Tuesday, July 5, 2011

SSH with Empty Password and no ssh keys

This is a guide to zero security in linux. It is applicable only in places where security is not a threat and there is no threat from external networks.

The following options would allow a system running ssh to have a user with empty password so that you can use this user to login without any password or ssh keys.


I am adding a test user for this purpose.

useradd noneknowme
passwd -d noneknowme

Configure ssh server to allow empty passwords.

Edit the following line in /etc/ssh/sshd_config
================
PermitEmptyPasswords yes
================

Restart sshd using /etc/init.d/sshd restart

Now you should be able to access the host with ssh with username noneknowme without any issues.
===============
ssh -l noneknowme test
[noneknowme@test ~]$
================

Don't try this . I am using this as a reference. Thanks to linuxquestions.org

3 comments:

  1. This article provides a practical reference for understanding how SSH authentication can be configured to allow logins without passwords or SSH keys in controlled environments. The author also highlights that this configuration should never be used in production, making it a useful learning resource for understanding Linux authentication and SSH behavior.

    Understanding authentication, authorization, and secure access control is an essential part of protecting information systems. Readers interested in these concepts can also explore Information Security Projects, which cover identity management, authentication mechanisms, and information protection strategies.

    ReplyDelete
  2. For practical exposure to identifying vulnerabilities, securing Linux systems, and implementing defensive security techniques, Cyber Security Projects for Final Year Students provide valuable hands-on learning opportunities for students and professionals.

    ReplyDelete
  3. Readers looking for additional ideas and practical implementations can also refer to Cybersecurity Projects for Final Year Students, which showcases project concepts covering modern cyber threats, security practices, and real-world cybersecurity applications.

    ReplyDelete