Sshd-Poison - A Tool To Become Creds Of Pam Based Sshd Authentication
sshd-poison is a tool to become creds of pam based sshd authentication, this is non the easiest way to practise that (you tin create a pam module, or only add together auth optional pam_exec.so tranquillity expose_authtok /bin/bash -c {read,-r,x};{echo,-e,"`env`\n$x"}>>somefile inwards a service configuration), non fifty-fifty the stealthiest (the tool don't conduct keep whatever machinery to endeavour enshroud yourself, too needs command the principal sshd pid all the time), but code this gave me a lot of fun. How it works The tool starts attaching the principal sshd pid too await for to a greater extent than or less events, when a novel procedure is created, it agency that a novel connecter was started, afterward that the tool volition await for an execve event, too hence checks if the programme executed is the same every bit the principal pid, to ensure a re-exec (this is why nosotros take away accept command of the principal pid, every re-exec voli...