for, when it is asking for my root password now?

Thank you!