Bypassing Authentication on SSH Bastion Hosts

Re:Bypassing Authentication on SSH Bastion Hosts by theamk on Tuesday November 12, 2019 @01:44PM (#21516790)

Are there really ssh bastions which allow arbitrary command execution? This seems dangerous.

Limiting remote commands to port forwarding only will severely hamper this kind of attack, and will prevent ForwardAgent hacks as well.

[ Parent | on HN ]

Re:Bypassing Authentication on SSH Bastion Hosts by steventhedev on Tuesday November 12, 2019 @02:49PM (#21517417)

Even if you disallow command execution on the bastion (good idea), this will still allow an attacker to pivot to servers behind the bastion. The whole point being that the strong auth (e.g. MFA) enforced by the bastion is a roadblock to pivoting.

[ Parent | on HN ]

Re:Bypassing Authentication on SSH Bastion Hosts by hackcasual on Tuesday November 12, 2019 @02:23PM (#21517186)

SSH bastions fall victim to feature creep like a lot of products

[ Parent | on HN ]