Script to steal passwords from SSH.

Recently I posted how to get ssh password using strace, but it’s no 100% effective, because the strace output changes on different distros, so searching for another approach I found this site ChokePoint where they show how to create a PAM module using python to log failed attempts on ssh, now all I have to do, was change where they log the password. Original script, use the function auth_log when the login failed.

Install

Configuration

Usage

Original script from

ChokePoint

Post about this script

Stealing SSH credentials Another Approach.

Download sshLooter