TL;DR: Visit https://sshlabs.compass-security.training to learn more about SSH security.

Introduction

SSH is a widely used protocol that provides secure access to remote systems. It enables encrypted communication, file transfers, command execution and shell access for system administration.

However, when misconfigured, poorly secured or used in an unsafe way, SSH can become an attack vector for attackers. When we perform Linux hardening or infrastructure reviews, we often see that SSH is not used securely.

I created a presentation where you can learn more about SSH and a hands-on lab where you can learn to perform different attacks related to SSH.

Theory

To understand how SSH works, what features it offers, and the associated security implications, I created a presentation about the important parts regarding security and best practices. It also shows how SSH can be attacked depending on how it is configured and used, and how such attacks can be prevented by correctly configure and use SSH.

Video:

Download slides: ssh_secure_shell_attacks_and_best_practices_2026-05.pdf

Hands-On Labs

The best way to learn something new is by getting your hands dirty. The Docker-based lab environment helps with that by launching several SSH servers in different vulnerable configurations that can be attacked.

Let’s get started and uncover the inner workings of SSH security!

Website

Visit the SSH labs website containing all information now:

SSH Labs Website