SSH caches keys of ongoing sessions in /tmp. Root can hijack, SSH to machinetwitter.com 2 pointsfrogger83 years ago3 commentsSaveHideCopy link On HNComments−theamk3ySomeone discovered either "ssh-agent" or ssh agent forwarding.I bet the next tweet from that account is: "Red Teamers: Check out ~/.ssh for user ssh keys! root user can hijack them and SSH to any machine the user can access"−gladiatr723yUm. Yeah. That's kinda how that whole root thing works.−frogger8OP3ylol fair response
Comments
Someone discovered either "ssh-agent" or ssh agent forwarding.
I bet the next tweet from that account is: "Red Teamers: Check out ~/.ssh for user ssh keys! root user can hijack them and SSH to any machine the user can access"
Um. Yeah. That's kinda how that whole root thing works.
lol fair response