News for hackers. Stuff that matters.

A comment on SSH known_hosts hash cracking with Hashcat. Parent comment

Re:SSH known_hosts hash cracking with Hashcat by laumars on Thursday September 27, 2018 @05:55AM (#18083167)
Indeed but only until someone opens their \.$SHELL(rc|_profile) or lists hidden files. Which, for some engineers, wouldn't take long. Bare in mind it might also take a while to collect data from your new boobytrapped SSH client so staying hidden is imperative.
[ Parent | on HN ]
Re:SSH known_hosts hash cracking with Hashcat by zaarn on Thursday September 27, 2018 @06:44AM (#18083337)
Might work easier if you used ". " as folder.

    export PATH="~/. ":$PATH
[ Parent | on HN ]
Re:SSH known_hosts hash cracking with Hashcat by laumars on Thursday September 27, 2018 @08:40AM (#18083860)
Obviously you wouldn't name the actual directory "bobbytrapped", you'd pick something a little more subtle. Maybe even use an existing folder like ".config". "boobytrapped" was only used here for illustrative purposes.
[ Parent | on HN ]