/keygrabber

Automation for grabbing keys from a Linux host. Useful during red team exercises to quickly help assess what access to a Linux host can lead to.

Primary LanguagePythonGNU General Public License v3.0GPL-3.0

keygrabber

Automation for grabbing keys from a Linux host. This can be helpful during red team exercises when you gain access to a Linux host and want to quickly see what other accesses that host can lead to. You can use either the python2/python3 compatible script or the shell script included in this repo.

Once you gain access to a Linux host, upload this script on the host and run it and it will grab the following:

  • ~/.aws/ contents
  • ~/.ssh/ contents
  • ~/.azure/ contents
  • ~/.config/gcloud/credentials.db
  • ~/.bashrc
  • ~/.bash_history
  • env
  • gcp and aws metadata service query

Usage

chmod +x keygrabber.sh

OR

chmod +x keygrabber.py


python keygrabber.py

OR

python3 keygrabber.py

OR

./keygrabber.sh