A quick introduction to the Secure Shell (SSH) protocol, presented by Mazin Ahmed at OWASP Khartoum latest event held on 29th July, 2017.

1. SSH: From Zero to
Hero
a workshop on using SSH in today’s world
By:
Mazin Ahmed
@mazen160
mazin AT mazinahmed DOT net

2. WHO AM I?
• Mazin Ahmed
• Freelancing Information Security Specialist / Penetration Tester
• Security Consultant at ProtonMail
• Freelancing Security Researcher at Bugcrowd, Inc
• Interested in web-security, networks-security, WAF evasions, mobile-
security, responsible disclosure, and software automation.
• One of top 100 researchers at Bugcrowd out of 60,000+ researchers.
• Acknowledged by Facebook, Twitter, Oracle, LinkedIn, US. Department
of Defense, and many…
You can read more at https://mazinahmed.net

3. Agenda
• Intro to SSH
• Uses of SSH in today’s world
• Workshop
• SSH Clients & SSH Daemons (Servers)
• Setting up SSH Server
• Reviewing Users/Permissions
• Password-Based Authentication
• Writing SSH local configurations
• Key-Based Authentication
• Creating SSH Keys
• Handling SSH Keys
• SCP
• SFTP
• Implementing SSH in software
automation
• Port Fun :-)
• Infosec situations involves SSH
• Questions

4. What is SSH?

5. Uses of SSH in today’s world

6. SSH Clients & SSH Daemons
(Servers)

7. Setting up SSH Server

8. Reviewing Users/Permissions

9. Let’s start with
Password-Based Authentication

10. Writing SSH local
configurations

11. Key-Based Authentication

12. Creating SSH Keys

13. Handling SSH Keys

14. SCP

15. SFTP

16. Port Fun
Port Tunneling, Making a Socks Proxy, and all the fun stuff

17. Implementing SSH in software
automation

18. Infosec situations involves SSH

19. Questions?
Mazin Ahmed
Twitter: @mazen160
Email: mazin AT mazinahmed DOT net
Website: https://mazinahmed.net
LinkedIn: https://linkedin.com/in/infosecmazinahmed