-
Notifications
You must be signed in to change notification settings - Fork 14k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Rservice docs #8372
Rservice docs #8372
Conversation
What year... oh. |
The R Services (rexecd, rlogind, and rshd) are a suite of unencrypted remote command/login services developed in the 1980s. | ||
These services are all but unused in modern computing, as they have been replace by telnet and ssh. | ||
|
||
`rsh` relies on host names as a security mechanism. Utilizing `+` can wildcard so any computer can connect. In the following |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
you might note there are exceptions to this rule in proprietary Unix systems. For instance, Kerberos is also supported by the rsh in AIX (though the contents of the session are still unencrypted):
https://www.ibm.com/support/knowledgecenter/en/ssw_aix_71/com.ibm.aix.cmds4/rsh.htm
Useful info from a pentester PoV, where you might get access to an AIX LPAR and pivot around.
💪 your AIX knowledge!!! This is part of why im actually really enjoying writing the docs, everyone has great insight (@wvu-r7 got me on x11 stuff). |
Thank you for doing the real work, @h00die. 🙇 |
Thanks @hoodie. |
Release NotesDocumentation has been added on the rservice modules rsh, rlogin, and rexec. |
Adds docs for the rservices. yes those ones from the 1980s.
To answer the question before its asked, its 2017.
Part of #8296
Verification