Difficulty: Easy

How to Navigate Home Directories, Read Hidden Files, and Manage Credentials Like a Linux Pro.

  TL;DR A serious libssh2 vulnerability now puts SSH clients at risk. Researchers track it as CVE-2026-55200, with a CVSS 4.0 score of 9.2. A remote attacker can corrupt memory and run code o…

TL;DR Researchers publicly disclosed a libssh2 vulnerability tracked as CVE-2026-58050. The flaw lets a malicious SSH server corrupt the heap of a connecting client. Proof-of-concept exploit code …

A public proof-of-concept (PoC) exploit has been released for CVE-2026–55200, a critical vulnerability in the widely used libssh2 library…

TL;DR OpenSSH 10.4 landed on July 6 with eight security fixes. The most serious is a client-side use-after-free, CVE-2026-60002, scored 7.7. Most other issues involve file transfers and server har…

Introduction

Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.

A Linux Essentials article inspired by my OverTheWire: Bandit journey

Originally published at sshlab.eu

TL;DR Four new libssh2 vulnerabilities put SSH and SFTP clients at risk. Each one lets a malicious SSH server corrupt memory on the machine that connects to it. VulnCheck disclosed the flaws on Ju…

Theoretical Overview

Learn how SSH tunnels securely forward network traffic, when local, remote, and dynamic forwarding help, and why they are best for controlled, temporary access.

CERT Polska confirmed active attacks against internet-facing MikroTik RouterOS devices on September 5, 2026. Attackers chain two flaws, named MikroTrick, to seize full control over SSH without a p…

This walkthrough covers the technical steps for identifying, exploiting, and escalating privileges via an exposed SSH service using a…

Room Gamming Server | Difficulty:Easy

Difficulty: medium

TL;DR wolfSSL has released wolfSSH 1.6.0 to fix five security flaws in its lightweight SSH library. The most serious of these wolfSSH vulnerabilities, CVE-2026-16516, scores 9.0 on CVSS 4.0 and ca…

A Large Tor Exit Node Attack An unknown attacker took over 333 Tor exit nodes. That gave the intruder a way to intercept SSH connections and unencrypted correspondence. The hijacked relays made up…

A coordinated attack turned 333 Tor exit nodes into a trap for SSH users. The infected relays made up roughly 10% of all exits on the network. Even worse, the attackers had hidden the Ebury malwar…