shellclear is a security tool that provides a simple and fast way to secure your shell command history.
Sensitive data can be stored in your history file when exporting a token of something or running a script with a token.
Sometimes those secrets can be visible to others when sharing your terminal / autocomplete command and more.
* Shellclaer can be a shell plugin that shows a summary of sensitive data when opening a new terminal
* Get a list of sensitive data found in the history shells
* Clear the sensitive information
If your account gets compromised attackers can use the details from the history to move laterally in the network, because if you have passwords etc in the history then the attackers have access to it as well.
This is especially true for bridge / bastion systems that control access to internal servers. If the passwords/secrets to access the internal servers are in the history they get compromised as well.
7 comments
[ 2.6 ms ] story [ 37.1 ms ] thread* Shellclaer can be a shell plugin that shows a summary of sensitive data when opening a new terminal * Get a list of sensitive data found in the history shells * Clear the sensitive information
read -s -r MY_PASSWORD
export MY_PASSWORD
curl -u "admin:$MY_PASSWORD" https://example.com
?
I’d just unset histsize and histfile cars for the duration of doing sensitive stuff.
Sure, but only your user can read it. How bad is the exposure, really?
This is especially true for bridge / bastion systems that control access to internal servers. If the passwords/secrets to access the internal servers are in the history they get compromised as well.