Exf at 07:18, 17 October 2022

2022-10-17T07:18:43Z

← Older revision		Revision as of 07:18, 17 October 2022
Line 43:		Line 43:
	*PermitRootLogin no		*PermitRootLogin no

	Then restart ssh ~~pavelu~~ <code>sudo service ssh restart</code>		Then restart ssh service <code>sudo service ssh restart</code>

	You can then submit the task for evaluation.		You can then submit the task for evaluation.

Exf at 15:17, 13 October 2022

2022-10-13T15:17:32Z

← Older revision		Revision as of 15:17, 13 October 2022
Line 1:		Line 1:
			[[File:Ssh-Task.PNG\|thumb\|SSH Task]]
			[[File:Ssh-wget.PNG\|thumb\|wget]]
			[[File:Ssh-copy-id.PNG\|thumb\|ssh-copy-id]]
			[[File:Chmod-and-connection.PNG\|thumb\|chmod and connecting without password]]
			[[File:Sshd config.PNG\|thumb\|sshd_cofig]]

	===Description===		===Description===
	During regular system audits, it was dicovered that one of the systems does not meet the organization security baseline.		During regular system audits, it was dicovered that one of the systems does not meet the organization security baseline.

Exf: Created page with "===Description=== During regular system audits, it was dicovered that one of the systems does not meet the organization security baseline. Thereforce this system must be hardened. 200pts ===Question=== Harden the SSH configuration so that it meets the baseline. Make sure that root login is disabled Disable password authentication Add this [public key] so that the user: sysadmin is able to log in with their [private key] ===Solution=== To be on the safe side, I initi..."

2022-10-13T15:13:05Z

Created page with "===Description=== During regular system audits, it was dicovered that one of the systems does not meet the organization security baseline. Thereforce this system must be hardened. 200pts ===Question=== Harden the SSH configuration so that it meets the baseline. *Make sure that root login is disabled *Disable password authentication Add this [public key] so that the user: sysadmin is able to log in with their [private key] ===Solution=== To be on the safe side, I initi..."

New page

===Description===
During regular system audits, it was dicovered that one of the systems does not meet the organization security baseline.
Thereforce this system must be hardened.

200pts
===Question===
Harden the SSH configuration so that it meets the baseline.

*Make sure that root login is disabled
*Disable password authentication

Add this [public key] so that the user: sysadmin is able to log in with their [private key]
===Solution===
To be on the safe side, I initially opened two ssh connections, because especially when you make changes to the ssh server settings, you can accidentally log yourself out of the whole server.

Next, I downloaded both the private key and the public key to the .ssh folder on the local machine. Next, I used <code>ssh-copy-ip -i /root/.ssh/id_rsa.pub -p2224 sysadmin@env002.target02</code>

Before you can connect to the server you need to change the permissions on the private key. <code>chmod 600 id_rsa</code>

Next, you can try connecting to the server without a password with <code>ssh sysadmin@env002.target02 -p2224</code>

Once you have connected to the server you can start changing the ssh service settings. The first thing to do is to copy the original configuration file, so that the incorrectly configured settings can be restored if necessary.

The server ssh configuration can be found at<code>/etc/ssh/sshd_config</code>

Next, you can try connecting to the server without a password with <code>ssh sysadmin@env002.target02 -p2224</code>

Once you have connected to the server you can start changing the ssh service settings. The first thing to do is to copy the original configuration file, so that the incorrectly configured settings can be restored if necessary.

The server ssh configuration can be found at<code>/etc/ssh/sshd_config</code>

Make a copy of the file, then edit the sshd_config file.

Add the following settings to the file
*PasswordAuthentication no
*UsePAM no
*PermitRootLogin no

Then restart ssh pavelu <code>sudo service ssh restart</code>

You can then submit the task for evaluation.
===Tools===
*ssh
*nano
*cp
*ssh-copy-id
===Flag===

===Links===
*[[CTF Challenges | Back to CTF Challenges page]]

SSH-Harden - Revision history

Exf at 07:18, 17 October 2022

Exf at 15:17, 13 October 2022