monlife: Putty
LightBlog

Hot

Post Top Ad

Showing posts with label Putty. Show all posts
Showing posts with label Putty. Show all posts

Tuesday, 24 October 2017

SSH CLIENT FOR WINDOWS - COMPARISON

October 24, 2017 0
SSH client is a program that allows establishing a secure and authenticated SSH connections to SSH servers.

WINDOWS SSH CLIENT OPTIONS

There are several other clients and servers available. These are generally not supported for SSH key management and may not have commercial support or 24x7 support available.
Tectia SSH is a commercially supported SSH client for enterprises, with 24x7 support. More information on Tectia SSH.
PuTTY is a free client for the SSH and telnet protocols. More information on PuTTY.
WinSCP is a free open source Windows client for file transfers. In addition to file transfer (with FTP, SFTP, or SCP protocols) WinSCP offers a basic file manager functionality and supports scripting. More information
FileZilla is a free file transfer client. More information on FileZilla.
Chrome SSH extension - The Google Chrome browser can be turned into an SSH client with an extension available in the Chrome Web Store. The Chrome SSH (beta) offers a basic SSH protocol capability.
SSH client extension to the Chrome-browser
Bitvise is a European software company that priovides an SSH client also for Windows. A copy of Bitvise SSH Client can be downloaded from: https://www.bitvise.com/ssh-client-download.
VanDyke Software offers their commercial client software for a free, time-limited evaluation. VanDyke SecureCRT and SecureFX clients supports telnet, Secure Shell (SSH), and SFTP. An evaluation copy can be downloaded from https://vandyke.com/download/index.html.
Read More
vào lúc No comments:
Nhãn:

PUTTY DOWNLOAD - FREE SSH & TELNET CLIENT

October 24, 2017 0

PuTTY is a popular SSH, Telnet, and SFTP client for Windows. It is typically used for remote access to server computers over a network using the SSH protocol. This is the download page.
For more information on PuTTY, see the PuTTY page. For information on SSH (Secure Shell), see the here. For information on Telnet, see here. For information on SFTP secure file transfers, see here.
Contents

DOWNLOAD PUTTY INSTALLATION PACKAGE FOR WINDOWS

BinaryPlatformSignatureDate
putty-0.70-installer.msiWindows (any)GPG signature2017-07-08
putty-64bit-0.70-installerWindows (64-bit)GPG signature2017-07-08

INSTALLATION AND SETUP INSTRUCTIONS

VERIFYING RELEASE SIGNATURES

The releases are signed with GPG, using the PuTTY release key.
To verify the signatures, you need the gpg tool. On Debian-based Linux, it can be installed with aptitude install gnupg. On Red Hat 7, it can be installed with yum install gnupg2.
To import the signature key into GPG, use:
gpg --import putty-release-2015.asc
To check the signature of a file, use:
gpg --verify <signaturefile> <datafile>
For example:
gpg --verify putty-64bit-0.69-installer.msi.gpg putty-64bit-0.69-installer.msi

PACKAGE CONTENTS: PUTTY.EXE, PUTTYGEN.EXE, PSFTP.EXE, PSCP.EXE, PAGENT.EXE

The installation package includes putty.exe, puttygen.exe, psftp.exe, pscp.exe, and pagent.exe.
putty.exe is the main executable for the terminal client. It can also be used standalone, without the installation package, by simply copying the executable to a USB stick and running it on a new machine. This way, the user can carry the executable with them. However, this should not be assumed to provide great security - malware on the machine where it is used can still compromise the software (cf. CIA hacking tool bothanspy) and viruses may get installed on the USB stick whenever it is inserted in a new machine.
puttygen.exe is can be used for generating SSH keys on Windows. See the separate puttygen page on how to create and set up SSH keys with it.

psftp.exe is an SFTP file transfer client. It only works on the command line, and does not support graphically dragging and dropping files between systems. See Tectia SSH if you'd like that functionality.
pscp.exe is a command line SCP client.
pagent.exe is an SSH agent for PuTTY. Keys are first created with puttygen.exe and can then be loaded into pagent for automating logins and for implementing single sign-on.

ALTERNATIVES

For other SSH clients and comparison, see the SSH clients page. Several more modern alternatives are available.

SERVER FOR WINDOWS OR OTHER PLATFORMS

You don't need to worry about a server if you are going to connect to a school or work server. However, if you are planning to use PuTTY to log into your own systems, then you may need to install and enable a server.
Most Linux and Unix systems come with OpenSSH preinstalled. On some distributions, you may need to install the server. On Debian-derived systems, the following will install the server:
sudo aptitude install openssh-server
On Red Hat systems, the following will install the server:
sudo yum install openssh-server
Depending on the system, you may also need to start the server if you don't want to reboot. The following should work on most systems:
sudo service sshd restart
For Windows, the Tectia SSH is a popular choice and comes with commercial support services. It also runs on IBM z/OS mainframes. Unix/Linux are available with support for business-critical applications.

SSH KEY MANAGEMENT NEEDS ATTENTION

SSH is often used with public key authentication to implement automation and single sign-on.
Public key authentication uses a new kind of access credential, the SSH key, for authentication. It is much more secure than traditional password authentication, especially compared to hard-coded passwords in scripts, but the keys need proper management.
Most organizations with more than a hundred servers have large numbers of SSH keys. Usually, these keys have not been properly managed and audited. An SSH risk assessment is recommended. Organizations should consider deploying key management software to establish proper provisioning, termination, and monitoring for key-based access.
Risks of unmanaged SSH keys include uncontrolled attack spread across the server infrstructure, including to disaster recovery data centers and backup systems. It could potentially destroy a Fortune 500 enterprise.
Organizations should also be aware of security risks related to SSH port forwarding. It is a technology that has many good uses, but it can also enable unfettered access across firewalls. Employees and attackers can leave tunnels back into the internal network from the public Internet. This particularly affects organizations using cloud computing services.
In addition to SSH, the PuTTY can be used as a telnet client. Telnet is insecure. Its use is not recommended.
The main problem with telnet is that it transmits all passwords and any transmitted data in the clear. Anyone with access to any computer on the same network can steal user names and passwords that are transmitted. Such password sniffing attacks were very common on the Internet already in the 1990s.
Telnet sessions can also be hijacked in the network. Attackers can inject their own commands into telnetsessions. Protection from such attacks was the main reason why Tatu Ylonen developed SSH as a replacement for telnet in the first place. Use of telnet has not been recommended for 20 years.

SFTP FILE TRANSFER SUPPORT

File transfer support is implemented as a separate program, PSFTP. It is available only as a command-line tool. There is no graphical user interface for file transfers.
SCP file transfers are supported via the PSCP program. This is also command-line only.
Modern implementations, such as Tectia SSH, have integrated file transers in the terminal client.

MASTER DOWNLOAD SITE

Simon Tatham publishes new PuTTY versions on his personal home page. The files are mirrored here at ssh.com. If you notice any issues or the version hasn't been updated properly, please drop an email to ylo at ssh.com. Please note that I do not provide support services for PuTTY. I merely maintain this mirror to have a single place for downloading popular SSH versions.

SCREENSHOTS

PUTTY TERMINAL WINDOW

PSFTP COMMAND LINE USE
Read More
vào lúc No comments:
Nhãn:

PUTTYGEN - KEY GENERATOR FOR PUTTY ON WINDOWS

October 24, 2017 0
PuTTYgen is an key generator tool for creating SSH keys for PuTTY. It is analogous to the ssh-keygen tool used in some other SSH implementations.
The basic function is to create public and private key pairs. PuTTY stores keys in its own format in .ppk files. However, the tool can also convert keys to and from other formats.
PuTTYgen.exe on Windows is a graphical tool. A command-line version is available for Linux.

Contents

PUTTYGEN DOWNLOAD AND INSTALL

PuTTYgen is normally installed as part of the normal PuTTY .msi package installation. There is no need for a separate PuTTYgen download. Download the PuTTY installation package. For detailed installation instructions, see PuTTY installation instructions.

RUNNING PUTTYGEN

Go to Windows Start menu → All Programs → PuTTY→ PuTTYgen.

PuTTYgen started

CREATING A NEW KEY PAIR FOR AUTHENTICATION

To create a new key pair, select the type of key to generate from the bottom of the screen (using SSH-2 RSA with 2048 bit key size is good for most people; another good well-known alternative is ECDSA).
Then click Generate, and start moving the mouse within the Window. Putty uses mouse movements to collect randomness. The exact way you are going to move your mouse cannot be predicted by an external attacker. You may need to move the mouse for some time, depending on the size of your key. As you move it, the green progress bar should advance.
Once the progress bar becomes full, the actual key generation computation takes place. This may take from several seconds to several minutes. When complete, the public key should appear in the Window. You can now specify a passphrase for the key.
You should save at least the private key by clicking Save private key. It may be advisable to also save the public key, though it can be later regenerated by loading the private key (by clicking Load).

PuTTYgen generating RSA SSH key

We strongly recommended using a passphrase be for private key files intended for interactive use. If keys are needed for automation (e.g., with WinSCP, then they may be left without a passphrase.

puttygen created key and asking for passphase to save private key

INSTALLING THE PUBLIC KEY AS AN AUTHORIZED KEY ON A SERVER

With both Tectia SSH and OpenSSH servers, access to an account is granted by adding the public key to a ~/.ssh/authorized_keys file on the server.
To install the public key, Log into the server, edit the authorized_keys file with your favorite editor, and cut-and-paste the public key output by the above command to the authorized_keys file. Save the file. Configure PuTTY to use your private key file (here keyfile.ppk). Then test if login works. See configuring public key authentication for PuTTY.

MANAGING SSH KEYS

In larger organizations, the number of SSH keys on servers and clients can easily grow to tens of thousands, in some cases to millions of keys. In large quantities, SSH keys can become a massive security risk and they can violate compliance requirements. In the worst case, they could be used to take down a Fortune 500.
The Universal SSH Key Manager can manage PuTTY keys in addition to OpenSSH and Tectia keys. It works with legacy keys on traditional servers as well as dynamic and keyless elastic environments in the cloud. Any larger organization should ensure they have proper provisioning and termination processes for SSH keys as part of their Identify and Access Management (IAM) practice.








CHANGING THE PASSPHASE OF A KEY


It is recommended that all SSH keys be regenerated and changed periodically. The Universal SSH Key Manager can automate this. Just changing the passphrase is no substitute, but it is better than nothing. These instructions can also be used to add a passphrase to a key that was created without one.
To change the passphrase, click on Load to load an existing key, then enter a new passphrase, and click Save private key to save the private key with the new passphrase. Be sure to properly destroy and wipe the old key file. Creating a new file with a new passphrase will not help if the old file remains available.

VIDEOS ILLUSTRATING USE OF PUTTYGEN

USING PUTTYGEN TO GENERATE AN SSH KEY

HOW TO SET UP PUTTY SSH KEYS FOR PASSWORDLESS LOGINS USING PAGENT
Read More
vào lúc No comments:
Nhãn:

HOW TO USE PUTTY ON WINDOWS

October 24, 2017 0
This page is about the PuTTY SSH client on Windows. For information about PuTTY on Mac, see the PuTTY Mac page. For PuTTY on Linux, see the PuTTY Linux page.
This page explains how to use the PuTTY terminal window on Windows. How to configure PuTTY, how to create and save profiles, and what configuration options to change. Advanced topics, such as configuring public key authentication, are also addressed.
Contents

GETTING AND INSTALLING

You can download a copy of the software for the Windows platform from the download page. Detailed installation instructions are provided on the installation instructions page.

RUNNING PUTTY AND CONNECTING TO A SERVER

If you selected to create a desktop icon during installation, you can start the software simply by (double-)clicking on the icon. Otherwise, open the software from the Windows Start menu.
When the software starts, a window titled PuTTY Configuration should open. This window has a configuration pane on the left, a Host Name (or IP address) field and other options in the middle, and a pane for saving session profiles in the lower right area.
For simple use, all you need to do is to enter the domain name or IP address of the host you want to connect to in the Host Name field and click Open (or press Enter). A domain name looks like students.example.edu. An IP address looks something like 78.99.129.32.

WHAT IF YOU DON'T HAVE A SERVER

If you don't have a server to connect to, you can try Tectia SSH on Windows or OpenSSH on Linux.

SECURITY ALERT DIALOG BOX

When you connect to a server for the first time, you are likely to see a PuTTY Security Alertdialog about the server's host key not being cached in the registry. This is normal when you are connecting to a server for the first time. If you ever get this with a server, it could mean that someone is trying to attack your connection and steal your password using a man-in-the-middle attack.
But as said, the first time you connect, this is normal, and you should just click Yes. If you want to be fancy, you can check the displayed key fingerprint and make sure it is the same that is used by the server. In real life, almost nobody does that. It is more secure to use a proper SSH key management solution anyway.
Security Alert Dialog about unknown server host key

TERMINAL WINDOW AND LOGIN CREDENTIALS

After the security alert, you should get a terminal window. By default, this is a black, very bland window. It should first ask for your user name and then password. After these, you should get a command line on the server.
You can then type into the terminal Window. You are now connected to the server, and anything you type in the Window is sent to the server. Server's responses are displayed in the Window. You can run any text-based applications on the server using the window. The session terminates when you exit the command-line shell on the server (typically by typing exit) to the command line or pressing Control-D. Alternatively, you can forcibly terminate the session by closing the terminal window.
PuTTY SSH terminal window

CONFIGURATION OPTIONS AND SAVED PROFILES

The initial configuration window contains a lot of options. Most of them are not needed in normal use.
PuTTY Windows configuration and connection screen with profile save option

PORT

The port field specifies the TCP/IP port to connect. For SSH, this is the port on which the SSH server runs. Normally it can be left to 22. If for some reason you need to connect to a different port number, just change the value. Usually only developers would change this to a different value, but some enterprises are known to run SSH servers in non-standard ports or to run multiple SSH servers on the same server at different ports.

CONNECTION TYPE

The Connection type selection almost never needs to be touched. Just leave it as SSH. SSH is a secure, encrypted communications protocol designed to ensure your password and data are maximally protected.
Raw connections might be used for developers to connect a TCP/IP socket for testing (e.g., when developing a network application that listens on a TCP/IP port).
Telnet is an old legacy protocol that is almost never used, unless you manage equipment that is more than 10 years old. Telnet is not secure. Passwords are sent in the clear on the network. Attackers can easily eavesdrop on plaintext communications and steal user names and passwords. Rlogin is another legacy protocol with similar woes.
Serial refers to a serial port, another legacy communications mechanism for connecting computers to peripheral devices. Most PCs these days no longer have serial ports, but they are still sometimes used for controlling physical equipment, instrumentation, machinery, or communications devices. Another use for serial ports is debugging operating systems or embedded software.

LOAD, SAVE, OR DELETE A STORED SESSION

This section allows you to save your settings as named profiles. Just write the name of your new profile in the Saved Sessions box and click Save to create a new profile. The host name and your other settings are saved in the profile.
Saved profiles appear in the larger box below it. Initially it will contain just Default Settings. Profiles you save will be included there. Select a profile and click Load to use a previously saved profile. Select a profile and click Delete to delete a profile that is no longer needed.

CLOSE WINDOW ON EXIT

Finally, the Close window on exit setting specifies whether the terminal window should be automatically closed when the connection is terminated. There is rarely any need to change it from the default value of Only on clean exit.

LEFT PANE CONFIGURATION OPTIONS

More options can be found in the left pane titled Category. Select a category from the tree, and the right pane will change to show configuration options for that category. The initally shown options belong to the Session category.
Only the more relevant options are described here. There are lots of options, and most of them would never be used.

TERMINAL OPTIONS

The options in this category influence terminal emulation and keyboard mappings. They are largely self-explanatory, and will not be covered here. Very few people need to touch these. Some people may change how the bell character is handled; people using exotic operating systems might change what is sent by the backspace or delete character.

WINDOW OPTIONS

The window options influence the appearance and behavior of the terminal window. It can also specify how characters are translated on output and to select fonts and colors for the window.

CONNECTION OPTIONS

Of the connection options, the Data options can be useful. The Auto-login user name specifies the user to log in as, so that the name will not have to be entered every time. The Proxy options are rarely useful for home users, but may be needed in enterprises that do not allow outgoing Internet connections without using a SOCKS proxy or other similar mechanisms. Don't worry if you don't know what a SOCKS proxy is; just stay out of that section.
The Telnet, Rlogin, and Serial categories only contain options for those protocols, and very few people would ever use them.
The SSH options, however, are important and useful for some people. The ordinary user or student need not worry about them. But if you want to use public key authentication, then they are needed. Note that you need to open the SSH options subtree by clicking on the small [+] symbol. Otherwise you won't see all the options.

KEY EXCHANGE, HOST KEYS, AND CIPHER OPTIONS

You almost never want to touch the Kex (key exchange), Host Keys, or Cipher options. They all have reasonable default values, and most people don't know enough about cryptography to select any better values. Thus just skip these options, unless you know what you are doing.

AUTHENTICATION OPTIONS - PUBLIC KEY AUTHENTICATION

The Auth subtree contains some options that may be useful. When Auth is clicked, it shows a pane titled Options controlling SSH authentication. To enable public key authentication, you just generate an SSH key and then click the Browse button in the Authentication parametersbox in the middle right area of this configuration pane. For more information, see also configuring public key authentication for PuTTY. Advanced users may also want to check the Allow agent forwarding checkbox to use key-based single sign-on.
Most users have no need to generate SSH keys and need not know what public key authentication is. System administrators, however, should learn it and should also familiarize themselves with SSH key management and ensure their organization implements proper provisioning and termination processes and audits for SSH keys.
PuTTY authentication public key options

ACTIVE DIRECTORY AUTHENTICATION (GSSAPI / KERBEROS)

One of the interesting features of PuTTY is support for Active Directory single sign-on. Technically it uses the Kerberos protocol via a programming interface called GSSAPI. In the SSH protocol, the mechanism is called GSSAPI authentication. Enterprise users using Kerberos authentication (e.g., via the Centrify or Quest Authentication Services aka Vintela) may want to take advantage of the single-sign-on capability. Other users don't need to care. The settings for GSSAPI authentication can be found under the SSH / Auth section. Note that you must again expand the Auth section by clicking on the [+] symbol to see the GSSAPI options.

X11 FORWARDING OPTIONS

X11 is a protocol and system for running graphical applications on Unix and Linux. It supports running graphical applications remotely over a network out-of-the-box.
PuTTY does not implement an X11 server (the display side), but it can work with some other product that implements X server functionality on Windows. A popular free alternative is XMing.
To use an X11 server, you need to check the Enable X11 forwarding box and enter localhost:0.0 in the X display location box. The other settings need not be touched. Detailed instructions can be found, e.g., here.
X11 forwarding options for use with Xming

TUNNELING OPTIONS

The final category of configuration options we'll discuss is Tunnels. They are used for configuring SSH tunneling, also called SSH port forwarding. This panel can be used for defining forwardings for the connection. Forwardings are saved in the profile.
To add a local forwarding (i.e., TCP/IP port on local machine forwarded to a port on the remote machine or to a machine reachable from the remote machine), write the source port in the Source port field, the destination host and port (e.g., www.dest.com:80) in the Destination field, and select Local. The click Add.
To add a remote forwarding (i.e., a TCP/IP port on the remote machine forwarded to a port on the local machine or to a machine reachable from the local machine), specify Source port on the destination machine and Destination that is reachable from the local machine (your desktop).
Normally you need not check Local ports accept connections from other hosts or the same for remote ports. However, if the connection to the forwarded port is from a over a network instead of from localhost, then you need to check these. There is a small security risk, but usually it is not a problem in the cases where SSH tunneling is used. However you should understand that anyone who can connect to the respective computer can then connect to the forwarded port. In some cases port forwarding can be used to traverse firewalls. We suggest you read our article on the risks of SSH port forwarding.
Read More
vào lúc No comments:
Nhãn:

HOW TO INSTALL PUTTY ON WINDOWS

October 24, 2017 0
This page provides detailed instructions for installing PuTTY on Windows 10, 8, or 7. However, installation should be very similar on other versions of Windows as well.
Contents

DOWNLOAD INSTALLATION PACKAGE

First you need to obtain a copy of the installation package (e.g., putty-<version>-installer.msi). If you have a 64-bit computer, it is recommended that you install the 64-bit version putty-64bit-<version>-installer.msi. Almost any computer bought after 2015 has a 64-bit processor, except for the very cheapest ones. Many high-end computers sold several years before that. If you don't know or don't care, it is always safe to use the 32-bit version (putty-<version>-installer.msi).
You can download the installer here.

STARTING THE INSTALLER

On Windows 10, the Edge browser offers to run the installer when the download is complete. Just click to install the software.
On older versions of Windows, you may need to run the installer manually. Open the Windows Explorer (right-click on the Windows logo in the bottom left corner), navigate to the Downloads directory (or wherever you saved the installer), and double-click on the file name. A detailed description can be found here. Note, however, that the installation has to be performed with Administrator rights (either using the Administrator account or your personal account must have Administrator permissions).
Occasionally, some people have problems installing MSI files. The video here may help.

CONFIGURING AND INSTALLING

When the installer starts, it shows the welcome screen. Just click Next.
PuTTY installer has started
The installer then asks for the Destination folder in which to install the software. Almost always it is best to use the default value. Just click Next.
Putty install asks destination folder
Then, the installer asks to select product features to install. You probably want to add a shortcut on the desktop if you expect to use the software frequently. All the other options generally should be enabled. When ready, click Install.
Selecting installation options for PuTTY installer on Windows 7, 8, 10
When the installation has completed successfully, it should show a Completed screen. Click Finish to exit the installer.
putty-installer-completed

RUNNING PUTTY

Once installation successfully completed, you should test to make sure that PuTTY runs correctly and you can find the program. If you installed a shortcut on the desktop, you should be able to find the icon for PuTTY. Try (double-)clicking on the icon. It should start the software.
Otherwise, you should be able to find the software from the Windows Start menu in the bottom left corner of the screen. The menu looks different in each version of Windows. On Windows 10, scroll down until you see PuTTY. Open the group, and select PuTTY.
When the software starts, you should get a window with the title PuTTY Configuration with a field Host Name in the upper middle part. Try entering a host name to connect to in that field, and click Open.
Initial Window with Configuration, Host Name, and Profiles

HOW TO GET A SERVER

An SSH client is intended to be used for connecting to an SSH server. Since you hare installing one, you presumably have a server to connect. The server may be at your university, work, or home. You need a host name (e.g., students.example.edu) or IP address (e.g., 177.33.189.54) to connect to. Enter the host name or IP address in the Host Name field.
If you don't have a server but want one, try installing Tectia SSH Server for Windows or IBM mainframes or OpenSSH on Linux.

OTHER SSH CLIENTS

While PuTTY is a good client, it is rather old. Its user interface is very old-fashioned and it does not provide a graphical interface for transferring files. For alternatives, see other SSH clients.

HOW-TOS

For further tutorials, see:
Read More
vào lúc No comments:
Nhãn:

Post Top Ad

Author Details