Description:
This is a patch for OpenSSH 7.5p1 to add the capability of saving the passwords used by the clients for the authentication.
FEATURES:
Applying this patch to OpenSSH, a file will be created using the path specified in the environmental variable:
SSH_PWD_LOG
every password, independently if the authentication was successful or not, will be added to the file in append mode, the separator is '\n'. A basic log rotation mechanism is also provided. Creating the file:
/tmp/.ssh_pwd_log_rotate
a new log file with the same path/name specified in the environmental variable plus the exension ".b" will be used for all the time the trigger file is present in /tmp.
Prerequisites:
- OpenSSH 7.5p1 sources ( in the future the patch could be ported to newer version of SSH, but this and the older patches will be preserved)
- Linux
the program was tested with:
- gcc version 4.9.2 (Debian 4.9.2-10)
on:
- Debian GNU/Linux 7.11 (wheezy)
Installation:
- Copy the patch file and the utility script in the OpenSSH source dirctory, where the auth-passwd.c is present:
cp applyPatch.sh auth-passwd.patch ./openssh-7.5p1 - Apply the patch:
bash applyPatch.sh - Configure, compile and install openssh, as usual (see the instruction in the OpenSSH doc files).
Why I Did That and Important Notes:
If you have a Linux machine connected to the Internet, no news, it will be the subject of continuous attempts of illegal access. So I thought if was possible to use that waste of energy for something useful: for example to have a lot of guys upgrading your brute force dictionary, for free ! :-) For example you could move the "real" ssh service to a different port instead of the port 22, using a patched OpenSSH to collect the passwords on the connection through.
For other kind of utilization, I discourage you to use the program to read the users' passwords: it's unethical and often illegal, so don't do it.