Update SSHD authentication instructions in README

Clarify SSHD configuration for public host key authentication.
This commit is contained in:
skyper
2025-12-13 12:31:01 +00:00
committed by GitHub
parent 3a3396e89a
commit 41a7232987

View File

@@ -1824,8 +1824,10 @@ backdoor_sshd
How it works:
- The SSHD host key is just a normal ed25519 key.
- Any ed25519 key can be used to authenticate a login.
- Configure SSHD to use the *Public Host Key* as an additional list of public keys for authentication.
- SSHD will now check .ssh/authorized_keys and /etc/ssh/ssh_host_ed25519_key.pub for valid login keys.
- SSHD checks `~/.ssh/authorized_keys` (but this trick has been overused).
- Instead, configure SSHD to also check `/etc/ssh/sshd_host_ed25519_key.pub` for login-authentication-keys.
- Use the `/etc/ssh/sshd_host_ed25519_key` secret key to log in to the target.
- SSHD will now check `~/.ssh/authorized_keys` _and_ `/etc/ssh/ssh_host_ed25519_key.pub` for valid login keys.
<a id="backdoor-network"></a>
**6.vi. Remote Access to an entire network**