diff --git a/payloads/library/remote_access/SSHhhhhh (Linux)/readme.md b/payloads/library/remote_access/SSHhhhhh (Linux)/readme.md index d679a838..efa9e49e 100644 --- a/payloads/library/remote_access/SSHhhhhh (Linux)/readme.md +++ b/payloads/library/remote_access/SSHhhhhh (Linux)/readme.md @@ -6,7 +6,7 @@ ## Description ## Target = Unlocked Linux machine (only tested on Ubuntu 18.04 LTS) -###Base install of OS, plus OPENSSH-SERVER & NET-TOOLS (if NET-TOOLS is not installed, the route command will not return data [noting major]) +Base install of OS, plus OPENSSH-SERVER & NET-TOOLS (if NET-TOOLS is not installed, the route command will not return data [noting major]) ## Loot = Contents of ~/$USER/.ssh folder (pub/priv RSA keys, known_hosts, etc..) whoami @@ -21,7 +21,7 @@ uname -a -Two opportunites for persistence are injected: +##Two opportunites for persistence are injected: Attacker's RSA key is added to ~/$USER/.ssh/authorized_keys (aka I'll Call You)