/tech/ - Technology★

>>1009498 (OP)

fuck, forgot link

https://www.welivesecurity.com/wp-content/uploads/2018/12/ESET-The_Dark_Side_of_the_ForSSHe.pdf

>>1009500

It's about malware, not vulnerablilties

This is about persistence strategies by installing a backdoored version of openssh.

I do pen testing and shit (Kali Linux etc)

do they mean there's a backdoor in SSH itself, or are they referring to backdoors that make use of SSH? like someone gets a reverse shell with netcat and then they set up an SSH account or some shit

not the same thing at all, this needs less ambiguous language, also I don't trust PDFs

>>1009590

b-but muh PDF files give me more authenticity

>>1009599

PDFs can be malicious

>>1009609

so can PNGs