#portknocking — Public Fediverse posts

@ireneista @darkuncle @tg

Just curious, does anyone still use #PortKnocking, or has stuff like Tailscale relegated that to the bitbucket of #infosec praxis?

What is Port Knocking Implementation and Security: A Comprehensive Guide

https://denizhalil.com/2026/04/06/port-knocking-implementation-security-guide

#CyberSecurity #PortKnocking #NetworkSecurity #DefenseInDepth #LinuxSecurity #ServerSecurity

What is Port Knocking Implementation and Security: A Comprehensive Guide

https://denizhalil.com/2026/04/06/port-knocking-implementation-security-guide

#CyberSecurity #PortKnocking #NetworkSecurity #DefenseInDepth #LinuxSecurity #ServerSecurity

When #PortKnocking was first introduced, somebody made a fork of #PuTTY which had it built in. We didn't take the patch upstream, because it seemed so likely that port knocks would keep evolving and we'd have to run to keep up; we thought a better design would be to delegate to a "make my connection, with any necessary knocks" sub-tool.

But the best thing about this fork was its name. The author called it PoTTY. And it came with a full suite of supporting tools with names like Pogeant and Plonk. Top marks!

When #PortKnocking was first introduced, somebody made a fork of #PuTTY which had it built in. We didn't take the patch upstream, because it seemed so likely that port knocks would keep evolving and we'd have to run to keep up; we thought a better design would be to delegate to a "make my connection, with any necessary knocks" sub-tool.

But the best thing about this fork was its name. The author called it PoTTY. And it came with a full suite of supporting tools with names like Pogeant and Plonk. Top marks!

When #PortKnocking was first introduced, somebody made a fork of #PuTTY which had it built in. We didn't take the patch upstream, because it seemed so likely that port knocks would keep evolving and we'd have to run to keep up; we thought a better design would be to delegate to a "make my connection, with any necessary knocks" sub-tool.

But the best thing about this fork was its name. The author called it PoTTY. And it came with a full suite of supporting tools with names like Pogeant and Plonk. Top marks!

When #PortKnocking was first introduced, somebody made a fork of #PuTTY which had it built in. We didn't take the patch upstream, because it seemed so likely that port knocks would keep evolving and we'd have to run to keep up; we thought a better design would be to delegate to a "make my connection, with any necessary knocks" sub-tool.

But the best thing about this fork was its name. The author called it PoTTY. And it came with a full suite of supporting tools with names like Pogeant and Plonk. Top marks!

This is an interesting piece about port-knocking backdoors in Juniper routers. Ineligible for the bingo, but interesting nonetheless.

https://heise.de/-10258876

Portknocking is not a new concept - I encountered it in the early 2000s and wrote my very first article in c't about it, while spending some evenings in the CCC Hannover's meeting room which I remember as a very "old school hacker den", in the literal sense (it was in a school's attic).
#backdoor #juniper #apt #portknocking

Finally, an industrial-scale "Single Packet Authentication" implementation - https://www.theregister.com/2025/01/25/mysterious_backdoor_juniper_routers/ #security #backdoors #portknocking #singlepacketauthentication #SPA

Reminds me of my own "Why Not Use Port Knocking" (2012) https://nxdomain.no/~peter/why_not_use_port_knocking.html (part of the Hail Mary Cloud sequence, summarized at https://nxdomain.no/~peter/hailmary_lessons_learned.html)

Finally, an industrial-scale "Single Packet Authentication" implementation - https://www.theregister.com/2025/01/25/mysterious_backdoor_juniper_routers/ #security #backdoors #portknocking #singlepacketauthentication #SPA

Reminds me of my own "Why Not Use Port Knocking" (2012) https://nxdomain.no/~peter/why_not_use_port_knocking.html (part of the Hail Mary Cloud sequence, summarized at https://nxdomain.no/~peter/hailmary_lessons_learned.html)

Finally, an industrial-scale "Single Packet Authentication" implementation - https://www.theregister.com/2025/01/25/mysterious_backdoor_juniper_routers/ #security #backdoors #portknocking #singlepacketauthentication #SPA

Reminds me of my own "Why Not Use Port Knocking" (2012) https://nxdomain.no/~peter/why_not_use_port_knocking.html (part of the Hail Mary Cloud sequence, summarized at https://nxdomain.no/~peter/hailmary_lessons_learned.html)

Finally, an industrial-scale "Single Packet Authentication" implementation - https://www.theregister.com/2025/01/25/mysterious_backdoor_juniper_routers/ #security #backdoors #portknocking #singlepacketauthentication #SPA

Reminds me of my own "Why Not Use Port Knocking" (2012) https://nxdomain.no/~peter/why_not_use_port_knocking.html (part of the Hail Mary Cloud sequence, summarized at https://nxdomain.no/~peter/hailmary_lessons_learned.html)

Finally, an industrial-scale "Single Packet Authentication" implementation - https://www.theregister.com/2025/01/25/mysterious_backdoor_juniper_routers/ #security #backdoors #portknocking #singlepacketauthentication #SPA

Reminds me of my own "Why Not Use Port Knocking" (2012) https://nxdomain.no/~peter/why_not_use_port_knocking.html (part of the Hail Mary Cloud sequence, summarized at https://nxdomain.no/~peter/hailmary_lessons_learned.html)

Apriamo le #porte per #SSH o altri servizi SOLO per il nostro IP e TEMPORANEAMENTE, imparando ad utilizzare il #PortKnocking su #Linux e #raspberrypi:

https://www.risposteinformatiche.it/come-proteggere-linux-con-knockd-port-knocking/

#UnoLinux #OpenSource #CyberSecurity #Security #`Sicurezza #Tutorial #Utility #Network #Debian #Ubuntu

#heise erklärt (natürlich hinter der Paywall) wie man #Portknocking einrichtet. Habe noch nie davon gehört, ist das so sinnlos wie das klingt? Hat starke "How to send Hackers to SSH-jail" vibes.

https://www.heise.de/ratgeber/Raspi-Projekt-Computer-im-Netz-mit-Portknocking-schuetzen-7435203.html

Hiding Links in Plain Sight with Bookmark Knocking - Have you ever been looking for a screwdriver, USB stick, or your keys, only to fin... - https://hackaday.com/2021/08/10/hiding-links-in-plain-sight-with-bookmark-knocking/ #securitythroughobscurity #securityhacks #softwarehacks #portknocking #obfuscation #javascript #security #base64