Skip to content

ImageMagick "SSH key" false positive #526

@anti79

Description

@anti79
══╣ Possible private SSH keys were found!
/etc/ImageMagick-6/mime.xml

In my experience it's a common thing for linpeas to confuse this file for an SSH key file. All it is is a MIME type definition file that looks like this:

....
<mime type="audio/x-speex+ogg" description="Ogg Speex audio" priority="100" pattern="*.ogg" />                                                                                              
  <mime type="audio/x-speex" description="Speex audio" data-type="string" offset="0" magic="Speex" priority="50" />                                                                           
  <mime type="audio/x-speex" description="Speex audio" priority="100" pattern="*.spx" />                                                                                                      
  <mime type="video/x-theora+ogg" description="Ogg Theora video" data-type="string" offset="0" magic="OggS" priority="80" />                                                                  
  <mime type="video/x-theora+ogg" description="Ogg Theora video" priority="100" pattern="*.ogg" />                                                                                            
....

Needless to say, it has nothing to do with SSH, so either the regex for SSH keys should be adjusted, or this specific file path should be excluded

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions