3 ms·
How would one even go about doing this? Do you just keep trying difference ssh key values? I never understood how people can just magically "gain access" to s
by kevin818 13y ago
How would one even go about doing this? Do you just keep trying difference ssh key values?
I never understood how people can just magically "gain access" to servers.
- alexjeffrey 13y agoin this case it was supposedly done using SQL injections: http://en.wikipedia.org/wiki/SQL_injection#Incorrectly_filtered_escape_characters http://en.wikipedia.org/wiki/SQL_injection#Incorrectly_filte...
- wiml 13y agoIt can be pretty enlightening to read the few postmortems of big hacks that do get published. Another seemingly common scenario (aside from a direct attack on the server) is to spear-phish someone else inside the company, not necessarily an admin or anyone technical, into clicking on some flash applet or trojan'd excel doc or something that owns their machine, then install keyloggers, proxies, etc., and work from there until you snag a credential that lets you into the server you actually want.
- deleted 13y ago[deleted]