diff --git a/modules/qualifying/learning_ssh.md b/modules/qualifying/learning_ssh.md index faa36b9..0ce9df0 100644 --- a/modules/qualifying/learning_ssh.md +++ b/modules/qualifying/learning_ssh.md @@ -637,5 +637,12 @@ The documentation of `man ssh` is a bit cryptic but I'm leaving it here for refe standard output. ``` +The above example is not *that* bad but we can do the same with **every** server or service on an internal network! +We can expose internal ssh servers to the outside world like this. +It must be noted that in the logs of the **internal** server or service, all incoming connections will originate from the **bad client** in the internal network. +This is both good and bad, you'll be able to pinpoint who is responsible inside your network, but you'll have to dig deeper to find out *where* the data is going to. + +**Let's expose an internal ssh server to the web!** + ## Autossh