Stealing unencrypted SSH-agent keys from memory

Instead of replacing SSH binaries on a compromised Linux host, testers can attach strace to running sshd via ptrace and read write() system calls to capture passwords and session content live.

NetSPI security experts share key insights from DEF CON 33's "Access Everywhere" theme, from networking with hackers to expanding security expertise through sessions and workshops.

Part one on pivoting across AWS Organizations: account boundaries, the 'easy win' of attacker-created member accounts, and abuse of trusted access, delegated administration and IAM Access Analyzer.

NetSPI releases Dockerized Linux hacking labs: vulnerable images with a Metasploit attacker container let learners safely practice exploiting misconfigured services like Rsync.

From command execution on an Azure App Services host, attackers can inspect the environment, reach storage and Azure SQL, and abuse Managed Identity tokens to access Key Vaults and escalate.

The final Linux case studies post builds a vulnerable Kali lab server, recreating the Rsync, NFS, phpMyAdmin, and sudo misconfiguration scenarios from the series for safe hands-on practice at home.