Linux
SSH Files
/home/%username%/.ssh/authorized_keys
/home/%username%/.ssh/known_hosts
/home/%username%/.ssh/config
/home/%username%/.ssh/id_* (defualt) and just /home/%username%/.ssh/ for all the keys
Network
• /etc/*-release
• /etc/hostname
• /etc/hosts
• /var/lib/networkmanager, dhclient, and dhcp
System
/etc/*-release
macOS
Most of the configirations on macOS are stored in plist files. Unlike Windows with its one repo called the Registry 😱 there is no single place with all the plists.
Kerberos
plutil -p "./0/root/private/var/db/dslocal/nodes/Default/config/KerberosKDC.plist"
Plists
- Label
- Arguments
- RunAtLoad - persistence.
iOS
Application Permissions:
• HomeDomain-Library/TCC/TCC.db
• /private/var/mobile/Library/TCC/TCC.db
Lockdown files
📂 /private/var/db/lockdown