Jonathan Arbib

Tag: ssh

Interesting (possible) phishing for admins?

by on Oct.06, 2008, under Exploits, Tutorials

Read the posts on this forum

Then visit the site linked at the bottom of the page, or click here

That looks like phishing to me… Very simple attempt…

But could be effective if indeed it IS phishing…

To test it out, someone could perhaps create a “super” jailed ssh account on a system to perhaps see if someone attempts to login using those parameters… Someone wants to attempt it, and report back?

Leave a Comment :, , , , , , more...

Shortest passwordless ssh tutorial, ever

by on Aug.05, 2008, under Tutorials

I am readapting this tutorial from here for reference purposes only 🙂

Update: Thanks to Pedro for fix (rm ~/

Update: Thanks Mike G for typo/fix/correction

local$ ssh-keygen -t dsa
local$ scp ~/.ssh/ remote:~/
local$ ssh username@remote
remote$ cat ~/ >> ~/.ssh/authorized_keys
remote$ chmod 644 ~/.ssh/authorized_keys
remote$ rm ~/
remote$ exit
local$ ssh username@remote

Now instead of the normal password you should be asked for the password you entered for your dsa key. This isn’t passwordless yet but shows that ssh is using the key

Note: Leave Key password blank to have passwordless authentication

Fixes for possible problems:

chmod 0600 authorized_keys
ln -s authorized_keys2 authorized_keys (or viceversa)
5 Comments :, , , , more...

Looking for something?

Use the form below to search the site:

Still not finding what you're looking for? Drop a comment on a post or contact us so we can take care of it!