OWASP - User contributions [en]

OWASP KeyBox

2017-12-27T20:11:52Z

Skavanagh: Blanked the page

OWASP KeyBox

2017-10-26T10:57:36Z

Skavanagh: Add release

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2017-09-20: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.90.02 KeyBox v2.90.02]
* 2017-09-05: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.90.01 KeyBox v2.90.01]
* 2017-06-04: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.90.00 KeyBox v2.90.00]
* 2017-03-19: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.89.00 KeyBox v2.89.00]
* 2017-03-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.02 KeyBox v2.88.02]
* 2017-01-28: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.01 KeyBox v2.88.01]
* 2017-01-01: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.00 KeyBox v2.88.00]
* 2016-11-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.01 KeyBox v2.87.01]
* 2016-10-22: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.00 KeyBox v2.87.00]
* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2017-09-06T01:29:11Z

Skavanagh: Added new release

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2017-09-05: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.90.01 KeyBox v2.90.01]
* 2017-06-04: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.90.00 KeyBox v2.90.00]
* 2017-03-19: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.89.00 KeyBox v2.89.00]
* 2017-03-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.02 KeyBox v2.88.02]
* 2017-01-28: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.01 KeyBox v2.88.01]
* 2017-01-01: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.00 KeyBox v2.88.00]
* 2016-11-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.01 KeyBox v2.87.01]
* 2016-10-22: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.00 KeyBox v2.87.00]
* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2017-06-04T15:07:24Z

Skavanagh: added new release

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2017-06-04: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.90.00 KeyBox v2.90.00]
* 2017-03-19: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.89.00 KeyBox v2.89.00]
* 2017-03-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.02 KeyBox v2.88.02]
* 2017-01-28: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.01 KeyBox v2.88.01]
* 2017-01-01: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.00 KeyBox v2.88.00]
* 2016-11-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.01 KeyBox v2.87.01]
* 2016-10-22: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.00 KeyBox v2.87.00]
* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2017-03-19T11:55:16Z

Skavanagh: added new release link

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2017-03-19: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.89.00 KeyBox v2.89.00]
* 2017-03-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.02 KeyBox v2.88.02]
* 2017-01-28: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.01 KeyBox v2.88.01]
* 2017-01-01: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.00 KeyBox v2.88.00]
* 2016-11-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.01 KeyBox v2.87.01]
* 2016-10-22: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.00 KeyBox v2.87.00]
* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2017-03-18T22:35:17Z

Skavanagh: added release link

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2017-03-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.02 KeyBox v2.88.02]
* 2017-01-28: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.01 KeyBox v2.88.01]
* 2017-01-01: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.00 KeyBox v2.88.00]
* 2016-11-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.01 KeyBox v2.87.01]
* 2016-10-22: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.00 KeyBox v2.87.00]
* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2017-03-09T00:35:10Z

Skavanagh:

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2017-01-28: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.01 KeyBox v2.88.01]
* 2017-01-01: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.00 KeyBox v2.88.00]
* 2016-11-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.01 KeyBox v2.87.01]
* 2016-10-22: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.00 KeyBox v2.87.00]
* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2017-01-04T01:17:57Z

Skavanagh:

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2017-01-01: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.88.00 KeyBox v2.88.00]
* 2016-11-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.01 KeyBox v2.87.01]
* 2016-10-22: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.87.00 KeyBox v2.87.00]
* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2016-08-02T00:59:36Z

Skavanagh:

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2016-07-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.86.00 KeyBox v2.86.00]
* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2016-04-24T10:48:06Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2016-04-24: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.03 KeyBox v2.85.03]
* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2016-04-06T00:56:59Z

Skavanagh:

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2016-03-29: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.02 KeyBox v2.85.02]
* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-12-10T01:43:55Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-12-09: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.01 KeyBox v2.85.01]
* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-12-08T00:28:10Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-11-30: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.85.00 KeyBox v2.85.00]
* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-11-12T02:55:38Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-11-06: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.01 KeyBox v2.84.01]
* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-10-04T00:58:17Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-10-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.84.00 KeyBox v2.84.00]
* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-06-08T01:06:59Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-06-07: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.02 KeyBox v2.83.02]
* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-05-16T11:50:00Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-05-16: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.01 KeyBox v2.83.01]
* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-04-26T11:49:18Z

Skavanagh:

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-04-22T00:28:27Z

Skavanagh: /* News and Events */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. It combines key management and administration through profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. KeyBox combines key management and administration through profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-04-21: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.83.00 KeyBox v2.83.00]
* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-03-29T11:18:12Z

Skavanagh: /* FAQs */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. It combines key management and administration through profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. KeyBox combines key management and administration through profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at [http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-03-29T11:17:49Z

Skavanagh: /* FAQs */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. It combines key management and administration through profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

 
[[File:KeyBox-Terminals.png|400px]]

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. KeyBox combines key management and administration through profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.

 
[[File:KeyBox-Arch.jpg|500px]]

==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Links ==
*[https://github.com/skavanagh/KeyBox KeyBox on Github]
*[https://github.com/skavanagh/KeyBox/blob/master/README.md README]
*[http://sshkeybox.com Website]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-03-13: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.82.00 KeyBox v2.82.00]
* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=

* How do I import my own SSL cert?

::keytool -keystore keystore -import -alias jetty -file mycert.crt
::then just replace the keystore in the jetty/etc/ directory and you set the passwords in the jetty/modules/ssl.mod file (see [http://www.eclipse.org/jetty/documentation/current/configuring-security-secure-passwords.html Configuring Security Secure Passwords] to set the password format)
::More information can be found at -[http://wiki.eclipse.org/Jetty/Howto/Configure_SSL How to Configure SSL]

* I have a reverse-proxy that already terminates TLS/SSL, how do I disable TLS/SSL?

::In the jetty directory edit the start.ini file and set

::--module=https

::to

::--module=http

::and change jetty.port=8443 to the needed port to be and restart. More information on jetty can be found - [http://www.eclipse.org/jetty/documentation/current/ Jetty Documentation]

= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-03-28T01:37:25Z

Skavanagh:

File:KeyBox-Arch.jpg

2015-03-28T01:35:09Z

Skavanagh: Skavanagh uploaded a new version of "File:KeyBox-Arch.jpg"

Keybox Architecture diagram

OWASP KeyBox

2015-03-28T01:33:44Z

Skavanagh:

File:KeyBox-ManageUsers.png

2015-03-28T01:23:36Z

Skavanagh: KeyBox screenshot - Manage Users

KeyBox screenshot - Manage Users

File:KeyBox-DisableKeys.png

2015-03-28T01:23:20Z

Skavanagh: KeyBox screenshot - Disable SSH Keys

KeyBox screenshot - Disable SSH Keys

File:KeyBox-DefineKeys.png

2015-03-28T01:22:40Z

Skavanagh: KeyBox screenshot - Define SSH Keys

KeyBox screenshot - Define SSH Keys

OWASP KeyBox

2015-03-28T01:19:02Z

Skavanagh: /* Description */

File:KeyBox-Terminals.png

2015-03-28T01:15:04Z

Skavanagh: KeyBox screenshot - Terminals

KeyBox screenshot - Terminals

File:KeyBox-Arch.jpg

2015-03-28T01:14:23Z

Skavanagh: Keybox Architecture diagram

Keybox Architecture diagram

OWASP KeyBox

2015-03-13T23:44:10Z

Skavanagh: /* News and Events */

OWASP KeyBox

2015-03-13T13:35:31Z

Skavanagh: /* Links */

OWASP KeyBox

2015-03-13T13:34:45Z

Skavanagh: /* Quick Download */

OWASP KeyBox

2015-03-13T13:34:25Z

Skavanagh: /* Links */

OWASP KeyBox

2015-03-13T13:34:05Z

Skavanagh: /* Repository */

OWASP KeyBox

2015-03-13T13:33:09Z

Skavanagh:

OWASP KeyBox

2015-03-13T13:31:33Z

Skavanagh: /* FAQs */

OWASP KeyBox

2015-03-13T13:31:13Z

Skavanagh: /* FAQs */

OWASP KeyBox

2015-03-13T13:21:20Z

Skavanagh: /* Minimum Viable Product */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |


Instructions are in RED text and should be removed from your document by deleting the text with the span tags. This document is intended to serve as an example of what is required of an OWASP project wiki page. The text in red serves as instructions, while the text in black serves as an example. Text in black is expected to be replaced entirely with information specific to your OWASP project.


==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. It combines key management and administration through profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. KeyBox combines key management and administration through profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.


==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Quick Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Repository ==
[https://github.com/skavanagh/KeyBox KeyBox on Github]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=



Many projects have "Frequently Asked Questions" documents or pages. However, the point of such a document is not the questions. ''The point of a document like this are the '''answers'''''. The document contains the answers that people would otherwise find themselves giving over and over again. The idea is that rather than laboriously compose and post the same answers repeatedly, people can refer to this page with pre-prepared answers. Use this space to communicate your projects 'Frequent Answers.'


= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

Currently packaged along with a web-server and can be downloaded from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-03-13T13:20:30Z

Skavanagh: /* Contributors */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |


Instructions are in RED text and should be removed from your document by deleting the text with the span tags. This document is intended to serve as an example of what is required of an OWASP project wiki page. The text in red serves as instructions, while the text in black serves as an example. Text in black is expected to be replaced entirely with information specific to your OWASP project.


==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. It combines key management and administration through profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. KeyBox combines key management and administration through profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.


==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Quick Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Repository ==
[https://github.com/skavanagh/KeyBox KeyBox on Github]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=



Many projects have "Frequently Asked Questions" documents or pages. However, the point of such a document is not the questions. ''The point of a document like this are the '''answers'''''. The document contains the answers that people would otherwise find themselves giving over and over again. The idea is that rather than laboriously compose and post the same answers repeatedly, people can refer to this page with pre-prepared answers. Use this space to communicate your projects 'Frequent Answers.'


= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

It's currently packaged along with a web-server and can be downloaded by consumers from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-03-13T13:20:20Z

Skavanagh: /* Contributors */

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |


Instructions are in RED text and should be removed from your document by deleting the text with the span tags. This document is intended to serve as an example of what is required of an OWASP project wiki page. The text in red serves as instructions, while the text in black serves as an example. Text in black is expected to be replaced entirely with information specific to your OWASP project.


==OWASP KeyBox Project==

KeyBox is a web-based SSH console that centrally manages administrative access to systems. It combines key management and administration through profiles assigned to defined users. KeyBox layers TLS/SSL on top of SSH and can act as a bastion host.

==Description==


KeyBox is a web-based SSH console that centrally manages administrative access to systems. KeyBox combines key management and administration through profiles assigned to defined users.


Administrators can login using two-factor authentication with
[https://fedorahosted.org/freeotp FreeOTP]
or
[https://github.com/google/google-authenticator Google Authenticator]
. From there they can create and manage public SSH keys or connect to their assigned systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.


KeyBox layers TLS/SSL on top of SSH and acts as a bastion host for administration. Protocols are stacked (TLS/SSL + SSH) so infrastructure cannot be exposed through tunneling / port forwarding. More details can be found in the following whitepaper: [http://www.sans.org/reading-room/whitepapers/vpns/security-implications-ssh-1180 The Security Implications of SSH]. Also, SSH key management is enabled by default to prevent unmanaged public keys and enforce best practices.


==Licensing==
[https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== Quick Download ==
[https://github.com/skavanagh/KeyBox/releases Download now]

== Project Leader ==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

== Repository ==
[https://github.com/skavanagh/KeyBox KeyBox on Github]

==Classifications==

{| width="200" cellpadding="2"
|-
| colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=https://www.owasp.org/index.php/Category:OWASP_Tool]]
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-incubator-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects|Incubator Project]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=Defenders]]
|-
| colspan="2" align="center" | [https://tldrlegal.com/license/apache-license-2.0-%28apache-2.0%29 Apache 2.0]
|}

| valign="top" style="padding-left:25px;width:200px;" |

== News and Events ==

* 2015-03-03: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.80.00 KeyBox v2.80.00]
* 2015-02-25: Release - [https://github.com/skavanagh/KeyBox/releases/tag/v2.76.00 KeyBox v2.76.00]


|}

=FAQs=



Many projects have "Frequently Asked Questions" documents or pages. However, the point of such a document is not the questions. ''The point of a document like this are the '''answers'''''. The document contains the answers that people would otherwise find themselves giving over and over again. The idea is that rather than laboriously compose and post the same answers repeatedly, people can refer to this page with pre-prepared answers. Use this space to communicate your projects 'Frequent Answers.'


= Acknowledgements =

==Contributors==

[mailto:sean.p.kavanagh6@gmail.com Sean Kavanagh]

==Special Thanks==

[http://www.jcraft.com/jsch JSch] Java Secure Channel - by [https://github.com/ymnk ymnk]

[https://github.com/chjj/term.js terms.js] A terminal written in javascript - by [https://github.com/chjj chjj]

= Road Map and Getting Involved =

==Road Map==

Add ability to save session and command line information to a large data store so it can be audited and reviewed. Compute and flag irregularities that could point security issues or improper use. Deploy to embedded network devices to act as a proxy for SSH connections.

==Getting Involved==

=Minimum Viable Product=

It's currently packaged along with a web-server and can be downloaded by consumers from github

[https://github.com/skavanagh/KeyBox/releases https://github.com/skavanagh/KeyBox/releases]

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Tool]]

OWASP KeyBox

2015-03-13T13:05:05Z

Skavanagh: /* News and Events */

OWASP KeyBox

2015-03-13T13:04:37Z

Skavanagh: /* Repository */

OWASP KeyBox

2015-03-13T13:04:23Z

Skavanagh: /* Quick Download */

OWASP KeyBox

2015-03-13T13:04:00Z

Skavanagh: /* Description */

OWASP KeyBox

2015-03-13T13:03:04Z

Skavanagh: /* Related Projects */

OWASP KeyBox

2015-03-13T13:01:46Z

Skavanagh: /* News and Events */

OWASP KeyBox

2015-03-13T13:01:14Z

Skavanagh: /* News and Events */

OWASP KeyBox

2015-03-13T13:00:45Z

Skavanagh: /* News and Events */

OWASP KeyBox

2015-03-13T12:53:27Z

Skavanagh: /* OWASP KeyBox Project */