Esonhugh/sshd_backdoor

This is stars and forks stats for /Esonhugh/sshd_backdoor repository. As of 10 May, 2024 this repository has 301 stars and 34 forks.

sshd_backdoor This Project is based on BlackHat USA 2021 and Defcon 29. About Using ebpf technique, hijacking the process during sshd service getting the ~/.ssh/authorized_keys to authorize user logging and injecting our public key make our login successful. Demo Main Process in ebpf program Hook OpenAt syscall enter: check if the sshd process call this, log the pid of sshd. Hook OpenAt Syscall exit: check the pid logged. logging the fd of pid, map pid->fd. Hook Read Syscall enter: check the pid...