Linked Questions

25
votes
2answers
4k views

Risks of ssh to an untrusted host? [duplicate]

I use ssh a lot to connect to a variety of servers at my university. The machines are administrated by students, so assume they can't really be trusted;-) What are the risks in making a ssh ...
4
votes
3answers
2k views

Is it safe to connect to random SSH servers? [duplicate]

In a nutshell: How secure are SSH clients? Can servers mess with them? I saw this Ghost in the Shell bash remake today. Funny enough and there are a few movies (The Matrix, Star Wars, etc) that are ...
2
votes
1answer
273 views

Risk involved with using SSH for CTF challenges? [duplicate]

I'm new to the INFOSEC scene and was intrigued by the concept of CTF challenges. I was hoping to get started with OverTheWire.org which requires you to SSH to their server to complete the challenges. ...
1
vote
1answer
144 views

Are there any risks in just sshing into a compromised server? [duplicate]

Let's say that the server is completely compromised (and the hacker has root access to the compromised server). If I ssh into the compromised server, is there any way (e.g., in the key exchange) that ...
1
vote
2answers
137 views

Is it safe for a client server to log into a non-trusted server with SSH? [duplicate]

I was switching a frontend to use SSH instead of HTTP for the backend, and then it hit me. HTTP is stateless, so I can send requests to a server which I don’t trust. But how about SSH? Isn’t SSH a two ...
0
votes
1answer
50 views

Can ssh connected computer control the source [duplicate]

If i ssh to some remote computer ssh@hisip fingerprint is sha256:xxxxx` then continue (y/n) yes can the remote computer later control my source computer? Also is there any risk if i connect to a ...
23
votes
2answers
17k views

Security Concerns with X11 Forwarding

What are some of the security concerns and reasons either for or against allowing X11 Forwarding. I have generally taken an approach of not allowing it under the blanket guise of security. Recently, ...
16
votes
3answers
16k views

Why would a remote desktop connection harm my PC?

When I try to connect to a remote desktop, a message appears which says something like "Make sure you trust this PC, connecting to untrusted computer might harm your PC". Why would it harm my PC? I ...
0
votes
2answers
129 views

How safe are passwords while using prompt?

Simple question. How safe are passwords while using prompt? For example logging through SSH. ssh user@server and then you have question for password - of course hidden but... what's going "under ...
0
votes
1answer
51 views

Is it safe to browse the web through an SSH SOCKS5 connection to an untrusted proxy?

I have established an SSH tunnel to an untrusted machine: ssh -N -D 12345 john@example.com Next, I set up Firefox's connection settings to use the SSH tunnel by setting the SOCKS host to 127.0.0.1, ...
3
votes
0answers
81 views

Could a running SSH server somehow fool connected SSH client to create a reverse port forward?

Let's be extra paranoid and assume that the SSH server my client is connected to, was "enhanced" so that every SSH client that establishes an connection with it, will be tricked into thinking that it ...