Parse SSH known_hosts
Tactic: Discovery
When a user connects to a remote computer via SSH, the remote computer's "host key" (unique identifier) is stored
locally. This key is used on future connections to avoid reauthenticating. A hacker can use this key to perform
man-in-the-middle attacks.
View Command
You must be logged in to view this TTPs command.
LoginTest this TTP
Download Operator (1.7.1)
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github