evilsocket/shellz

shellz is a small utility to manage your ssh, telnet, kubernetes, winrm, web or any custom shell in a single place.

shellz's Issues

SOCKS proxy support

Would be awesome to be able to define a SOCKS proxy for each host in the config file, for example if some of your boxes are on hidden services or whatnot.

No output and "Process exited with status 1" for Aruba Switches (S3500)

What version of Go are you using (go version)?

go1.11 darwin/amd64

What operating system and processor architecture are you using (go env)?

MacOS 10.14

What did you do?

Attempting to execute a ping command on a single shell with the ciphers specified

What did you expect to see?

A successful reply with round trip latency info

What did you see instead?

(Process exited with status 1)

Not sure if this is a limitation with my Aruba switches, although it works perfect on our Aruba controllers. If this issue doesn't seem to be related to Shellz, sorry for opening an issue. In any case, I have uploaded a screenshot of the issue I'm facing. Thanks again for the deprecated cipher support so quickly! You are awesome!

Password protected private keys

Hi,
I just wanted to try shellz, but it seems we can't use password protected private keys.
error while creating session for shell hetzner-magic: error while parsing key file /home/magic/.ssh/id_rsa: ssh: can not decode encrypted private keys

Custom configurations support

Would be useful to specify a custom path were to load configuration files, either via parameter or environment variables, so that sharing configurations is easier.

I'm thinking to a scenario where I want to share configurations (idents, shells, plugins) with a team. In case of missing configurations then fallback to the default in ~/.shellz

Reverse SSH Tunnel support

It would be great if we got this with love :P

flag provided but not defined: -tunnel

Following the information in the Readme, when I try to start a SSH tunnel via

shellz -tunnel -on my.tunnel

I always get the error/warning:

flag provided but not defined: -tunnel

This happens with the Homebrew version as well as the release downloaded from here. I'm using macOS 10.14. Running commands like

shellz -run id

works as expected. The SSH tunnel flag is not available, so probably the functionality is not there. Can you shed some light on why that is?

Add support for Kubernetes tunnels

Follow XDG Base Directory Specification (avoid dotfiles in home folder)

Could be seen as an extension of #8 "Custom configurations support"

I think it would be a good idea to follow the XDG Base Directory Specification
which is already in use by a lot of other tools and reduces cluttering the home (~/) folder.

What do you think, what is your stance on this?

IPv6 support

Possible to support access IPv6, currently error:

war error while creating session for shell server1: dial tcp: address xxxx:xxxx:xxxx:xxxx::x:22: too many colons in address
war error while creating session for shell server2: dial tcp: address xxxx:xxxx:xxxx:xxxx::x:22: too many colons in address
war error while creating session for shell server3: dial tcp: address xxxx:xxxx:xxxx:xxxx::x:22: too many colons in address

I force access in IPv4 but it would be great for the addition. Thx

Is there an easy way to allow unsupported/deprecated ciphers?

What version of Go are you using (go version)?

go1.11 darwin/amd64

What operating system and processor architecture are you using (go env)?

MacOS 10.14

What did you do?

Attempting connection to ssh host

What did you expect to see?

Successful authentication

What did you see instead?

ssh: no common algorithm for client to server cipher; client offered: [[email protected] [email protected] aes128-ctr aes192-ctr aes256-ctr], server offered: [aes128-cbc aes256-cbc]

Runtime error when trying to connect to server

Hello,

Thanks for adding the ssh-agent integration, but this doesn't work for me

panic: runtime error: invalid memory address or nil pointer dereference
[signal SIGSEGV: segmentation violation code=0x1 addr=0x20 pc=0x7b367d]

goroutine 14 [running]:
github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh.(*connection).clientAuthenticate(0xc4201a8080, 0xc4201a2000,
 0x0, 0xa)
        /home/evilsocket/gocode/src/github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh/client_auth.go:63 +0x2dd
github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh.(*connection).clientHandshake(0xc4201a8080, 0xc420020e20, 0x
10, 0xc4201a2000, 0x0, 0x0)
        /home/evilsocket/gocode/src/github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh/client.go:113 +0x2c4
github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh.NewClientConn(0x97b7c0, 0xc4201a0000, 0xc420020e20, 0x10, 0x
c420149ad0, 0x97b7c0, 0xc4201a0000, 0x0, 0x0, 0x1, ...)
        /home/evilsocket/gocode/src/github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh/client.go:83 +0x100
github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh.Dial(0x8d58a8, 0x3, 0xc420020e20, 0x10, 0xc420149ad0, 0x0, 0x0, 0x0)
        /home/evilsocket/gocode/src/github.com/evilsocket/shellz/vendor/golang.org/x/crypto/ssh/client.go:177 +0xb3
github.com/evilsocket/shellz/session.NewSSH.func1(0x0, 0x0)
        /home/evilsocket/gocode/src/github.com/evilsocket/shellz/session/ssh.go:49 +0x13a
github.com/evilsocket/shellz/vendor/github.com/evilsocket/islazy/async.WithTimeout.func1(0xc42009a540, 0xc420119c40)
        /home/evilsocket/gocode/src/github.com/evilsocket/shellz/vendor/github.com/evilsocket/islazy/async/timeout.go:16 +0x27
created by github.com/evilsocket/shellz/vendor/github.com/evilsocket/islazy/async.WithTimeout
        /home/evilsocket/gocode/src/github.com/evilsocket/shellz/vendor/github.com/evilsocket/islazy/async/timeout.go:15 +0x92

Support for future Go versions

Heads up that Go 1.17 (and the just-released 1.16 without first changing GO111MODULE) won't support builds that aren't in module-aware mode.

For compatibility with future versions, the project will need a release that uses Go modules.

https://blog.golang.org/go116-module-changes

Grouping servers

Hello is it possible to create groups for multiple servers so we don't have to specify all servers we want to connect to and run a command?