Re:SSH caches keys of ongoing sessions in /tmp. Root can hij...
by theamk on Tuesday February 28, 2023 @05:10PM
(#34975628)
Someone discovered either "ssh-agent" or ssh agent forwarding.
I bet the next tweet from that account is: "Red Teamers: Check out ~/.ssh for user ssh keys! root user can hijack them and SSH to any machine the user can access"
I bet the next tweet from that account is: "Red Teamers: Check out ~/.ssh for user ssh keys! root user can hijack them and SSH to any machine the user can access"