Rare find

ssh-keysign-pwn. Steal SSH host private keys and /etc/shadow via the ptrace_may_access mm-NULL bypass + pidfd_getfd. Pre-31e62c2ebbfd kernels.

github.com/0xdeadbeefnetwork/ssh-keysign-pwn

Vaya's read on this project

Problem, audience, market, and the verdict — sign in to see it.

Updates

No recent activity.