{"id":22170,"date":"2026-09-26T12:13:18","date_gmt":"2026-09-26T08:43:18","guid":{"rendered":"https:\/\/maralhost.com\/kb\/docs\/security\/%d8%a8%d8%b1%d8%b1%d8%b3%db%8c-ssh-key%d9%87%d8%a7%db%8c-%d9%85%d8%b4%da%a9%d9%88%da%a9-%d8%af%d8%b1-%d9%84%db%8c%d9%86%d9%88%da%a9%d8%b3\/"},"modified":"2026-09-26T12:48:24","modified_gmt":"2026-09-26T09:18:24","slug":"sus-sshkeyslinux","status":"publish","type":"docs","link":"https:\/\/maralhost.com\/kb\/docs\/security\/sus-sshkeyslinux\/","title":{"rendered":"\u0628\u0631\u0631\u0633\u06cc SSH Key\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9 \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0642\u062f\u0645\u0647<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 <strong>SSH Key Authentication<\/strong> \u06cc\u06a9\u06cc \u0627\u0632 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u200c\u062a\u0631 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a \u0648 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u0631\u06cc\u0633\u06a9 \u062d\u0645\u0644\u0627\u062a Password Brute Force\u060c \u0648\u0631\u0648\u062f \u0628\u0627 \u06a9\u0644\u06cc\u062f \u0639\u0645\u0648\u0645\u06cc \u0631\u0627 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 Password Authentication \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0627 \u0647\u0645\u0627\u0646\u200c\u0637\u0648\u0631 \u06a9\u0647 SSH Key \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0645\u0646\u06cc\u062a \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f\u060c \u0627\u06af\u0631 \u06cc\u06a9 \u06a9\u0644\u06cc\u062f \u0646\u0627\u0634\u0646\u0627\u0633 \u06cc\u0627 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0627\u0636\u0627\u0641\u0647 \u0634\u0648\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u062f\u0627\u0626\u0645\u06cc \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0631\u0627 \u0628\u062f\u0647\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9\u06cc \u0627\u0632 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0633 \u0627\u0632 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u0648\u0644\u06cc\u0647\u060c \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646 \u06a9\u0644\u06cc\u062f \u0639\u0645\u0648\u0645\u06cc \u0645\u0647\u0627\u062c\u0645 \u0628\u0647 \u0641\u0627\u06cc\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u0633 \u0627\u0632 \u0627\u06cc\u0646 \u06a9\u0627\u0631\u060c \u0645\u0647\u0627\u062c\u0645 \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u062f\u0627\u0646\u0633\u062a\u0646 Password \u0648 \u062d\u062a\u06cc \u0628\u0639\u062f \u0627\u0632 \u062a\u063a\u06cc\u06cc\u0631 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 User\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u062f\u0648\u0628\u0627\u0631\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 SSH \u0648\u0627\u0631\u062f Server \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SSH Key\u0647\u0627 \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u06a9\u062c\u0627 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f.<\/li>\n\n\n\n<li>\u0686\u06af\u0648\u0646\u0647 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9 \u0631\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u0645.<\/li>\n\n\n\n<li>\u0686\u06af\u0648\u0646\u0647 Fingerprint \u06cc\u06a9 Key \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u0645.<\/li>\n\n\n\n<li>\u0686\u06af\u0648\u0646\u0647 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0646\u06cc\u0645.<\/li>\n\n\n\n<li>\u0686\u06af\u0648\u0646\u0647 Login\u0647\u0627\u06cc SSH Key \u0631\u0627 \u062a\u062d\u0644\u06cc\u0644 \u06a9\u0646\u06cc\u0645.<\/li>\n\n\n\n<li>\u0686\u06af\u0648\u0646\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc\u200c\u0647\u0627\u06cc \u063a\u06cc\u0631\u0636\u0631\u0648\u0631\u06cc \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u0645.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">SSH Key \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u062f\u061f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">SSH \u0627\u0632 \u06cc\u06a9 \u0633\u0627\u062e\u062a\u0627\u0631 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Private Key\n+\nPublic Key<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Client \u062f\u0627\u0631\u0627\u06cc Private Key \u0627\u0633\u062a \u0648 Server \u0646\u0633\u062e\u0647 Public Key \u0631\u0627 \u0646\u06af\u0647\u062f\u0627\u0631\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631 \u062a\u0644\u0627\u0634 \u0645\u06cc\u200c\u06a9\u0646\u062f Login \u06a9\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Client\n |\n | Private Key\n |\n v\nSSH Server\n |\n | authorized_keys\n |\n v\nAuthentication Success<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Server \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u062f \u0622\u06cc\u0627 Public Key \u0627\u0631\u0627\u0626\u0647\u200c\u0634\u062f\u0647 \u062a\u0648\u0633\u0637 Client \u062f\u0631 \u0644\u06cc\u0633\u062a \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0645\u062c\u0627\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06cc\u0627 \u062e\u06cc\u0631.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0641\u0627\u06cc\u0644 authorized_keys \u0686\u06cc\u0633\u062a\u061f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0641\u0627\u06cc\u0644 \u0628\u0631\u0627\u06cc SSH Key Authentication:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0644\u0627\u064b \u0628\u0631\u0627\u06cc User:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/home\/user\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648 \u0628\u0631\u0627\u06cc Root:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/root\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0634\u0627\u0647\u062f\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc Root:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/root\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0645\u062d\u062a\u0648\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG.... admin@laptop<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0647\u0631 \u062e\u0637 \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u06cc\u06a9 Public Key \u0645\u0633\u062a\u0642\u0644 \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0645\u0647\u0645 SSH Key \u062f\u0631 \u0644\u06cc\u0646\u0648\u06a9\u0633<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0645\u0633\u06cc\u0631\u0647\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/root\/.ssh\/\n\/home\/*\/.ssh\/\n\/etc\/ssh\/\n\/etc\/ssh\/sshd_config<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -la \/root\/.ssh\/<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/home -name authorized_keys<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u062a\u0645\u0627\u0645 authorized_keys\u0647\u0627\u06cc \u0633\u06cc\u0633\u062a\u0645<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/home \/root -name authorized_keys 2&gt;\/dev\/null<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u062e\u0631\u0648\u062c\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/root\/.ssh\/authorized_keys\n\/home\/admin\/.ssh\/authorized_keys\n\/home\/deploy\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0628\u0631\u0631\u0633\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u062a\u0645\u0627\u0645 \u0627\u06cc\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0628\u0627\u06cc\u062f \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u0645\u062d\u062a\u0648\u0627\u06cc \u062a\u0645\u0627\u0645 SSH Key\u0647\u0627<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0647\u0645\u0647 \u06a9\u0644\u06cc\u062f\u0647\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/home \/root -name authorized_keys \\\n-exec echo {} \\; \\\n-exec cat {} \\;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/root\/.ssh\/authorized_keys\n\nssh-rsa AAAAB3.... root@server\n\n\/home\/admin\/.ssh\/authorized_keys\n\nssh-ed25519 AAAAC3.... admin@workstation<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0633\u0627\u062e\u062a\u0627\u0631 \u06cc\u06a9 SSH Public Key<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9 Key \u0645\u0639\u0645\u0648\u0644\u0627\u064b \u0634\u0627\u0645\u0644 \u0633\u0647 \u0628\u062e\u0634 \u0627\u0633\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Algorithm\nPublic Key Data\nComment<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0627\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG.... user@device<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u062e\u0634 Comment:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>user@device<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u06a9\u0627\u0645\u0644 \u0646\u06cc\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0647\u0627\u062c\u0645 \u0646\u06cc\u0632 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f Comment \u062f\u0644\u062e\u0648\u0627\u0647 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0634\u0646\u0627\u0633\u0627\u06cc\u06cc SSH Key \u0646\u0627\u0634\u0646\u0627\u0633<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u062c\u0648\u062f \u06cc\u06a9 Key \u0646\u0627\u0634\u0646\u0627\u0633 \u0647\u0645\u06cc\u0634\u0647 \u0628\u0647 \u0645\u0639\u0646\u06cc \u062d\u0645\u0644\u0647 \u0646\u06cc\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0627 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0645\u0634\u06a9\u0648\u06a9 \u0647\u0633\u062a\u0646\u062f:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Key \u0645\u062a\u0639\u0644\u0642 \u0628\u0647 User \u0646\u0627\u0634\u0646\u0627\u0633 \u0628\u0627\u0634\u062f.<\/li>\n\n\n\n<li>Comment \u0646\u0627\u0645\u0639\u062a\u0628\u0631 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.<\/li>\n\n\n\n<li>\u0632\u0645\u0627\u0646 \u0627\u0636\u0627\u0641\u0647 \u0634\u062f\u0646 \u0645\u0634\u062e\u0635 \u0646\u0628\u0627\u0634\u062f.<\/li>\n\n\n\n<li>\u0635\u0627\u062d\u0628 Key \u0633\u0627\u0632\u0645\u0627\u0646 \u06cc\u0627 \u062a\u06cc\u0645 \u0646\u0628\u0627\u0634\u062f.<\/li>\n\n\n\n<li>Fingerprint \u0622\u0646 \u062f\u0631 \u0644\u06cc\u0633\u062a \u0645\u062c\u0627\u0632 \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0644\u0627\u064b:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-rsa AAAAB3.... backup@unknown<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0686\u0646\u06cc\u0646 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0631\u062f\u060c \u0628\u0627\u06cc\u062f \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u0645\u0627\u0644\u06a9 \u0641\u0627\u06cc\u0644 authorized_keys<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">Permissions \u0648 Owner \u0627\u0647\u0645\u06cc\u062a \u0632\u06cc\u0627\u062f\u06cc \u062f\u0627\u0631\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -la ~\/.ssh\/<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647 \u0635\u062d\u06cc\u062d:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>drwx------ user user .ssh\n\n-rw------- user user authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Root:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -la \/root\/.ssh\/<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Permission\u0647\u0627\u06cc \u0645\u0646\u0627\u0633\u0628 SSH Key<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0639\u0645\u0648\u0644\u0627\u064b:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Directory:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod 700 ~\/.ssh<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">File:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod 600 ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0627\u0641\u0631\u0627\u062f \u062f\u06cc\u06af\u0631 \u0628\u062a\u0648\u0627\u0646\u0646\u062f \u0641\u0627\u06cc\u0644 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u0646\u062f\u060c \u0627\u0645\u06a9\u0627\u0646 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f\u0646 Key \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631\u0627\u064b \u062a\u063a\u06cc\u06cc\u0631 \u06a9\u0631\u062f\u0647<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9\u06cc \u0627\u0632 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc Persistence \u0628\u0631\u0631\u0633\u06cc \u0632\u0645\u0627\u0646 \u062a\u063a\u06cc\u06cc\u0631 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0644\u0627\u064b \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u06f7 \u0631\u0648\u0632 \u06af\u0630\u0634\u062a\u0647 \u062a\u063a\u06cc\u06cc\u0631 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/root \/home \\\n-name authorized_keys \\\n-mtime -7 \\\n-ls<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/root\/.ssh\/authorized_keys\nModify: Sep 26 03:21<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0627\u06cc\u0646 \u062a\u063a\u06cc\u06cc\u0631 \u0628\u0627 \u0641\u0639\u0627\u0644\u06cc\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a\u06cc \u0647\u0645\u0627\u0647\u0646\u06af \u0646\u06cc\u0633\u062a\u060c \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Timestamp \u0641\u0627\u06cc\u0644<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062c\u0632\u0626\u06cc\u0627\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>stat \/root\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Access:\n2026-09-26 03:21\n\nModify:\n2026-09-26 03:21\n\nChange:\n2026-09-26 03:21<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u0632\u0645\u0627\u0646 \u0631\u0627 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0628\u0627 SSH Login Log\u0647\u0627 \u0645\u0642\u0627\u06cc\u0633\u0647 \u06a9\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Login\u0647\u0627\u06cc SSH \u0628\u0627 Key<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 Login\u0647\u0627\u06cc \u0645\u0648\u0641\u0642:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ubuntu \/ Debian:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep \"Accepted publickey\" \/var\/log\/auth.log<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">AlmaLinux \/ Rocky:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grep \"Accepted publickey\" \/var\/log\/secure<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Accepted publickey for root from 203.0.113.50 port 53221 ssh2<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0647\u0645:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>User\nSource IP\nTime\nAuthentication Method<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Fingerprint \u06cc\u06a9 SSH Key<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0627\u06cc\u0646\u06a9\u0647 \u06cc\u06a9 Key \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-keygen -lf ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>256 SHA256:abc123.... user@host (ED25519)<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Fingerprint \u0645\u0627\u0646\u0646\u062f Hash \u0634\u0646\u0627\u0633\u0647 \u06a9\u0644\u06cc\u062f \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0622\u0646 \u0631\u0627 \u0628\u0627 Fingerprint\u0647\u0627\u06cc \u062b\u0628\u062a\u200c\u0634\u062f\u0647 \u0645\u0642\u0627\u06cc\u0633\u0647 \u06a9\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0627\u0633\u062a\u062e\u0631\u0627\u062c Fingerprint \u0627\u0632 \u06a9\u0644\u06cc\u062f \u062e\u0627\u0635<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0644\u0627\u064b:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-keygen -lf \/root\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc Key\u0647\u0627\u06cc RSA:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-keygen -lf keyfile -E sha256<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0645\u0642\u0627\u06cc\u0633\u0647 Key\u0647\u0627\u06cc \u0641\u0639\u0644\u06cc \u0628\u0627 \u0644\u06cc\u0633\u062a \u0645\u062c\u0627\u0632<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0628\u0647\u062a\u0631 \u0627\u0633\u062a Fingerprint\u0647\u0627\u06cc \u0645\u062c\u0627\u0632 \u0646\u06af\u0647\u062f\u0627\u0631\u06cc \u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0644\u0627\u064b:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>SHA256:abc123\nSHA256:def456\nSHA256:xyz789<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-keygen -lf \/root\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0627 \u0644\u06cc\u0633\u062a \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0645\u0642\u0627\u06cc\u0633\u0647 \u0634\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 SSH Key\u0647\u0627\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u06a9\u0644 \u0633\u06cc\u0633\u062a\u0645<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u06af\u0627\u0647\u06cc \u0645\u0647\u0627\u062c\u0645 \u0641\u0642\u0637 authorized_keys \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u0646\u0645\u06cc\u200c\u062f\u0647\u062f \u0648 Key\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u062f\u0631 \u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062c\u0633\u062a\u062c\u0648:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/ -name \"*.pub\" 2&gt;\/dev\/null<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/ -name \"id_rsa*\" 2&gt;\/dev\/null<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0633\u06cc\u0631\u0647\u0627\u06cc \u0645\u0647\u0645:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/root\/.ssh\/\n\/home\/*\/.ssh\/\n\/tmp\/\n\/var\/tmp\/<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc SSH Host Key\u0647\u0627<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">SSH Host Key \u0628\u0627 User Public Key \u0645\u062a\u0641\u0627\u0648\u062a \u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Host Key\u0647\u0627 \u0628\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u062e\u0648\u062f Server \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0633\u06cc\u0631:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/ssh\/ssh_host_*<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0634\u0627\u0647\u062f\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ls -la \/etc\/ssh\/ssh_host_*<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Fingerprint:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-keygen -lf \/etc\/ssh\/ssh_host_ed25519_key.pub<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u063a\u06cc\u06cc\u0631 \u063a\u06cc\u0631\u0645\u0646\u062a\u0638\u0631\u0647 Host Key \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0627\u0639\u062b \u0647\u0634\u062f\u0627\u0631 Client\u0647\u0627 \u0634\u0648\u062f \u0648 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0628\u0631\u0631\u0633\u06cc \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0641\u0639\u0627\u0644 SSH \u062f\u0631 Session\u0647\u0627<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0634\u0627\u0647\u062f\u0647 Session\u0647\u0627\u06cc SSH:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>who<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>w<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>root pts\/0 203.0.113.50<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Connection\u0647\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ss -tnp | grep ssh<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ss -tnp | grep sshd<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc User\u0647\u0627\u06cc\u06cc \u06a9\u0647 SSH \u062f\u0627\u0631\u0646\u062f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0647\u0645\u0647 User\u0647\u0627 \u0646\u0628\u0627\u06cc\u062f SSH Access \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0644\u06cc\u0633\u062a User\u0647\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/passwd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc Shell:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/passwd | grep -v nologin<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">User\u0647\u0627\u06cc\u06cc \u06a9\u0647 Shell \u0641\u0639\u0627\u0644 \u062f\u0627\u0631\u0646\u062f \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u0646\u062f \u06af\u0632\u06cc\u0646\u0647 Login \u0628\u0627\u0634\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc SSH Configuration<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/etc\/ssh\/sshd_config<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0648\u0627\u0631\u062f \u0645\u0647\u0645:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>PermitRootLogin\nPasswordAuthentication\nPubkeyAuthentication\nAllowUsers\nAllowGroups<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0634\u0627\u0647\u062f\u0647 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0648\u0627\u0642\u0639\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sshd -T<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc \u0641\u0639\u0627\u0644 \u0628\u0648\u062f\u0646 Public Key Authentication<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>sshd -T | grep pubkeyauthentication<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0645\u0648\u0646\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>pubkeyauthentication yes<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Root Login \u0628\u0627 Key<\/h1>\n\n\n\n<pre class=\"wp-block-code\"><code>sshd -T | grep permitrootlogin<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0642\u0627\u062f\u06cc\u0631 \u0631\u0627\u06cc\u062c:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>yes\nprohibit-password\nno<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 Root Login \u0641\u0639\u0627\u0644 \u0627\u0633\u062a\u060c \u0628\u0627\u06cc\u062f \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646 \u0636\u0631\u0648\u0631\u06cc \u0627\u0633\u062a \u06cc\u0627 \u062e\u06cc\u0631.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc Log\u0647\u0627\u06cc \u062a\u063a\u06cc\u06cc\u0631 SSH Key<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 Audit \u0641\u0639\u0627\u0644 \u0628\u0627\u0634\u062f\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0641\u0627\u06cc\u0644 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0631\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0644\u0627\u064b \u0628\u0627 Auditd:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0635\u0628:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt install auditd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u062c\u0627\u062f Rule:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>auditctl -w \/root\/.ssh\/authorized_keys -p wa<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0634\u0627\u0647\u062f\u0647:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ausearch -f \/root\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0634\u062e\u0635 \u06a9\u0646\u062f \u0686\u0647 Process \u06cc\u0627 User\u0627\u06cc \u0641\u0627\u06cc\u0644 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0627\u062f\u0647 \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc SSH Key\u0647\u0627\u06cc \u0627\u0636\u0627\u0641\u0647\u200c\u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9\u06cc \u0627\u0632 \u0627\u0644\u06af\u0648\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c Persistence:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Initial Access\n       |\n       v\nPrivilege Access\n       |\n       v\nAdd Public Key\n       |\n       v\nFuture SSH Access<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0634\u0627\u0646\u0647\u200c\u0647\u0627:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Key \u062c\u062f\u06cc\u062f \u0628\u062f\u0648\u0646 \u062a\u0648\u0636\u06cc\u062d<\/li>\n\n\n\n<li>\u062a\u063a\u06cc\u06cc\u0631 \u0646\u0627\u06af\u0647\u0627\u0646\u06cc authorized_keys<\/li>\n\n\n\n<li>Login \u0645\u0648\u0641\u0642 \u0627\u0632 IP \u0646\u0627\u0634\u0646\u0627\u0633<\/li>\n\n\n\n<li>User \u062c\u062f\u06cc\u062f<\/li>\n\n\n\n<li>\u062a\u063a\u06cc\u06cc\u0631 Permission\u0647\u0627<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc User\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0647\u0627\u062c\u0645 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0639\u0644\u0627\u0648\u0647 \u0628\u0631 Key\u060c User \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/passwd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>getent passwd<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0631\u0633\u06cc \u0622\u062e\u0631\u06cc\u0646 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>last<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062d\u0630\u0641 SSH Key \u0645\u0634\u06a9\u0648\u06a9<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0642\u0628\u0644 \u0627\u0632 \u062d\u0630\u0641\u060c \u0628\u0647\u062a\u0631 \u0627\u0633\u062a Evidence \u0646\u06af\u0647\u062f\u0627\u0631\u06cc \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Backup:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cp ~\/.ssh\/authorized_keys \\\n~\/authorized_keys.backup<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u06cc\u0631\u0627\u06cc\u0634:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>nano ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0637 \u0645\u0634\u06a9\u0648\u06a9 \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 Permission:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod 600 ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 Key \u0628\u062f\u0648\u0646 \u062d\u0630\u0641<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u062f\u0631 \u0627\u0628\u062a\u062f\u0627\u06cc \u062e\u0637 Key \u0639\u0628\u0627\u0631\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>from=<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u0627:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>no-pty<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0642\u0631\u0627\u0631 \u062f\u0627\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0627 \u0628\u0631\u0627\u06cc \u062d\u0630\u0641 \u06a9\u0627\u0645\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc\u060c \u062d\u0630\u0641 Key \u0631\u0648\u0634 \u0633\u0627\u062f\u0647\u200c\u062a\u0631 \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 SSH Key<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">SSH \u0627\u062c\u0627\u0632\u0647 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0642\u0627\u0628\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u06cc\u06a9 Key \u0631\u0627 \u0645\u06cc\u200c\u062f\u0647\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u062b\u0627\u0644:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>command=\"\/usr\/bin\/backup.sh\",no-agent-forwarding,no-port-forwarding ssh-ed25519 AAA...<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06cc\u0646 \u0631\u0648\u0634 \u0628\u0631\u0627\u06cc Automation \u0648 Backup Account\u0647\u0627 \u0645\u0641\u06cc\u062f \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0631\u0631\u0633\u06cc SSH Key \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0645\u062a\u0639\u062f\u062f<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0645\u062d\u06cc\u0637\u200c\u0647\u0627\u06cc \u0628\u0632\u0631\u06af\u060c \u0628\u0631\u0631\u0633\u06cc \u062f\u0633\u062a\u06cc \u06a9\u0627\u0641\u06cc \u0646\u06cc\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Ansible<\/li>\n\n\n\n<li>SIEM<\/li>\n\n\n\n<li>EDR<\/li>\n\n\n\n<li>Configuration Management<\/li>\n\n\n\n<li>Auditd<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u0642\u0627\u06cc\u0633\u0647 State \u0645\u0648\u0631\u062f \u0627\u0646\u062a\u0638\u0627\u0631 \u0628\u0627 \u0648\u0636\u0639\u06cc\u062a \u0648\u0627\u0642\u0639\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">Workflow \u0639\u0645\u0644\u06cc \u0628\u0631\u0631\u0633\u06cc SSH Key \u0645\u0634\u06a9\u0648\u06a9<\/h1>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0627\u0648\u0644: \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0646 Key\u0647\u0627<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>find \/home \/root -name authorized_keys<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u062f\u0648\u0645: \u0645\u0634\u0627\u0647\u062f\u0647 \u0645\u062d\u062a\u0648\u0627<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>cat ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0633\u0648\u0645: \u0628\u0631\u0631\u0633\u06cc Fingerprint<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>ssh-keygen -lf ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0686\u0647\u0627\u0631\u0645: \u0628\u0631\u0631\u0633\u06cc Timestamp<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>stat ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u067e\u0646\u062c\u0645: \u0628\u0631\u0631\u0633\u06cc Login\u0647\u0627<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>grep \"Accepted publickey\" \/var\/log\/auth.log<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0634\u0634\u0645: \u0628\u0631\u0631\u0633\u06cc Session\u0647\u0627\u06cc \u0641\u0639\u0627\u0644<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>who<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>ss -tnp | grep ssh<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u0647\u0641\u062a\u0645: \u0628\u0631\u0631\u0633\u06cc \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0641\u0627\u06cc\u0644<\/h2>\n\n\n\n<pre class=\"wp-block-code\"><code>ausearch -f ~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0627\u0634\u062a\u0628\u0627\u0647\u0627\u062a \u0631\u0627\u06cc\u062c<\/h1>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0627\u0639\u062a\u0645\u0627\u062f \u06a9\u0631\u062f\u0646 \u0628\u0647 Comment \u062f\u0627\u062e\u0644 SSH Key<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc \u0646\u06a9\u0631\u062f\u0646 Fingerprint<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc \u0646\u06a9\u0631\u062f\u0646 Timestamp<\/li>\n\n\n\n<li>\u062d\u0630\u0641 Key \u0628\u062f\u0648\u0646 Backup<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc \u0646\u06a9\u0631\u062f\u0646 Login\u0647\u0627\u06cc \u0645\u0648\u0641\u0642<\/li>\n\n\n\n<li>\u0641\u0631\u0627\u0645\u0648\u0634 \u06a9\u0631\u062f\u0646 User\u0647\u0627\u06cc \u063a\u06cc\u0631 Root<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc \u0646\u06a9\u0631\u062f\u0646 Permission \u0641\u0627\u06cc\u0644<\/li>\n\n\n\n<li>\u0628\u0631\u0631\u0633\u06cc \u0646\u06a9\u0631\u062f\u0646 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a Host Key<\/li>\n\n\n\n<li>\u0641\u0639\u0627\u0644 \u06af\u0630\u0627\u0634\u062a\u0646 Root Login \u0628\u062f\u0648\u0646 \u0646\u06cc\u0627\u0632<\/li>\n\n\n\n<li>\u0646\u06af\u0647\u062f\u0627\u0631\u06cc Key\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0627\u0631\u062c\u200c\u0634\u062f\u0647<\/li>\n\n\n\n<li>\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 Key \u0645\u0634\u062a\u0631\u06a9 \u0628\u0631\u0627\u06cc \u0686\u0646\u062f \u0646\u0641\u0631<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0628\u0647\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634\u200c\u0647\u0627<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0645\u0646 SSH Key:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0628\u0631\u0627\u06cc \u0647\u0631 User \u06cc\u06a9 Key \u0627\u062e\u062a\u0635\u0627\u0635\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f.<\/li>\n\n\n\n<li>Fingerprint \u06a9\u0644\u06cc\u062f\u0647\u0627 \u0631\u0627 \u062b\u0628\u062a \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>Key\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062e\u0627\u0631\u062c\u200c\u0634\u062f\u0647 \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>Permission \u0645\u0646\u0627\u0633\u0628 \u0631\u0648\u06cc <code>.ssh<\/code> \u0648 <code>authorized_keys<\/code> \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>Root Login \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0627\u0632 Key\u0647\u0627\u06cc \u06a9\u0648\u062a\u0627\u0647\u200c\u0639\u0645\u0631 \u06cc\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a\u200c\u0634\u062f\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u062a\u063a\u06cc\u06cc\u0631\u0627\u062a SSH Key \u0631\u0627 Audit \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>Login\u0647\u0627\u06cc Public Key \u0631\u0627 \u0645\u0627\u0646\u06cc\u062a\u0648\u0631 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u062f\u0633\u062a\u0631\u0633\u06cc SSH \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0644\u06cc\u0633\u062a Key\u0647\u0627\u06cc \u0645\u062c\u0627\u0632 \u0631\u0627 \u0645\u0633\u062a\u0646\u062f \u06a9\u0646\u06cc\u062f.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0686\u06a9\u200c\u0644\u06cc\u0633\u062a<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc SSH Key\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u0645\u0633\u06cc\u0631\u0647\u0627\u06cc SSH Key \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>\u062a\u0645\u0627\u0645 authorized_keys\u0647\u0627 \u067e\u06cc\u062f\u0627 \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>Owner \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Permission\u0647\u0627 \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>Fingerprint \u06a9\u0644\u06cc\u062f\u0647\u0627 \u0627\u0633\u062a\u062e\u0631\u0627\u062c \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>\u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0646\u0627\u0634\u0646\u0627\u0633 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>Timestamp \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Login\u0647\u0627\u06cc Accepted publickey \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>Source IP\u0647\u0627\u06cc Login \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>Session\u0647\u0627\u06cc \u0641\u0639\u0627\u0644 \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>Host Key\u0647\u0627 \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n\n\n\n<li>SSH Configuration \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Root Login \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Auditd \u0628\u0631\u0627\u06cc \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u062d\u0633\u0627\u0633 \u0628\u0631\u0631\u0633\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Backup \u0642\u0628\u0644 \u0627\u0632 \u062d\u0630\u0641 \u06af\u0631\u0641\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/li>\n\n\n\n<li>Key\u0647\u0627\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u062d\u0630\u0641 \u0634\u062f\u0647\u200c\u0627\u0646\u062f.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u0645\u0637\u0627\u0644\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>OpenSSH Manual \u2013 sshd_config<\/strong><br>\u0645\u0631\u062c\u0639 \u0631\u0633\u0645\u06cc \u062a\u0646\u0638\u06cc\u0645\u0627\u062a SSH Server \u0645\u0627\u0646\u0646\u062f <code>PermitRootLogin<\/code>\u060c <code>PasswordAuthentication<\/code>\u060c <code>PubkeyAuthentication<\/code> \u0648 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a\u200c\u0647\u0627\u06cc \u062f\u0633\u062a\u0631\u0633\u06cc.<br><a href=\"https:\/\/man7.org\/linux\/man-pages\/man5\/sshd_config.5.html?utm_source=maral.cloud\" target=\"_blank\" rel=\"noopener\">https:\/\/man7.org\/linux\/man-pages\/man5\/sshd_config.5.html?utm_source=maral.cloud<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>OpenSSH Manual \u2013 ssh-keygen<\/strong><br>\u0645\u0631\u062c\u0639 \u0631\u0633\u0645\u06cc \u0633\u0627\u062e\u062a\u060c \u0628\u0631\u0631\u0633\u06cc \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a Fingerprint \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc SSH.<br><a href=\"https:\/\/man7.org\/linux\/man-pages\/man1\/ssh-keygen.1.html?utm_source=maral.cloud\" target=\"_blank\" rel=\"noopener\">https:\/\/man7.org\/linux\/man-pages\/man1\/ssh-keygen.1.html?utm_source=maral.cloud<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>OpenSSH Official Documentation<\/strong><br>\u0645\u0633\u062a\u0646\u062f\u0627\u062a \u0631\u0633\u0645\u06cc OpenSSH \u0628\u0631\u0627\u06cc Authentication \u0648 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0644\u06cc\u062f\u0647\u0627.<br><a href=\"https:\/\/www.openssh.com\/manual.html?utm_source=maral.cloud\" target=\"_blank\" rel=\"noopener\">https:\/\/www.openssh.com\/manual.html?utm_source=maral.cloud<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Linux Audit Framework Documentation<\/strong><br>\u0645\u0633\u062a\u0646\u062f\u0627\u062a Audit \u0628\u0631\u0627\u06cc \u062b\u0628\u062a \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062d\u0633\u0627\u0633 \u0645\u0627\u0646\u0646\u062f authorized_keys.<br><a href=\"https:\/\/linux-audit.com\/?utm_source=maral.cloud\" target=\"_blank\" rel=\"noopener\">https:\/\/linux-audit.com\/?utm_source=maral.cloud<\/a><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h1 class=\"wp-block-heading\">\u062c\u0645\u0639\u200c\u0628\u0646\u062f\u06cc<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">SSH Key \u06cc\u06a9\u06cc \u0627\u0632 \u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc Authentication \u062f\u0631 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0647\u0645\u0627\u0646 \u0686\u06cc\u0632\u06cc \u06a9\u0647 \u0627\u0645\u0646\u06cc\u062a \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u0645\u06cc\u200c\u062f\u0647\u062f\u060c \u062f\u0631 \u0635\u0648\u0631\u062a \u0645\u062f\u06cc\u0631\u06cc\u062a \u0627\u0634\u062a\u0628\u0627\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u06cc\u06a9 \u0645\u0633\u06cc\u0631 Persistence \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645 \u062a\u0628\u062f\u06cc\u0644 \u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0645\u0647\u0645\u200c\u062a\u0631\u06cc\u0646 \u0641\u0627\u06cc\u0644 \u0628\u0631\u0627\u06cc \u0628\u0631\u0631\u0633\u06cc:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>~\/.ssh\/authorized_keys<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0633\u062a.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u062a\u062d\u0644\u06cc\u0644 \u06cc\u06a9 Key \u0645\u0634\u06a9\u0648\u06a9 \u0628\u0627\u06cc\u062f \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0628\u0631\u0631\u0633\u06cc \u0634\u0648\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\u0645\u0627\u0644\u06a9 Key\n+\nFingerprint\n+\nTimestamp \u062a\u063a\u06cc\u06cc\u0631\n+\nPermission \u0641\u0627\u06cc\u0644\n+\nLogin\u0647\u0627\u06cc SSH\n+\nSource IP\n+\n\u0641\u0639\u0627\u0644\u06cc\u062a \u0628\u0639\u062f \u0627\u0632 Login<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0648\u062c\u0648\u062f \u06cc\u06a9 SSH Key \u0646\u0627\u0634\u0646\u0627\u0633 \u0628\u0647\u200c\u062a\u0646\u0647\u0627\u06cc\u06cc \u0627\u062b\u0628\u0627\u062a \u0646\u0641\u0648\u0630 \u0646\u06cc\u0633\u062a\u060c \u0632\u06cc\u0631\u0627 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631\u060c \u0627\u0628\u0632\u0627\u0631 Automation \u06cc\u0627 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u062f\u0627\u062e\u0644\u06cc \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0627 \u062a\u0631\u06a9\u06cc\u0628 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0628\u0627\u06cc\u062f \u0628\u0631\u0631\u0633\u06cc \u0641\u0648\u0631\u06cc \u0634\u0648\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>New authorized_keys entry\n+\nUnknown Fingerprint\n+\nUnknown Source IP\n+\nSuccessful publickey login\n+\nPrivilege Account<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Key\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0631\u0627 \u0645\u062f\u06cc\u0631\u06cc\u062a \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u062f\u0633\u062a\u0631\u0633\u06cc Root \u0631\u0627 \u0645\u062d\u062f\u0648\u062f \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u062a\u063a\u06cc\u06cc\u0631\u0627\u062a SSH \u0631\u0627 Audit \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>Fingerprint\u0647\u0627\u06cc \u0645\u062c\u0627\u0632 \u0631\u0627 \u062b\u0628\u062a \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>Login\u0647\u0627\u06cc SSH \u0631\u0627 \u0645\u0627\u0646\u06cc\u062a\u0648\u0631 \u06a9\u0646\u06cc\u062f.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0645\u0646\u06cc\u062a SSH \u0641\u0642\u0637 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Key \u0627\u06cc\u062c\u0627\u062f \u0646\u0645\u06cc\u200c\u0634\u0648\u062f\u061b \u0645\u062f\u06cc\u0631\u06cc\u062a \u0686\u0631\u062e\u0647 \u0639\u0645\u0631 \u06a9\u0644\u06cc\u062f\u0647\u0627\u060c \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u0631\u0633\u06cc \u0648 \u0628\u0631\u0631\u0633\u06cc \u0645\u062f\u0627\u0648\u0645 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627 \u0628\u062e\u0634 \u0627\u0635\u0644\u06cc \u0627\u0645\u0646\u06cc\u062a \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633 \u0647\u0633\u062a\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u06a9\u06cc\u0627\u0646 \u067e\u0648\u0631<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0645\u0642\u062f\u0645\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 SSH Key Authentication \u06cc\u06a9\u06cc \u0627\u0632 \u0631\u0648\u0634\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u200c\u062a\u0631 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0633\u0631\u0648\u0631\u0647\u0627\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a \u0648 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u0645\u062f\u06cc\u0631\u0627\u0646 \u0633\u06cc\u0633\u062a\u0645 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u0631\u06cc\u0633\u06a9 \u062d\u0645\u0644\u0627\u062a Password Brute Force\u060c \u0648\u0631\u0648\u062f \u0628\u0627 \u06a9\u0644\u06cc\u062f \u0639\u0645\u0648\u0645\u06cc \u0631\u0627 \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 Password Authentication \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f. \u0627\u0645\u0627 \u0647\u0645\u0627\u0646\u200c\u0637\u0648\u0631 \u06a9\u0647 SSH Key \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0627\u0645\u0646\u06cc\u062a \u0631\u0627 \u0627\u0641\u0632\u0627\u06cc\u0634 \u062f\u0647\u062f\u060c \u0627\u06af\u0631 \u06cc\u06a9 \u06a9\u0644\u06cc\u062f \u0646\u0627\u0634\u0646\u0627\u0633 \u06cc\u0627 \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u0631\u0648\u0631 \u0627\u0636\u0627\u0641\u0647 [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":22192,"parent":17595,"menu_order":66,"comment_status":"open","ping_status":"closed","template":"","doc_tag":[],"class_list":["post-22170","docs","type-docs","status-publish","has-post-thumbnail","hentry"],"acf":[],"author_avatar":"https:\/\/maralhost.com\/kb\/wp-content\/litespeed\/avatar\/c59fc140fa83b542ed78a005738a60da.jpg?ver=1790552392","author_name":"Shayan Kianpoor","_links":{"self":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/22170","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/comments?post=22170"}],"version-history":[{"count":2,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/22170\/revisions"}],"predecessor-version":[{"id":22194,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/22170\/revisions\/22194"}],"up":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/docs\/17595"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/media\/22192"}],"wp:attachment":[{"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/media?parent=22170"}],"wp:term":[{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/maralhost.com\/kb\/wp-json\/wp\/v2\/doc_tag?post=22170"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}