Skip to content

Commit

Permalink
Fix md
Browse files Browse the repository at this point in the history
  • Loading branch information
enriquearizon committed Oct 8, 2024
1 parent 2cdcdc7 commit f8b8cf9
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions linux_security.txt
Original file line number Diff line number Diff line change
Expand Up @@ -113,13 +113,16 @@ Endlessh exploits a little paragraph in RFC 4253, the SSH protocol specification
```
SSH-protoversion-softwareversion SP comments CR LF
```


- The RFC also notes: """ server MAY send other lines of data before sending the
version string.```
version string....
There is no limit on the number of lines, just that these lines must not begin
with “SSH-“ ... Endlessh sends and endless stream of randomly-generated
“other lines of data” without ever intending to send a version string.
By default it waits 10 seconds between each line. This slows down the protocol,
but prevents it from actually timing out.
but prevents it from actually timing out."""

- This means Endlessh need not know anything about cryptography or the vast majority
of the SSH protocol. It’s dead simple.

Expand Down

0 comments on commit f8b8cf9

Please sign in to comment.