Linux Ptrace Auth Sniffer

Cross-compile and deploy a native helper that listens for process events netlink connector and ptrace-attaches to sshd, sudo, ssh client/scp/sftp, and passwd flows to recover password-based authentication material from syscall buffers — without patching sshd or loading a kernel module. Supports...