guardicore / guardicore/monkey

Investigate use of `ssh-agent` for exploitation

Open
#2,614 0 comments 0 reactions 0 assignees View on GitHub
Complexity: High Exploit Impact: High Spike
Dominant language
Python
Stars
7.1k
Forks
830
PR merge metrics
No merged PRs in 30d

Description

# Spike
## Objective
See last comment on #2589.
It may be possible for us to use `ssh-agent` for exploitation. [This](https://rabexc.org/posts/using-ssh-agent) is a good read to understand what `ssh-agent` does. Since it saves keys, could we use this without ever having access to the keys? Look into how we can do this using paramiko.

## Scope
Figure out if we can use `ssh-agent` for exploitation.
Time boxed: 1.25d

## Output
An issue and a prototype if it can be used. An explanation if it can't.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.