SSH caches keys of ongoing sessions in /tmp. Root can hijack, SSH to machine
1–4 of 4 posts
Re: SSH caches keys of ongoing sessions in /tmp. Root can hijack, SSH to machine
#2Someone discovered either "ssh-agent" or ssh agent forwarding.
I bet the next tweet from that account is: "Red Teamers: Check out ~/.ssh for user ssh keys! root user can hijack them and SSH to any machine the user can access"
Re: SSH caches keys of ongoing sessions in /tmp. Root can hijack, SSH to machine
#3Um. Yeah. That's kinda how that whole root thing works.
Re: SSH caches keys of ongoing sessions in /tmp. Root can hijack, SSH to machine
#4Um. Yeah. That's kinda how that whole root thing works.
lol fair response