Infecting SSH Public Keys with Backdoors (opens in new tab)

(blog.thc.org)

3 pointsphilprx3y ago2 comments

2 comments

2 comments · 1 top-level

philprxOP3y ago· 1 in thread

Who password protect they private SSH keys? Many. Who reads their own ~/.ssh/* before using command? Nobody. Lateral movement even with protected private keys.

davidcollantes3y ago

If using someone else’s public key, I always check the key itself (it doesn’t take long, and it is easy to spot “problems” like these).

This is a nice little hack, but I don’t see it flourishing in the wild.

j / k navigate · click thread line to collapse