mirror of https://github.com/huashengdun/webssh
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
91 lines
2.6 KiB
91 lines
2.6 KiB
7 years ago
|
WebSSH
|
||
|
|
------
|
||
|
|
|
||
|
|
|Build Status| |codecov| |license|
|
||
|
|
|
||
|
|
A simple web application to be used as an ssh client to connect to your
|
||
|
|
ssh servers. It is written in Python, base on tornado and paramiko.
|
||
|
|
|
||
|
|
Preview
|
||
|
|
~~~~~~~
|
||
|
|
|
||
|
|
|Login| |Terminal|
|
||
|
|
|
||
|
|
Features
|
||
|
|
~~~~~~~~
|
||
|
|
|
||
|
|
- SSH password authentication supported, including empty password.
|
||
|
|
- SSH public-key authentication supported, including DSA RSA ECDSA
|
||
|
|
Ed25519 keys.
|
||
|
|
- Encrypted keys supported.
|
||
|
|
- Fullscreen terminal supported.
|
||
|
|
- Terminal window resizable.
|
||
|
|
- Compatible with Python 2.7-3.6.
|
||
|
|
|
||
|
|
Instructions
|
||
|
|
~~~~~~~~~~~~
|
||
|
|
|
||
|
|
::
|
||
|
|
|
||
|
|
pip install webssh
|
||
|
|
wssh
|
||
|
|
|
||
|
|
Options
|
||
|
|
~~~~~~~
|
||
|
|
|
||
|
|
::
|
||
|
|
|
||
|
|
# configure listen address and port
|
||
|
|
wssh --address='0.0.0.0' --port=8000
|
||
|
|
|
||
|
|
# configure missing host key policy
|
||
|
|
wssh --policy=reject
|
||
|
|
|
||
|
|
# configure logging level
|
||
|
|
wssh --logging=debug
|
||
|
|
|
||
|
|
# log to file
|
||
|
|
wssh --log-file-prefix=main.log
|
||
|
|
|
||
|
|
# more options
|
||
|
|
wssh --help
|
||
|
|
|
||
|
|
Nginx config example for running this app behind an nginx server
|
||
|
|
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
||
|
|
|
||
|
|
::
|
||
|
|
|
||
|
|
location / {
|
||
|
|
proxy_pass http://127.0.0.1:8888;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_read_timeout 300;
|
||
|
|
proxy_set_header Upgrade $http_upgrade;
|
||
|
|
proxy_set_header Connection "upgrade";
|
||
|
|
proxy_set_header Host $http_host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header X-Real-PORT $remote_port;
|
||
|
|
}
|
||
|
|
|
||
|
|
Tips
|
||
|
|
~~~~
|
||
|
|
|
||
|
|
- Try to use Nginx as a front web server (see config example above) and
|
||
|
|
enable SSL, this will prevent your ssh credentials from being
|
||
|
|
uncovered. Also afterwards the communication between your browser and
|
||
|
|
the web server will be encrypted as they use secured websockets.
|
||
|
|
- Try to use reject policy as the missing host key policy along with
|
||
|
|
your verified known\_hosts, this will prevent man-in-the-middle
|
||
|
|
attacks. The idea is that it checks the system host keys
|
||
|
|
file("~/.ssh/known\_hosts") and the application host keys
|
||
|
|
file("./known\_hosts") in order, if the ssh server's hostname is not
|
||
|
|
found or the key is not matched, the connection will be aborted.
|
||
|
|
|
||
|
|
.. |Build Status| image:: https://travis-ci.org/huashengdun/webssh.svg?branch=master
|
||
|
|
:target: https://travis-ci.org/huashengdun/webssh
|
||
|
|
.. |codecov| image:: https://codecov.io/gh/huashengdun/webssh/branch/master/graph/badge.svg
|
||
|
|
:target: https://codecov.io/gh/huashengdun/webssh
|
||
|
|
.. |license| image:: https://img.shields.io/github/license/mashape/apistatus.svg
|
||
|
|
.. |Login| image:: https://github.com/huashengdun/webssh/raw/master/preview/login.png
|
||
|
|
.. |Terminal| image:: https://github.com/huashengdun/webssh/raw/master/preview/terminal.png
|
||
|
|
|