Infecting SSH Public Keys with Backdoorsblog.thc.org 3 pointsphilprx3 years ago2 commentsSaveHideCopy link On HNComments−philprxOP3yWho password protect they private SSH keys? Many. Who reads their own ~/.ssh/* before using command? Nobody. Lateral movement even with protected private keys.−davidcollantes3yIf using someone else’s public key, I always check the key itself (it doesn’t take long, and it is easy to spot “problems” like these).This is a nice little hack, but I don’t see it flourishing in the wild.
Comments
Who password protect they private SSH keys? Many. Who reads their own ~/.ssh/* before using command? Nobody. Lateral movement even with protected private keys.
If using someone else’s public key, I always check the key itself (it doesn’t take long, and it is easy to spot “problems” like these).
This is a nice little hack, but I don’t see it flourishing in the wild.