Page 1 of 1

Options for remote code execution (SSH?)

Posted: Wed Oct 24, 2007 2:06 pm
by true_atlantis
Has anyone done anything with remote code execution? Specifically via an SSH client WITHOUT using Keys.

My initial thought was to attempt to pipe a password to the 'ssh user@host' command, but that is a hack. The next thing I found was the pecl ssh2 library, but ssh2 is still beta, and the library cant compile with the newest ssh2lib.

Any other ideas/suggestions? Thanks.

Posted: Wed Oct 24, 2007 4:22 pm
by feyd
What kind of remote code execution? Is it automated, or on-demand? Do you control the remote server?

Posted: Wed Oct 24, 2007 6:29 pm
by Kieran Huggins
Is that not what XML-RPC was intended to solve?

Serious question, I could be wrong. So very wrong.

Posted: Thu Oct 25, 2007 4:13 am
by VladSun
You need a key based authentication. E.g. :http://www.astro.caltech.edu/~mbonati/W ... d_ssh.html

Posted: Sun Oct 28, 2007 10:55 pm
by true_atlantis
The execution will be on demand (basically audits of specific files). I will have an account on the remote server, but it will be AAA authentication (RSA RADIUS), and the server is not 'owned' by me. Key authentication will not be possible.