SSH agent socket file access
STEPS:
1) Check if PAM for sudo has been configured to accept SSH keys:
cat /etc/pam.d/sudoFile contents
auth sufficient pam_ssh_agent_auth.so file=/etc/ssh/sudo_authorized_keys
session required pam_env.so readenv=1 user_readenv=0
session required pam_env.so readenv=1 envfile=/etc/default/locale user_readenv=0
@include common-auth
@include common-account
@include common-session-noninteractive2) Check if the user that has signed in has used sudo:
ps aux3) Find an SSH agent socket file fot the shell process we can access:
ls -la /tmp/ssh-WHATEVER/agent.####4)
5)
6)
7) PWNED!
Last updated