Skip to content
HackIndex logo

HackIndex

SSH
Service

SSH

SSH remote access protocol. Attackers target banners, auth methods, weak keys, legacy crypto, misconfigs, and CVEs, then pivot via agent forwarding, tunneling, and key reuse for persistence and exfil

:22 25 guides 7 phases
1 min read Updated: Jul 14, 2026

What is SSH?

SSH (Secure Shell) gives you secure encrypted command-line access to remote systems.

Common security issues

  • Weak passwords.

  • Brute-force attacks.

  • Key reuse across systems.

  • Agent forwarding risk.

  • Poor sudo restrictions.

Default ports

  • 22

Enumeration

SSH banners, algorithms, auth methods, keys, and user enum guides

6

SSH User Enumeration

Detect valid system usernames via SSH timing attacks and error-based responses using tools like Metasploit, ssh-audit, and custom timing scripts.

Mar 16, 2026 • 2 min read

Vulnerability Discovery

Guides on finding weak SSH configs and version-based CVEs

2

Exploitation

Guides for SSH auth attacks, key testing, and legacy crypto access

6

SSH Terrapin Attack (CVE-2023-48795)

Exploiting the Terrapin attack to downgrade SSH session security by manipulating sequence numbers during handshake negotiation.

Mar 16, 2026 • 9 min read

SSH User Enumeration Exploitation

Exploit SSH user enumeration vulnerabilities to identify valid system accounts via timing attacks and response analysis, enabling targeted credential attacks.

Mar 16, 2026 • 3 min read

Post-Exploitation

SSH keys, agents, configs, and backdoor auditing guides

4

Lateral Movement

SSH pivoting via keys, agents, credential reuse, and tunneling

4

Persistence

Guides on maintaining SSH access after initial compromise

1

SSH Persistence Techniques

Explores SSH-based persistence methods including authorized_keys manipulation, config backdoors, and rogue SSH daemons to maintain long-term access.

May 6, 2026 • 5 min read

Data Exfiltration

SSH and SCP data transfer, tunneling, and timing tactics

2