Re:Bypassing Authentication on SSH Bastion Hosts
by mercora on Tuesday November 12, 2019 @02:05PM
(#21517020)
dont people authenticate indiviually using their own credentials on a common bastion host? that seems quite odd to me and like the actual issue here. if you got root already on the bastion host there are quite a few ways to obtain credentials i would guess...
[ Parent
| on HN ]
Re:Bypassing Authentication on SSH Bastion Hosts
by Piskvorrr on Wednesday November 13, 2019 @05:27AM
(#21522643)
Not all credentials are name+password (in fact, using password over SSH is the least secure option available): user authenticates using their name+ssh key. Nothing too useful can be captured from that set of credentials, except to confirm their identity. If they also use an U2F, there's no way to capture that: "I am user Piskvorrr...but have no way to prove it."
OTOH, this method captures their session, in other words, "I am user Piskvorrr and I have already proven it by successfully authenticating".