MITM/SSH/Key Attacks
From charlesreid1
Attacking SSH and SSL Keys
Installing littleblackbox
Littleblackbox is the tool that we will start with, since it has some built-in certificates and can be used to scan for computers using vulnerable keys on the local network.
To install littleblackbox, replace all SSLv3 with SSLv23 (only one instance - in certificates.c).
Debian has SSL v3 disabled, due to the Poodle attack. Thus, SSL version 3 sessions are not defined in the OpenSSL library, which causes the symbol not found error, This can be fixed by using a different function call, so the symbol will exist. Version 2.3 is ok. So replace "SSLv3" with "SSLv23".
Also, you may need to make this folder to allow littleblackbox to install its man page:
$ mkdir -p /usr/local/share/man/man1
A Treasure Trove of Keys
A treasure trove of keys:
- Rapid7 ssh-badkeys: https://github.com/rapid7/ssh-badkeys
- devttys0 littleblackbox: https://github.com/devttys0/littleblackbox
- BenBE kompromat: https://github.com/BenBE/kompromat