Attack on SSHv1 using dsniff

1
Attack on SSHv1 using dsniff

• By Oleg Kolesnikov
• ok_at_cc.gatech.edu

2
Spoofing DNS
3
Running MITM daemon
4
User Establishes a Connection
5
DNS is Spoofed
6
User is presented with a forged public key
7
User Enters Password
8
Attacker gains Full Access to Data and Passwords
Decrypted Login / password
Attacker can type in commands and hijack
connection
9
User is not Aware of Attack