Hey, is it not just a simple honeypot reverse hack ssh server?People understand that reverse hacking can happen when connecting to random ssh server, right?
> People understand that reverse hacking can happen when connecting to random ssh server, right?No, actually, I've never heard of such a vector. How would that work?
Here is a recent example. Currently unpatched in Debian stable.<a href="https://www.cve.org/CVERecord?id=CVE-2026-60002" rel="nofollow">https://www.cve.org/CVERecord?id=CVE-2026-60002As I understood this, a malicious server can change its host key somewhere during key exchange and trigger a use-after-free in the client, which might be exploitable for code execution.
3dedb728-3f77 · · focus · HN ↗
People understand that reverse hacking can happen when connecting to random ssh server, right?
scubbo · · focus · HN ↗
No, actually, I've never heard of such a vector. How would that work?
mr_mitm · · focus · HN ↗
<a href="https://www.cve.org/CVERecord?id=CVE-2026-60002" rel="nofollow">https://www.cve.org/CVERecord?id=CVE-2026-60002
As I understood this, a malicious server can change its host key somewhere during key exchange and trigger a use-after-free in the client, which might be exploitable for code execution.