Rendered at 11:47:03 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
JoshTriplett 12 hours ago [-]
You don't even need a network port open; you might have the vulnerable software already on your system: https://terminal2shell.com/
</s>
K0IN 12 hours ago [-]
I think this can be chained.
12 hours ago [-]
gnabgib 12 hours ago [-]
This is a (bad) joke.
> A remote attacker with valid credentials can execute arbitrary commands on a server running an SSH service. The commands run on the target with the privileges of the authenticated account, and their output is returned to the attacker.
mcunninghamhn 12 hours ago [-]
If you read carefully, there's a tonne of give aways.. like a tonne. If people still haven't picked it up by the end, the very last faq actually explains it a bit more explicitly. But at first glance, works about as good as a strong coffee
</s>
> A remote attacker with valid credentials can execute arbitrary commands on a server running an SSH service. The commands run on the target with the privileges of the authenticated account, and their output is returned to the attacker.
Well time to switch to telnet!