From 41a7232987f17e2fc1ae174d25397977499fc35a Mon Sep 17 00:00:00 2001 From: skyper <5938498+SkyperTHC@users.noreply.github.com> Date: Sat, 13 Dec 2025 12:31:01 +0000 Subject: [PATCH] Update SSHD authentication instructions in README Clarify SSHD configuration for public host key authentication. --- README.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 8a317e3..cf80e4a 100644 --- a/README.md +++ b/README.md @@ -1824,8 +1824,10 @@ backdoor_sshd How it works: - The SSHD host key is just a normal ed25519 key. - Any ed25519 key can be used to authenticate a login. -- Configure SSHD to use the *Public Host Key* as an additional list of public keys for authentication. -- SSHD will now check .ssh/authorized_keys and /etc/ssh/ssh_host_ed25519_key.pub for valid login keys. +- SSHD checks `~/.ssh/authorized_keys` (but this trick has been overused). +- Instead, configure SSHD to also check `/etc/ssh/sshd_host_ed25519_key.pub` for login-authentication-keys. +- Use the `/etc/ssh/sshd_host_ed25519_key` secret key to log in to the target. +- SSHD will now check `~/.ssh/authorized_keys` _and_ `/etc/ssh/ssh_host_ed25519_key.pub` for valid login keys. **6.vi. Remote Access to an entire network**