0

Is it possible to add an ssh key to a system and make hidden (at least at first glance) from the user?

UPD: Recently I was participating in a CTF and had access to another team's machine. I wanted to persist my access in a way that they won't notice. This is why I am looking for such stuff.

  • Make all the keys the same size and remove the comments and they're all pretty much indistinguishable at first glance. – muru Dec 10 '19 at 3:00
0

No,

Why would you want to do that?

  • Recently I was participating at a CTF and had access to another team's machine. I wanted to persist my access in a way that they won't notice. – Bat Dec 10 '19 at 2:38
  • @Bat Look up ControlPersist in man ssh_config. – muru Dec 10 '19 at 3:01
  • @muru AFAIK that's still going to show up in netstat which is the first thing anyone would check. – user1133275 Dec 10 '19 at 3:27
  • @user11 if they're relying on the team not noticing new keys in their authorized_keys, they might as well rely on them not using netstat to check current connections. – muru Dec 10 '19 at 4:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.