1

How to decrypt the plaintext contents of an SSH session from a PCAP file and SSHv2 AES session keys from a memory dump.

I have the full PCAP for the SSH sessions, including the initial handshake and AES session keys from a memory dump of the process.

I also have the client's private keys.

Is it possible? If so, what tools can I use?

Thanks for any help.

Improve this question

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .