Unverified50% confidenceFactExact time
SSH outbound tunnels can bypass firewalls and NAT blocking of inbound traffic, and attackers achieve persistent login by writing to ~/.ssh/authorized_keys.
1
Sources
50%
Confidence
Long-term
Relevance
11/1/2026
First Seen
Sources
Related Entities
Related Claims
Unverified完善的 SSH 访问防护应结合网络层加密隧道、SSH 密钥认证、MFA 多因素验证和最小权限原则等多层防御74% similarUnverifiedIn this incident, the reverse tunnel failed to connect in most cases, because enabling the SSH service requires administrator privileges, and the malicious code itself contained coding errors.73% similarUnverifiedThe core security risk of SSH agent forwarding is that once a remote host is compromised, an attacker can use the forwarded agent socket to impersonate the user and access other systems without ever touching the private key itself72% similarUnverifiedssh-agent exposes a Unix domain socket, whose path is typically stored in the environment variable SSH_AUTH_SOCK, through which other programs send signing requests71% similarUnverifiedIn Unix-like systems, the SSH protocol specification requires private keys to be stored in the ~/.ssh/ directory.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1123405API
curl https://kongchang.com/api/v1/knowledge/claims/1123405MCP
get_claim(id=1123405)