SSH caches keys of ongoing sessions in /tmp. Root can hijack, SSH to machine

Posted by frogger8 on Tuesday February 28, 2023 @03:58PM
from the twitter.com dept.

https://twitter.com/Alh4zr3d/status/1630556574409187328

( 3 comments | on HN )

Re:SSH caches keys of ongoing sessions in /tmp. Root can hij... by theamk on Tuesday February 28, 2023 @05:10PM (#34975628)

Someone discovered either "ssh-agent" or ssh agent forwarding.

I bet the next tweet from that account is: "Red Teamers: Check out ~/.ssh for user ssh keys! root user can hijack them and SSH to any machine the user can access"

[ Parent | on HN ]

Re:SSH caches keys of ongoing sessions in /tmp. Root can hij... by gladiatr72 on Tuesday February 28, 2023 @08:27PM (#34977565)

Um. Yeah. That's kinda how that whole root thing works.

[ Parent | on HN ]

Re:SSH caches keys of ongoing sessions in /tmp. Root can hij... by frogger8 on Tuesday February 28, 2023 @09:23PM (#34977973)

lol fair response

[ Parent | on HN ]