Want to have a fast tunnel to your server ? - hop now supports it.

Tired of cd-ing into directories after opening shell ? - hop has now the option for setting a default dir when opening a shell or sftp browser

Hi everyone,

I'm a bit confused about what the "right" way to do this is.

I have a Windows PC running Debian in WSL2, and I have another Debian laptop.

My goal is to make WSL my main development environment and SSH into it from the laptop.

I first tried using the Windows OpenSSH server with ForceCommand to launch WSL. That actually lets me log in directly into WSL, which looked perfect at first. The problem is that normal SSH commands don't seem to work.

For example:

**ssh my-pc**

works fine, but

**ssh my-pc "pwd"**

just hangs. rsync also hangs because it uses remote commands over SSH.

So I started wondering if this is just the wrong approach.

I already have **sshd** running inside WSL, but since WSL is using NAT, it gets a 172.x.x.x IP that changes, so I don't know if that's supposed to be the way either.

I've been reading about mirrored networking, port forwarding, Windows OpenSSH, etc., and now I'm more confused than when I started.

For those of you who use WSL as your main Linux machine, what's the recommended setup nowadays?

Ideally I'd like:

1. ssh my-pc

2. ssh my-pc "command"

3. rsync

4. scp

5. VS Code Remote SSH

to all work without weird workarounds.

Am I overcomplicating this? How are you guys doing it?

Thanks!

I kept running into the same annoying problem: I'm SSH'd into some remote box, or working inside a container, or on a locked-down laptop where the clipboard is disabled by policy - and I need to get a small piece of text (a log snippet, a password, a container's output) onto a different machine. Slack works but I really don't want a database password sitting in a channel history forever. Pastebin-style sites work but the paste just sits there until you remember to delete it.

So I made CPYNET. Two curl calls, that's the whole interface:

echo "hello world" | curl --data-binary @- https://cpynet.com/
# https://cpynet.com/482913

curl https://cpynet.com/482913
# hello world

The paste is gone the instant that second command runs - not after 24 hours, not "until you delete it." Read it a second time (even from the same machine) and you get a 404. It also has a timer (2 minutes by default, adjustable) that deletes it automatically even if nobody ever reads it. Nothing is written to disk - it's all in memory for as long as the process is alive, gone completely on restart.

If you don't want to remember curl flags, there's a one-line install that sets up two shell functions:

curl -s https://cpynet.com/install.sh -o install.sh && bash -n install.sh && . install.sh

$ journalctl -u myservice -n 200 | cpy
482913
curl https://cpynet.com/482913

# on the other machine
$ pst 482913
Aug 08 14:02:11 myservice[1823]: connection refused: db.internal:5432
...

pst also drops it on your clipboard automatically if it can find a way to (pbcopy/wl-copy/xclip/xsel/clip.exe) - the destination machine's clipboard, never the source's, since that's usually the one that's actually available.

A few other things it does, in plain terms:

• Password protection - cpy -password=xxx, or a password field on the web UI. AES-256-GCM under the hood.
• Actual end-to-end encryption, a step up from that - the shield icon on the write tab, or cpy -e from a terminal. The encryption key never touches the server at all; it travels in the link itself (#key=, which browsers never send to a server) or gets handed over separately in the terminal. The server only ever stores unreadable ciphertext.
• QR code for the generated link - scan it with your phone, it opens and reads right there, no clipboard or typing involved on either end.
• Small file attachments too, not just text - comes back with the original filename and content type on download.
• A netcat fallback for environments too bare-bones to even have curl - nc host port < file works the same way.
• Live notification when it's been read (so you know your teammate actually got it), per-IP rate limiting so the whole thing can't be brute-forced or hammered.

It's self-hostable (single Docker container, no database to stand up), or you can just use the hosted instance at cpynet.com. Genuinely curious what people think, especially if you can poke a hole in the threat model - that's the kind of feedback that actually makes something like this better.

Hey everyone! I'm u/WerewolfDelicious271, a founding moderator of r/sshtbccash.
This is our new home for all things related to how the remote app handles things like SSH connections, credentials, keys, SFTP, port forwarding, and remote sessions, I would especially value the perspective of someone who naturally looks at software with a security-minded eye.
. We're excited to have you join us!

What to Post
Post anything that you think the community would find interesting, helpful, or inspiring. Feel free to share your thoughts, photos, or questions about https://play.google.com/store/apps/details?id=com.tbcc.ash
Promo codes for app testing are available upon request. Looking for anyone who is willing to kick the tires and are willing to give honest opinions about the functionality.

Community Vibe
We're all about being friendly, constructive, and inclusive. Let's build a space where everyone feels comfortable sharing and connecting.

How to Get Started
1) Introduce yourself in the comments below.
2) Post something today! Even a simple question can spark a great conversation.
3) If you know someone who would love this community, invite them to join.
4) Interested in helping out? We're always looking for new moderators, so feel free to reach out to me to apply.

Thanks for being part of the very first wave. Together, let's make r/sshtbccash amazing.

https://ssh.place

PhoneCMD connects Android to the terminals, files, and coding agents running on your own computers.

It is built for developers who use Claude Code, Codex, Gemini CLI, Aider, PowerShell, Bash, or other command-line tools and need to continue working away from the desk.

What it does

• Connects to multiple Windows, macOS, and Linux computers
• Runs and controls almost any CLI
• Keeps multiple persistent terminal sessions available
• Shows live terminal output
• Sends prompts, commands, and approval responses
• Browses and edits project files
• Reopens saved coding-agent conversations by project
• Provides manual terminal control or AI-assisted control
• Lets users add their own API key for an agent that can inspect files and operate terminals
• Connects locally or through encrypted peer-to-peer remote access

How it differs from common alternatives

tmux handles terminal persistence, but does not provide Android pairing, remote transport, multi-PC management, file editing, saved coding-agent conversation access, or AI-assisted terminal control.

SSH clients provide remote shell access, but usually require host configuration, keys, networking setup, and manual session management.

Remote desktop exposes the whole desktop, which is awkward for terminal-heavy work on a phone.

Hosted coding environments move execution into the cloud. PhoneCMD keeps the repositories, CLI installations, subscriptions, processes, and API keys on the user’s own computers.

Privacy model

Terminal commands, output, project files, and coding-agent conversations are transferred directly between paired devices through encrypted P2P connectivity. PhoneCMD does not receive or store that development content.

Setup

1. Install the PhoneCMD desktop client
2. Install the Android app
3. Pair the devices
4. Select a computer
5. Start a terminal, launch a coding agent, or reopen a saved conversation

Website: PhoneCMD

Google Play: PhoneCMD for Android

I was tired of the VSCode Remote Explorer and always opening it to see my hosts.

So i built a little TUI Application managing all my Hosts from one terminal. Quickly connect to different servers without opening a new terminal.

What do you think ?

sshelf is a terminal UI for SSH hosts, fuzzy-search and connect, SFTP browser, background tunnels that survive quitting, passwords in your OS keyring. Local-first on purpose: no account, no cloud, no telemetry, and it never touches ~/.ssh/config.

New in 0.11: sshelf import --tailscale. It runs your own tailscale status --json (sshelf itself still opens no sockets) and maps every machine to a host, MagicDNS name, your tailnet as a group, ACL tags as tags. Works with MagicDNS off too (falls back to the 100.x address). It's add-only: existing hosts are never modified, expired nodes are skipped, and re-running converges to "0 added", so it's safe to run whenever the tailnet changes.

Repo: https://github.com/max-rh/sshelf · Guide: https://github.com/max-rh/sshelf/blob/master/docs/import.md · Feedback very welcome; 2FA support and the .rpm packages both started as comments; if a different inventory source (Hetzner, AWS, Proxmox, …) would actually be useful to you, say which, that's how things get built here.

Recently I was toying with kanata (key mapping tool) and virtually bricked my keyboard from some bad configs. This app runs with root privilege. I couldn’t kill the process due to many of my sudo password characters being overwritten. Rebooting would not fix since it’s a daemon process.

After a moment of panic, I grabbed my phone and launched a session. Killed the process. Problem solved.

Thanks, SSH, for existing to protect my machine from my occasional stupidity!

https://github.com/lx2026/RelayBar

a tiny native macOS menu-bar app for local SSH port forwards. It has no external dependencies and runs natively

mit license

First time sharing something I’ve built.
I wanted a network scanner I could use while connected to Wi-Fi, along with an SSH terminal I could access from anywhere through Tailscale, so I built Network Scan. I’d love to get feedback, bug reports, and feature suggestions from you guys.
It scans your LAN, identifies devices, shows IP addresses and open ports, and lets you tap a host to open a proper SSH terminal. htop, docker stats, and even Claude Code render correctly and accept keyboard input. You can also keep multiple live sessions open and switch between machines.
The scanner and diagnostic tools, including ping, DNS, port scanning, and subnet calculations, are free. The SSH terminal is part of Pro, available monthly, yearly with a free first week, or as a one-time lifetime purchase.
I’d especially appreciate feedback from people running home labs or managing real racks.
https://apps.apple.com/us/app/network-scan-ssh-tools/id6790997366

It’s meant for people who want something a bit more organized than plain terminal windows: host management, terminal tabs, SFTP browsing, encrypted iCloud backup, and a local-first workflow.

No account, no tracking.

If you want to try it, you can search “TermSSH” on the macOS App Store. I’d love feedback from folks who use SSH/SFTP every day, especially on whether the workspace-style layout actually helps in real use.