<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SSH on BrainBit Latest Articles</title><link>https://brainbit.uk/tags/ssh/</link><description>Recent content in SSH on BrainBit Latest Articles</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Sun, 17 Dec 2017 16:23:04 +0000</lastBuildDate><atom:link href="https://brainbit.uk/tags/ssh/index.xml" rel="self" type="application/rss+xml"/><item><title>How I allowed “hackers” to ssh into my server.</title><link>https://brainbit.uk/posts/how-i-allowed-hackers-to-ssh-into-my-server/</link><pubDate>Sun, 17 Dec 2017 16:23:04 +0000</pubDate><guid>https://brainbit.uk/posts/how-i-allowed-hackers-to-ssh-into-my-server/</guid><description>Sorry for this image!
In my previous article ( https://hackernoon.com/how-ive-captured-all-passwords-trying-to-ssh-into-my-server-d26a2a6263ec ) I’ve modified SSH in order to print the password that bots or “hackers” where trying against my server.
I felt that the next step is letting them in , so that’s what i did last week.
Disclaimer: They will be logging in to a container with minimal capabilities They won’t get shell , they will get a mock of a shell(sshesame) Any passwords that they try will work (to get all them h4ck3rs) This runs on a vanilla instance that I will destroy after this article If you don’t want to read all the implementatin the output can be found at the end of the article.</description></item><item><title>How I’ve captured all passwords trying to ssh into my server!</title><link>https://brainbit.uk/posts/how-ive-captured-all-passwords-trying-to-ssh-into-my-server/</link><pubDate>Sun, 03 Dec 2017 12:36:40 +0000</pubDate><guid>https://brainbit.uk/posts/how-ive-captured-all-passwords-trying-to-ssh-into-my-server/</guid><description>By default ssh logs out ssh attempts , wether they’re successful or not , what it doesn’t do by default is log out the passwords they’ve tried.
So i thought it would be a good idea to slightly modify ssh to log them passwords too.
So here we go , you will need to quickly compile openssh , zlib and openssl
Note you have to have build essentials gcc glibc-devel and others…</description></item></channel></rss>