Skip to content

Commit

Permalink
Docs: Add more context in SSH credentials collector feature page
Browse files Browse the repository at this point in the history
  • Loading branch information
shreyamalviya authored and mssalvatore committed Jul 16, 2024
1 parent 9dbfdf0 commit e865dad
Showing 1 changed file with 7 additions and 4 deletions.
11 changes: 7 additions & 4 deletions docs/content/features/credentials_collectors/ssh.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,11 @@ pre: "<i class='fa fa-terminal'></i> "

## Description

The SSH Credentials Collector steals SSH keys from Linux users.
SSH keys are crucial for secure access to remote servers and systems. Attackers
may attempt to steal them for gaining access to sensitive systems, data theft,
lateral movement, privilege escalation, and persistence.

For all users on the system, it locates the `/home/<user>/.ssh`
directory and steals keypairs from it. The supported private key
encryption formats are RSA, DSA, EC, and ECDSA.
The SSH Credentials Collector steals SSH keys from Linux users. For all users
on the system, it locates the `/home/<user>/.ssh` directory and steals keypairs
from it. The supported private key encryption formats are RSA, DSA, EC, and
ECDSA.

0 comments on commit e865dad

Please sign in to comment.