atomic-red-team/Linux/Credential_Access/Bash_History.md

Bash History

MITRE ATT&CK Technique: T1139

cat ~/.bash_history | grep -e '-p ' -e 'pass' -e 'ssh' > loot.txt