Deep Dive into Parsing SSH Keys To Exploit Improperly Sanitized Screenshots
00:00 - Intro
00:55- Generating our SSH Key and Base64 Decoding it
02:15 - Opening the SSH Key in Bless
03:45 - Showing information from the SSH RFC which will tell us what we are parsing
04:25 - Start of parsing the SSH Key
07:00 - Opening an Encrypted Key and showing the slight changes
10:15 - Back to the unencrypted SSH Key and showing the private key does contain the private key
12:10 - Extracting the Exponent and N our of the Public Key portion
14:30 - Start of Private Key Information in the Private Key
16:00 - Extracting the variables from the Private Key Field
18:15 - Extracting Q, which is the big prime that we used in Response to rebuild the key
19:00 - Showing the comment which contains the username and hostname of the person that generated the key
20:40 - Extracting E/N from the Public Key
23:00 - Extracting Q from the Private Key again and using RsaCtfTool to generate the key
Watch on YouTube ↗
(saves to browser)
Sign in to unlock AI tutor explanation · ⚡30
Playlist
Uploads from IppSec · IppSec · 0 of 60
← Previous
Next →
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
HHC2016 - Analytics
IppSec
HackTheBox - October
IppSec
HackTheBox - Arctic
IppSec
HackTheBox - Brainfuck
IppSec
HackTheBox - Bank
IppSec
HackTheBox - Joker
IppSec
HackTheBox - Lazy
IppSec
Camp CTF 2015 - Bitterman
IppSec
HackTheBox - Devel
IppSec
Reversing Malicious Office Document (Macro) Emotet(?)
IppSec
HackTheBox - Granny and Grandpa
IppSec
HackTheBox - Pivoting Update: Granny and Grandpa
IppSec
HackTheBox - Optimum
IppSec
HackTheBox - Charon
IppSec
HackTheBox - Sneaky
IppSec
HackTheBox - Holiday
IppSec
HackTheBox - Europa
IppSec
Introduction to tmux
IppSec
HackTheBox - Blocky
IppSec
HackTheBox - Nineveh
IppSec
HackTheBox - Jail
IppSec
HackTheBox - Blue
IppSec
HackTheBox - Calamity
IppSec
HackTheBox - Shrek
IppSec
HackTheBox - Mirai
IppSec
HackTheBox - Shocker
IppSec
HackTheBox - Mantis
IppSec
HackTheBox - Node
IppSec
HackTheBox - Kotarak
IppSec
HackTheBox - Enterprise
IppSec
HackTheBox - Sense
IppSec
HackTheBox - Minion
IppSec
VulnHub - Sokar
IppSec
VulnHub - Pinkys Palace v2
IppSec
HackTheBox - Inception
IppSec
Vulnhub - Trollcave 1.2
IppSec
HackTheBox - Ariekei
IppSec
HackTheBox - Flux Capacitor
IppSec
HackTheBox - Jeeves
IppSec
HackTheBox - Tally
IppSec
HackTheBox - CrimeStoppers
IppSec
HackTheBox - Fulcrum
IppSec
HackTheBox - Chatterbox
IppSec
HackTheBox - Falafel
IppSec
How To Create Empire Modules
IppSec
HackTheBox - Nightmare
IppSec
HackTheBox - Nightmarev2 - Speed Run/Unintended Solutions
IppSec
HackTheBox - Bart
IppSec
HackTheBox - Aragog
IppSec
HackTheBox - Valentine
IppSec
HackTheBox - Silo
IppSec
HackTheBox - Rabbit
IppSec
HackTheBox - Celestial
IppSec
HackTheBox - Stratosphere
IppSec
HackTheBox - Poison
IppSec
HackTheBox - Canape
IppSec
HackTheBox - Olympus
IppSec
HackTheBox - Sunday
IppSec
HackTheBox - Fighter
IppSec
HackTheBox - Bounty
IppSec
Related AI Lessons
⚡
⚡
⚡
⚡
Security Through Obscurity:
The Comforting Lie We
Need to Stop Telling Ourselves
Medium · Cybersecurity
Host & Network Penetration Testing: Exploitation CTF 1
Medium · Cybersecurity
CrowdStrike’s Friday — The 78 Minutes That Broke the World’s Windows
Medium · Cybersecurity
Hardening Algolia MCP Server the same way I hardened Notion MCP: seven small filters
Dev.to · Mukunda Rao Katta
Chapters (13)
Intro
2:15
Opening the SSH Key in Bless
3:45
Showing information from the SSH RFC which will tell us what we are parsing
4:25
Start of parsing the SSH Key
7:00
Opening an Encrypted Key and showing the slight changes
10:15
Back to the unencrypted SSH Key and showing the private key does contain the p
12:10
Extracting the Exponent and N our of the Public Key portion
14:30
Start of Private Key Information in the Private Key
16:00
Extracting the variables from the Private Key Field
18:15
Extracting Q, which is the big prime that we used in Response to rebuild the k
19:00
Showing the comment which contains the username and hostname of the person tha
20:40
Extracting E/N from the Public Key
23:00
Extracting Q from the Private Key again and using RsaCtfTool to generate the k
🎓
Tutor Explanation
DeepCamp AI