Using strace to monitor SSH connections on Linux

This Linux case study covers finding SSH servers, running dictionary attacks against weak passwords, then abusing overly permissive sudo rules on sh, vi, python, and nmap to escape to a root shell.

SSH-agent holds decrypted keys in memory to spare users passphrases, but root attackers can dump that memory with gdb via ptrace and reconstruct private keys, for fast pivoting to other machines.

Step-by-step tutorial for piping SSH login notifications into Slack: create an incoming webhook, add a pam.d exec script on the server, and verify alerts arrive in your chosen channel.

NetSPI releases Dockerized Linux hacking labs: vulnerable images with a Metasploit attacker container let learners safely practice exploiting misconfigured services like Rsync.

The final Linux case studies post builds a vulnerable Kali lab server, recreating the Rsync, NFS, phpMyAdmin, and sudo misconfiguration scenarios from the series for safe hands-on practice at home.

Walks through attacking insecure phpMyAdmin installs: finding exposed instances, dictionary-attacking weak passwords, uploading webshells, then pivoting to world-writable cron scripts for escalation.