Text Size
Open-source FTP and SSH Browser for Mac OS X
updated 07:55 pm EDT, Thu August 14, 2003
is an open source SFTP (SSH Secure File Transfer) and FTP browser licenced under the GPL. Cyberduck features the same intuitive interface for both FTP and SFTP browsing. Cyberduck is now Mac only, with a completly rewritten user interface using the Cocoa Framework. You can open connections to multiple servers thanks to its document based interface. A simple favorites manager allows you to store freuqently used servers.
Open Source get organized
08/14, 08:38pm reply
Why reinvent the wheel?
MacNN.com Reader
Fresh-Faced Recruit
Joined: Jul 2001
Man in the middle attack!
08/15, 03:28am reply
Watch out for Cyberduck! I tried to connect to my local server using sftp when it prompted me that the server was not yet known and if I would accept the servers ssh fingerprint. This seemed very strange to me so I checked my servers fingerprint and it did NOT match!
Netstat shows:
tcp4 157 0 192.168.8.102.56610 vo157.neoplus.ad.ssh CLOSE_WAIT
tcp4 157 0 192.168.8.102.56609 vo157.neoplus.ad.ssh ESTABLISHED
And vo157.neoplus.ad is definitely not my server. Accepting the fingerprint would give the unknown vo157.neoplus.ad server my login and password! And they could read al traffic going back and forth.
MacNN.com Reader
Fresh-Faced Recruit
Joined: Jul 2001
No more attack
08/21, 02:45am reply
I can no longer reproduce the strange Netstat listing. The fingerprint shown by Cyberduck is of the dsa key, the commandline tools uses the rsa version. This is what Cyberduck shows the Unknown host dialog even for servers previously accessed via the terminal.
MacNN.com Reader
Fresh-Faced Recruit
Joined: Jul 2001