SSH-Harvester

Harvest passwords automatically from OpenSSH server

Tested on OpenSSH portable 8.2p1 and 9.3p1.

For testing purposes, download a OpenSSH stable release from mirrors

How to use

Just use emp3r0r when possible. However, if you find bugs of this C version, please send a fix

sudo ./start_sshd.sh

# in another terminal
./inject.sh

# then
ssh -p2222 user@localhost

# check what happens

How does it work

c-ssh-harvester.mp4

See my blog post