Can Linux Aliases Steal Your Password? (Bash Bunny Demo)

On this episode of HakByte, @Alex Lynd demonstrates how a sneaky Linux alias can steal your sudo password - and how an attacker can install a phishing script on your computer in seconds, using a Hak5 BashBunny. This video is sponsored by PCBWay: -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆ Fake Sudo Payload: Buy a Nugget: Buy a Bash Bunny: -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆ Alex’s Twitter: Alex’s Website: Alex’s GitHub: -----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆-----☆ Chapters: Intro 00:00 PCBWay Ad 00:17 What is Sudo? 00:33 Privilege Escalation Attacks 01:02 Attack Demo Overview 01:28 What You’ll Need 01:42 BashBunny Script Explainer 02:02 What are Aliases? 03:44 Phishing Script Overview 04:24 Arming the B