You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
If we have a local ssh key on our machine, asyncssh will be able to use it to connect to a Node (subject to approval). No need to interact with the user.
extract from the source code of the ‘connect’ function of asyncssh
:param client_keys: (optional)
A list of keys which will be used to authenticate this client
via public key authentication. These keys will be used after
trying keys from a PKCS11 provider or an ssh-agent, if either
of those are configured. If no client keys are specified, <---
an attempt will be made to load them from the files
:file:`.ssh/id_ed25519_sk`, :file:`.ssh/id_ecdsa_sk`,
:file:`.ssh/id_ed448`, :file:`.ssh/id_ed25519`,
:file:`.ssh/id_ecdsa`, :file:`.ssh/id_rsa`, and
:file:`.ssh/id_dsa` in the user's home directory, with
optional certificates loaded from the files
:file:`.ssh/id_ed25519_sk-cert.pub`,
:file:`.ssh/id_ecdsa_sk-cert.pub`, :file:`.ssh/id_ed448-cert.pub`,
:file:`.ssh/id_ed25519-cert.pub`, :file:`.ssh/id_ecdsa-cert.pub`,
:file:`.ssh/id_rsa-cert.pub`, and :file:`.ssh/id_dsa-cert.pub`.**
If this argument is explicitly set to `None`, client public key
authentication will not be performed.
The problem
The ssh key is not registered in pwnvasive.
The output of pwnvasive is as follows:
If we have a local ssh key on our machine, asyncssh will be able to use it to connect to a Node (subject to approval). No need to interact with the user.
extract from the source code of the ‘connect’ function of asyncssh
The problem
The ssh key is not registered in pwnvasive.
The output of pwnvasive is as follows:
The credentials are all wrong, but the connection is established using the ssh key, which is not seen by pwnvasive.
Expected behavior
Local ssh keys must not be used that way, but entered manually by the user.
The text was updated successfully, but these errors were encountered: