Hacker GitHub

← All repos

moxie0/knockknock

View on GitHub ↗ ★ 693 Python

A simple, secure, and stealthy port knocking implementation that does not use libpcap or bind to a socket interface.

17 mentions on Hacker News by 14 people: 1 story, 16 comments · first 2014-06-26 · latest 2024-08-28

Mentions per year 17 mentions · busiest year 2024 (9)
20082026
AllStoriesComments NewestTopOldest
  1. …to adapt and to keep small anyway, whatever distro and firewall one might end up use it with. [0] https://github.com/moxie0/knockknock/blob/bf14bbffc5f1d2105c... [1] https://github.com/moxie0/knockknock/pull/7
    comment by gawa · 2024-08-28 · in Knockknock: Simple, secure, and stealthy port knocking implementation (2012)
  2. ▲ 90
    Knockknock: Simple, secure, and stealthy port knocking implementation (2012)
    story by Bluestein · 2024-08-24 · 82 comments
  3. …three months later, he would publish The Cryptographic Doom Principle [2] (dated 2011-12-13). [1]: https://github.com/moxie0/knockknock/commit/e24eb33f666fc092... [2]: https://moxie.org/2011/12/13/the-cryptographic-doom-principl...
    comment by saclark11 · 2024-08-24 · in Show HN: Ruroco – like port knocking, but better
  4. …considerations regarding port knocking by Moxie Marlinspike? I think he raises some valid points: https://github.com/moxie0/knockknock Instead of using UDP he reads the firewall log. Also he prevents replay attacks (even though his…
    comment by mr_mitm · 2024-08-23 · in Show HN: Ruroco – like port knocking, but better
  5. https://github.com/moxie0/knockknock
    comment by jiripospisil · 2024-08-15 · in Some thoughts on OpenSSH 9.8's PerSourcePenalties feature
  6. …implementation by Moxie seems interesting, but needless to say that Python 2 is an instant no-go: https://github.com/moxie0/knockknock It hasn't been updated in 12 years, so why is it that there seems almost no real interest in a solid…
    comment by mr_mitm · 2024-04-26 · in Visualizing malicious IP addresses
  7. I much prefer the approach I read about in https://github.com/moxie0/knockknock (use a safe language, trust basically only the program you write and the language), to a random port daemon written in C which pulls libpcap to sniff…
    comment by rhaps0dy · 2024-04-01 · in Xzbot: Notes, honeypot, and exploit demo for the xz backdoor
  8. It's old and there are probably friendlier options out there now, but https://github.com/moxie0/knockknock/blob/master/INSTALL
    comment by AlexCoventry · 2024-04-01 · in Xzbot: Notes, honeypot, and exploit demo for the xz backdoor
  9. Some versions of port knocking require a specific type of packet. https://github.com/moxie0/knockknock
    comment by AlexCoventry · 2024-04-01 · in Xzbot: Notes, honeypot, and exploit demo for the xz backdoor
  10. …security. Plus, it seems really easy to setup, compared to writing dozens of iptables rules. [1]: https://github.com/moxie0/knockknock
    comment by Simsor · 2022-08-29 · in Show HN: Knockles – eBPF Port Knocking Tool
  11. Thanks! The only tool I can think of right now is moxie0's tool https://github.com/moxie0/knockknock back in 2011. About the TCP port, if it's already open, you'll just have to wait for the next HMAC because of the very limited…
    comment by eeriedusk · 2022-08-29 · in Show HN: Knockles – eBPF Port Knocking Tool
  12. …to KnockKnock, using OTP instead of a monotonic counter. Using OTP opens it up to replay attacks. https://github.com/moxie0/knockknock
    comment by sig-reduction · 2021-05-23 · in Tosh: Changing your SSH server's listen address every 30 seconds based on TOTP
  13. …If you don't want your SSH server being found by trivial port-scanning, apply port-knocking: https://github.com/moxie0/knockknock If you want to help secure the interwebs, host this tarpit to try to slow down network scanners:…
    comment by defend · 2020-09-21 · in Moving your SSH port isn’t security by obscurity
  14. I think this implementation avoids that problem. https://github.com/moxie0/knockknock
    comment by AlexCoventry · 2020-09-12 · in Security by obscurity is underrated
  15. Thanks, seems this is the (also outdated) repo: https://github.com/moxie0/knockknock Yes I suppose one of the forks is better nowadays
    comment by cutemonster · 2020-05-16 · in Port knocking
  16. …IP and TCP headers are encrypted request to open a specified port. Port is closed after connection. https://github.com/moxie0/knockknock/blob/master/knockknock-...
    comment by Nokinside · 2016-06-08 · in Obscurity Is a Valid Security Layer
  17. …( https://code.google.com/p/google-authenticator/ ) -- PAM support for TOTP * knockknock ( https://github.com/moxie0/knockknock ) -- Single Packet Auth using symmetric encryption
    comment by akerl_ · 2014-06-26 · in Show HN: Fail2web, a fail2ban GUI