Linux Obsolete Password Hash Risks

Craig Rowland, Founder and CEO, Sandfly Security : Published Updated

Videos Malware Linux Forensics Education
Linux Obsolete Password Hash Risks
Publication date: 05 December 2024
 

Obsolete password hashes on Linux expose users to brute force attack. Legacy password hashes have included MD5 which can have billions of attempts a second tried against it by GPU based crackers. Attackers can quickly crack these legacy hashes and use the credentials for lateral movement. In this video we discuss this threat on Linux and how to identify it.

Find out if your systems have vulnerable password hashes, plus thousands of other attack traces instantly. Sandfly's agentless EDR for Linux deploys rapidly without any endpoint agents. Get a free license today to try it out.

 

 ← Return to Blog
Linux EDR nologin Shell Rename Backdoor Attack Detection and Forensics

Linux EDR nologin Shell Rename Backdoor Attack Detection and Forensics

Sandfly Security - Agentless Linux EDR and Incident Response : 04 December 2024

Learn how to look for backdoor attacks that replace /sbin/nologin on Linux.

Videos Malware Linux Forensics Education
Read More
SSH Authorized Keys2 Backdoor Attack

SSH Authorized Keys2 Backdoor Attack

Sandfly Security - Agentless Linux EDR and Incident Response : 11 December 2024

SSH auhorized_keys2 is a less known way to leave backdoor keys on Linux. Learn what it is and how to find it here.

Videos Linux Forensics Education
Read More
Linux Duplicate User Password Hash Attack

Linux Duplicate User Password Hash Attack

Sandfly Security - Agentless Linux EDR and Incident Response : 02 December 2024

Learn what duplicate password hash attacks are on Linux and how to detect them.

Videos Malware Linux Forensics Education
Read More