# SSH Private Key Looting Wordlists | A Collection Of Wordlists To Aid In Locating Or Brute-Forcing SSH Private Key File Names

**URL:** <https://onehack.st/t/ssh-private-key-looting-wordlists-a-collection-of-wordlists-to-aid-in-locating-or-brute-forcing-ssh-private-key-file-names/279148>\
**Category:** Tools & Scripts\
**Tags:** tools, hacking, cracking\
**Created:** [March 23, 2024, 2:40am UTC](https://onehack.st/t/ssh-private-key-looting-wordlists-a-collection-of-wordlists-to-aid-in-locating-or-brute-forcing-ssh-private-key-file-names/279148 "2024-03-23T02:40:08Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [March 23, 2024, 2:40am UTC](https://onehack.st/t/ssh-private-key-looting-wordlists-a-collection-of-wordlists-to-aid-in-locating-or-brute-forcing-ssh-private-key-file-names/279148/1 "2024-03-23T02:40:08Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/2/b/2ba4667f4df30e9b6e14f45b70c8d1f71a6c0cee.jpeg)

## LFI for Lateral Movement? Gain SSH Access?

```auto
?file=../../../../../../../../home/user/.ssh/id_rsa
?file=../../../../../../../../home/user/.ssh/id_rsa-cert

```

# SSH Private Key Looting Wordlists 🔒🗝

This repository contains a collection of wordlists to aid in locating or brute-forcing SSH private key file names. These wordlists can be useful for penetration testers, security researchers, and anyone else interested in assessing the security of SSH configurations.

[![GitHub Release](https://camo.githubusercontent.com/741f82f9c042b2e4927252e152280a0359f6ce06dec799337c4d38868d881172/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f72656c656173652f50696e6f795748315a2f5353482d507269766174652d4b65792d4c6f6f74696e672d576f72646c697374732e7376673f7374796c653d666c61742d737175617265)](https://github.com/PinoyWH1Z/SSH-Private-Key-Looting-Wordlists/releases) [![GitHub License](https://camo.githubusercontent.com/c136c50e00c4c0f56b63bd7ebdb7c6f99b067190a509a694c9e2b9ce3e65d19f/68747470733a2f2f696d672e736869656c64732e696f2f6769746875622f6c6963656e73652f50696e6f795748315a2f5353482d507269766174652d4b65792d4c6f6f74696e672d576f72646c697374732e7376673f7374796c653d666c61742d737175617265)](https://github.com/PinoyWH1Z/SSH-Private-Key-Looting-Wordlists/blob/master/LICENSE)

## Wordlist Files 📝

- **ssh-priv-key-loot-common.txt** : Default and common naming conventions for SSH private key files.
- **ssh-priv-key-loot-medium.txt** : Probable file names without backup file extensions.
- **ssh-priv-key-loot-extended.txt** : Probable file names with backup file extensions.
- **ssh-priv-key-loot-\*\_w\_gui.txt** : Includes file names simulating Ctrl+C and Ctrl+V on servers with a GUI.

## Usage 🚀

These wordlists can be used with tools such as Burp Intruder, Hydra, custom python scripts, or any other bruteforcing tool that supports custom wordlists. They can help expand the scope of your brute-forcing or enumeration efforts when targeting SSH private key files.

## Acknowledgements 🙏

This wordlist repository was inspired by John Hammond in his vlog “[Don’t Forget This One Hacking Trick.](https://www.youtube.com/watch?v=2rqb3YSa1SE)”

## Disclaimer ⚠

Please use these wordlists responsibly and only on systems you are authorized to test. Unauthorized use is illegal.

## GitHub:

> **[GitHub - PinoyWH1Z/SSH-Private-Key-Looting-Wordlists: SSH Private Key Looting Wordlists. A collection of...](https://github.com/PinoyWH1Z/SSH-Private-Key-Looting-Wordlists)**
>
> SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.