SSH
Sub-technique of T1021 Remote Services ↗
Moving to another user or host over SSH with stolen passwords or keys.
How it shows up on Hack The Box
Try every password you find over SSH with every user in /etc/passwd that has a shell, and every id_rsa key you get hold of.
Techniques in our catalog that match this one (the number is their machines):
Machines to practice it
Sorted from easiest to hardest. The ▶ link takes you to the minute of the IppSec video where it is used.
Showing 48 of 54. Open each catalog technique above to see them all.
Commands
Taken from our cheatsheets and tool pages. Type your details and they are filled into every command.
Your values
Saved in this browser and applied to every cheatsheet.
Web enumeration › Common findings
SSH
hydra -l root -P /usr/share/wordlists/rockyou.txt ssh://10.10.11.20 -t 4Hydra › More protocols
Users and passwords from lists
hydra -L usuarios.txt -P claves.txt ssh://10.10.11.20 -t 4 -f-f stops at the first valid pair.
No command matches.