3 ms·
Unrestricted sudo is certainly dangerous. The scripts I have used in the past to test for passwordless sudo call sudo -n It's a nice way to see if you can
by LinuxBender 5y ago
Unrestricted sudo is certainly dangerous. The scripts I have used in the past to test for passwordless sudo call
sudo -n
It's a nice way to see if you can run commands as root with nothing more than getting someone to execute a script. To my surprise it turns out about 10% of an organization will do just that.
- BuildTheRobots 5y agoTo be honest, I was more thinking that if it's your desktop or user password, then it's likely to be easily typeable (people unlock their laptops multiple times a day), compared to an occasionally copy/pasted password from a safe. I didn't even think about passwordless sudo :)
- LinuxBender 5y agoPasswordless sudo + SSH Multiplexing negate the need for any back doors at the end of the day. As a bonus, anti-malware software will never detect or report on using ssh and sudo. Combine those with some obfuscation tools likely already installed on the victims machine called by a python or shell script and you can walk in the front door of just about any organization on earth.