#SftP

grayrattusgrayrattus
2025-05-28

I see supports as storage on android. See you all tomorrow XDDD

2025-05-20

Open Source MFT/SFTP ?

#ssh
#mft
#sftp

Hi Fediverse people

I've been really stuck trying to script some what should be fairly easy CrushFTP user creation stuff for automated file uploads securely.

The documentation on the CrushFTP api and scripting interfaces is terrible and I'm a bit stuck with support.

I'm really thinking of ditching it and just doing it with basic OpenSSH/SFTP - but it isn't that great for managing users and downloads etc either.

Are there any SFTP wrapper products to do MFT type functions without going the whole hog of a dedicated "enterprise" MFT software with their piles of potential security issues and expense?

sftpgo.com/ ??

aaron ~# :blinkingcursor:neuroexception@infosec.exchange
2025-05-17

My favorite pentesting setup.

Today i'm setting up the #KaliLinux #Docker #container for my #ansible #playbook. This setup has some pretty cool advantages for me.

I can:

  • access the shell and files using #SSH and #SFTP.
  • customize the installation to the fullest extend using the #Dockerfile.
  • easily route the #networktraffic through a #vpn using #gluetun.
  • reproduce the setup (i love Docker).
  • use GUI apps from that container using X11Forwarding or by installing a #vnc server.

This has been my favorite #pentesting setup so far for obvious reasons. I can access a fully configured pentesting environment on all my devices, always accessible and ready to go.

In case anyone is interested in the setup, it will be included in my ansible playbook, which will be published on this repository.

#automation #linux #hacking #x11 #homelab #selfhosting

xoron :verified:xoron@infosec.exchange
2025-05-17

Send files privately. No cloud. No trace.

glitr.io

I’m working towards something for #secure / #private / #simple #P2P #filetransfer. It isnt as “simple” as it could be, im still working on it, but ive got it down to:

Zero-installation as a #PWA

Zero-registration by using local-only storage

#P2P-authentication using #WebCryptoAPI

Fast #datatransfer using #WebRTC

It’s far from finished, but i think ive got it “usable” enough to ask for feedback on it.

When comparing this project to things like #wormhole, #onionshare, #localsend, #syncthing, #croc, #sphynctershare and countless others. the key difference in my approach is that its a #webapp thats ready to go without any "real" setup process. you just need a browser.

I’m aware there are things like #SFTP and several other established protocols and tools. I started doing this because I was learning about #WebRTC and it seems suprisingly capable. This isnt ready to replace any existing apps or services.

(Note: I know you guys are typically interested in #opensource code. this project is a spin-off from a bigger project: github.com/positive-intentions)

Let me know what you think about the app, features and experience you would expect from a tool like this.

---

SUPER IMPORTANT NOTES TO PREVENT MISLEADING:

These projects are not ready to replace any existing apps or services.

These projects are not peer-reviewed or security audited.

The chat-app is #opensource for transparency (as linked above)... but the file-app is not open souce at all (especially spicy when not reviewed or audited.).

All projects behind positive-intentions are provided for testing and demo purposes only.

glitr.io
2025-05-11

Just published my full story on building a fully managed, serverless server using services:

- Transfer Family: SFTP endpoint
- Lambda: Custom user authentication
- EFS: File storage
- DynamoDB: Credential storage
- KMS: Encryption

cloudwith.alon.com.np/deployin

Jens Oliver Meiertj9t@mas.to
2025-05-07
st1nger :unverified: 🏴‍☠️ :linux: :freebsd:st1nger@infosec.exchange
2025-05-06

#aria2 is a lightweight multi-protocol & multi-source, cross platform download utility operated in command-line. It supports #HTTP #HTTPS #FTP #SFTP #BitTorrent and #Metalink github.com/aria2/aria2

Neustradamus :xmpp: :linux:neustradamus
2025-05-05

6.5.1 has been released ( / / / / / / / / ) winscp.net/

M1k3 :mastodon: :fediverse:M1k3@mamot.fr
2025-04-26

@jeeynet regarde #rclone, ça fonctionne très bien de mon côté et prend en charge pas mal de protocoles, dont #SFTP. Tu peux même chiffrer ta sauvegarde.

rclone.org/

SFTP : rclone.org/sftp/

Neustradamus :xmpp: :linux:neustradamus
2025-04-22
Neustradamus :xmpp: :linux:neustradamus
2025-04-20
Terence EdenEdent
2025-04-19

Hey Linux friends. Is there a better graphical FTP program than Filezilla?

I'm finding Filezilla to be increasingly buggy, and I need something I can use with drag & drop & synchronised browsing.

What's a good replacement that you've *personally* used?

(Anyone telling me to use the command-line will be fired into a dark pit of scorpions. The scorpions have already eaten the people who say "here's the first result from a search query.")

razzlom is always sadrazzlom@quietplace.xyz
2025-04-03

Распробовал тут #hydrus. Давно хотел локальную буру, а альтернативы в виде клиент-серверного решения не очень нравились. К тому же #Shimmie не очень удобно пользоваться.

К этому прикрутил бэкапы базы с помощью
#restic. Передаёт бэкапы по #sftp, есть снапшоты и дедупликация. Всё нравится. Надо будет это программулину прикрутить на #QuietBBS.

2025-03-27
Further down this rabbit hole.
Sorry for the noise, but the more I go deeper, the worse it looks like, and I need to vent to people who might understand.

The #SFTP specification version 3, section 7 actually provides the number of links of each file the "longname" of the SSH_FXP_NAME response:

The SSH_FXP_NAME response has the following format:

uint32 id
uint32 count
repeats count times:
string filename
string longname
ATTRS attrs
[...]
`longname' is an expanded format for the file name, similar to what
is returned by "ls -l" on Unix systems
[...]
The format of the `longname' field is unspecified by this protocol.
It MUST be suitable for use in the output of a directory listing
command (in fact, the recommended operation for a directory listing
command is to simply display this data).
So far so good: we should have the info we need (at least from unix servers) despite in an unfortunate textual format.

The specification also states that such long name MUST not be parsed and clients should rely on the binary attributes that follow, except that the same specification forgot to include st_nlink (maybe because not all operating system supports such info).

However let assume that we ignore that argument and patch sshfs to read and parse such text just to provide the proper st_nlink.

Will #OpenSSH properly implement the specification?

NO! It doesn't! 😭

Let's give it a try:

sftp> cd test
sftp> ls -l
-rw-r--r-- 2 tesio users 0 Mar 26 20:34 copy
-rw-r--r-- 2 tesio users 0 Mar 26 20:34 file
sftp> ls -l *
-rw-r--r-- ? 115209 100 0 Mar 26 21:34 copy
-rw-r--r-- ? 115209 100 0 Mar 26 21:34 file
It turns out that the sftp-server from OpenSSH handles ls -l differently when it is received without any argument or with an argument.

In the first case (no argument) the request comply to the specification.
In the second, it does not, apparently for no reason (the ls_file function receives remote = 1).

So to properly fill st_nlink in #sshfs, for any file we should sent an additional SSH_FXP_READDIR request to the server for the parent directory, find our file of interest within the list of files and extract the number of links from its longname.

And we are talking about OpenSSH!

Guys... I wanna cry.

CC: @rozenglass@fedi.dreamscape.link @grunfink@comam.es @khm@hj.9fs.net @Velveteen@labyrinth.zone
2025-03-27
Went a little down this rabbit hole and wrote an update to that issue and the related one on st_nlink.

The problem is not caused by #sshfs (or by the #fuse library), but by the #SFTP protocol itself that doesn't provide access to the underlying inode and provides access to the number of links only from version 06 while most server implementations (including #OpenSSH) are based on version 02.

Sad to see that in 2016 a developer contributed to OpenSSH a patch to provide such info as an extension attribute (a mechanism available at that protocol version) but the patch was not accepted (or, apparently, considered).

CC: @grunfink@comam.es @khm@hj.9fs.net @Velveteen@labyrinth.zone
∂𑁨í 🕊 d2i@mk.phreedom.club
2025-03-22

SshDaemon.
A simple
#SSH/#SFTP server for your #Android phone.
https://github.com/jazzm0/ssh-daemon

2025-03-19

Стриминг музыки со своего сервера

YouTube Music , «Яндекс Музыка» , Spotify , SoundCloud — относительно удобные музыкальные сервисы, но с недостатками: плохая работа в офлайне; отсутствие поддержки lossless; абонентская плата; неполная фонотека; многое другое... Их коллекции далеки от полноты. Редких треков вообще нет. Более того, музыка иногда просто пропадает из-за каких-то заморочек с авторскими правами. К счастью, очень легко организовать стриминг музыки со своего сервера. Хранить всю музыкальную коллекцию у себя на компьютере — зачастую надёжнее, удобнее и дешевле, чем облачный сервис.

habr.com/ru/companies/ruvds/ar

#ruvds_статьи #самохостинг #стриминг #Black_Candy #Koel #музыка #интернетрадио #YouTube_Music #Яндекс_Музыка #Spotify #SoundCloud #Termux #смартфон_Android #LineageOS #ssh #sftp #openssh #Navidrome #Dynamic_DNS #Plexamp #Subsonic #Icecast #Snapcast #Lyrion_Music_Server #Musikcube #OwnTone #Music_Player_Daemon #MPD

Molly MillionM_M@mastodon.uno
2025-03-18

Confronto i passaggi sulla creazione dell'utente SFTP nei due walkthrough e finalmente FUNZIONA!

Ho imparato che:
A volte, incrociare i flussi FUNZIONA 😬

[2/2]

#ubuntu #sftp #neverendingdev

Molly MillionM_M@mastodon.uno
2025-03-18

Scena: bloccata in casa causa braccio malfermo, mi accingo a creare il servizio sftp in un server casalingo.

Svolgimento:
Trovo su SITO_1 un walkthrough, lo seguo MINUZIOSAMENTE (aggiungendo dei sudo dimenticati dove necessario) e l'accesso in sftp NON VA.
Trovo su SITO_2 un altro walkthrough, lo confronto col walkthrough di SITO_1, aggiungo dei parametri al file conf di ssh e NON VA.

#ubuntu #sftp #neverendingdev
[1/2]

2025-03-16
Nueva locación, nuevo servidor casero. Una pequeña portátil, vieja pero no obsoleta, convertida en "nube".
#Devuan #gnu #linux #ssh #sftp #autohospedaje #selfhosting
Captura de la pantalla previa al login. El contenido se edita en /etc/issueCaptura luego del login con la salida de "screenfetch -t" y los comandos de captura fbcat.

Client Info

Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst