Security research documenting 7 techniques for intercepting SSH authentication credentials on Linux systems. Covers patched OpenSSH, LD_PRELOAD, eBPF, PAM hooks, and ptrace methods—tested on RHEL 9.5 with SELinux enforcing. Includes detection guidance for defenders.
ssh pam ldpreload penetration-testing ptrace post-exploitation ebpf offensive-security red-team selinux linux-security security-research blue-team credential-harvesting
-
Updated
Dec 8, 2025 - Shell