Linux Security

Kioptrix Linux Credential Hunting: Bash/Zsh History Leaks (What to Audit First)

by
Bash and Zsh history leaks

The Invisible Debt: Triage and Hardening for Shell History Leaks A credential leak doesn’t always arrive with fireworks. Sometimes it’s a tired one-liner—run once at 2:11 a.m.—that keeps paying interest in the worst possible way. Bash/Zsh history leaks are accidental exposures of secrets—passwords, API keys, tokens, or SSH material—that get saved in shell history files … Read more

Kali SSH Hardening: Client, Server and Access Checks

by
Kali SSH hardening

Kali’s kali-tweaks SSH setting changes the client; inbound access needs a separate server and network review. Establish a recovery path and prove the intended authentication method before restricting access. No sequence can guarantee that you will never lock yourself out. This documentation-based guide describes planning and verification for a Kali system you administer. Sources checked … Read more