Skip to content

Instantly share code, notes, and snippets.

@ZacFran

ZacFran/Post_Exploitation.md

Created August 7, 2023 13:43
Show Gist options
  • Save ZacFran/8ff09a7e4063a99d7ec381f09c142bf7 to your computer and use it in GitHub Desktop.
Save ZacFran/8ff09a7e4063a99d7ec381f09c142bf7 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
Post_Exploitation.md

Notes

SSH Keys
SSH keys are asymetric(public/private) key pairs that can be used to authenticate a user to a system in combination with or to replace the use of a password
If you are able to find a users private ssh key it can potentially be used to gain access to other systems

Using Stolen SSH Keys

Bring private key to your own box

On your box:

chmod 600 /home/student/stolenkey
ssh -i /home/student/stolenkey [email protected]

ssh as the user who is the original key owner

  • control Sockets a A way to write ssh keys to a socket file. This allows you to ssh without providing credentials.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment