skyper
skyper
This is powerful and rather complicated to explain. The problem: normally traffic generated on a segfault-shell goes via sf-router. The sf/router uses multihop VPN's to tunnel all traffic via Mullvad/Nordvpn...
would allow users to use all kind of DNS tunneling tools (dnscat2, DNSExfiltrator etc). Example: Root server is called 'OxygenFlower'. Any DNS request for `*.oxygenflower.segfautl.net' would be redirected to port...
It is unstable/unknown what happens to Port Forwards on VPN DOWN/UP. Does CS reset all forwards? Do we need to assign all forwards again to all clients? Do we need...
L managed to create containers that enter CREATED state but never each running. Find out how. Needs fixing in `check_limit_server_by_ip` so that only running containers count (but anything but running...
This is an enhancement to increase security in case somebody can exploit SSHD or segfaultsh: - Have a separate container where the sf-scheduler runs. Listen on a socket. - Let...
That's a big one as we are already inside docker and cant use DinD. Needs a micro Linux VM (executed by qemu because there is no /dev/kvm). Then run Docker...
race condition where both try to spawn and 1 fails because the other got there first...(and the failing one should have done docker-exec instead of docker-run). would need mutex/semaphore but...
Shall we allow the user to 'store' his SECRET with the host-server (advise on the risk!!!) _if_ he likes his VM to start back up on host-server reboot? That would...
Allow users to have segfault.net as wireguard endpoint and use segfault.net as their first hop to access the Internet via our multihop VPN router (sf-router). No registration required. Allow two...