Orthevs Orthevs Fathom new horizons
Menü

Workshop-Wiki · Deutsch und Englisch

Agent Forwarding Risk

This example is a controlled SSH workshop lab. It performs local OpenSSH checks only and does not connect to production systems.

Inhaltssprache · Deutsch und EnglischGröße · 32.5 KBexamples/09-agent-forwarding-risk/README.md
Workshop-Beispiele als ZIP
Lernstand in der Web-App

Kapitel als gelesen markieren, Lesefortschritt sehen und Praxismodule abhaken: Diese Funktionen stehen nach Aktivierung der optionalen Web-App zur Verfügung. Der Workshop-Fortschritt ergibt sich automatisch aus den Kapiteln aller Dokumentseiten. Deine Auswahl bleibt auf diesem Gerät; es gibt kein Konto und keinen Serverabgleich. Eine Installation ist nicht erforderlich. Beim Widerruf in den Datenschutz-Einstellungen wird der Lernstand gelöscht.

Lesefortschritt0%
0%
0 / 6 Kapitel gelesen
Weitere SprachfassungGriechisch ↗

Agent Forwarding Risk

Focus: Risikoanalyse und kontrollierte Ausnahmen.

Purpose

This example is a controlled SSH workshop lab. It performs local OpenSSH checks only and does not connect to production systems.

01 / 06

Documentation

02 / 06

Files

03 / 06

Run

bash
./run.sh

The script writes temporary private keys and evidence below work/. That directory is ignored by Git.

04 / 06

Review Questions

    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
    1. How does this example demonstrate Risikoanalyse und kontrollierte Ausnahmen with safe SSH behavior?
05 / 06

Practice Appendix: Example Agent Forwarding Risk

This appendix is a working backlog for longer trainings, reviews and repetitions. Each task can be checked locally with OpenSSH client tools, test keys and sample configurations.

A001. Risikoanalyse und kontrollierte Ausnahmen

  • Task: verify fingerprint and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A002. OpenSSH

  • Task: evaluate configuration and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A003. Trust

  • Task: justify risk and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A004. Security

  • Task: explain error path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A005. Risikoanalyse und kontrollierte Ausnahmen

  • Task: classify log line and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A006. OpenSSH

  • Task: document trust model and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A007. Trust

  • Task: plan rotation and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A008. Security

  • Task: restrict access and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A009. Risikoanalyse und kontrollierte Ausnahmen

  • Task: review forwarding and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A010. OpenSSH

  • Task: describe recovery path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A011. Trust

  • Task: verify fingerprint and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A012. Security

  • Task: evaluate configuration and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A013. Risikoanalyse und kontrollierte Ausnahmen

  • Task: justify risk and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A014. OpenSSH

  • Task: explain error path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A015. Trust

  • Task: classify log line and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A016. Security

  • Task: document trust model and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A017. Risikoanalyse und kontrollierte Ausnahmen

  • Task: plan rotation and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A018. OpenSSH

  • Task: restrict access and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A019. Trust

  • Task: review forwarding and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A020. Security

  • Task: describe recovery path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A021. Risikoanalyse und kontrollierte Ausnahmen

  • Task: verify fingerprint and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A022. OpenSSH

  • Task: evaluate configuration and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A023. Trust

  • Task: justify risk and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A024. Security

  • Task: explain error path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A025. Risikoanalyse und kontrollierte Ausnahmen

  • Task: classify log line and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A026. OpenSSH

  • Task: document trust model and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A027. Trust

  • Task: plan rotation and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A028. Security

  • Task: restrict access and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A029. Risikoanalyse und kontrollierte Ausnahmen

  • Task: review forwarding and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A030. OpenSSH

  • Task: describe recovery path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A031. Trust

  • Task: verify fingerprint and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A032. Security

  • Task: evaluate configuration and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A033. Risikoanalyse und kontrollierte Ausnahmen

  • Task: justify risk and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A034. OpenSSH

  • Task: explain error path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A035. Trust

  • Task: classify log line and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A036. Security

  • Task: document trust model and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A037. Risikoanalyse und kontrollierte Ausnahmen

  • Task: plan rotation and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A038. OpenSSH

  • Task: restrict access and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A039. Trust

  • Task: review forwarding and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A040. Security

  • Task: describe recovery path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A041. Risikoanalyse und kontrollierte Ausnahmen

  • Task: verify fingerprint and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A042. OpenSSH

  • Task: evaluate configuration and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A043. Trust

  • Task: justify risk and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A044. Security

  • Task: explain error path and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A045. Risikoanalyse und kontrollierte Ausnahmen

  • Task: classify log line and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A046. OpenSSH

  • Task: document trust model and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A047. Trust

  • Task: plan rotation and connect the observation explicitly to Trust.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A048. Security

  • Task: restrict access and connect the observation explicitly to Security.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A049. Risikoanalyse und kontrollierte Ausnahmen

  • Task: review forwarding and connect the observation explicitly to Risikoanalyse und kontrollierte Ausnahmen.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.

A050. OpenSSH

  • Task: describe recovery path and connect the observation explicitly to OpenSSH.
  • Evidence: Record command, expected output, actual output, fingerprint or configuration line.
  • Operations question: What happens on host-key change, wrong user, missing key or non-interactive CI execution?
  • Security question: Can a private key, agent socket, tunnel, password login or bastion path be abused?
  • Recovery: Describe revocation, rotation, known-hosts repair, key removal, CA change or log analysis.
06 / 06

SSH · Orthevs Academy

31 Module als durchgängiger Lernpfad.

Die Reihenfolge bleibt unverändert: von der Laborgrundstruktur über fachliche Grundlagen und Betriebsmodelle bis zum abschließenden Troubleshooting. Die technischen Verzeichnisnamen werden bewusst beibehalten.

Praxismodule

Orthevs als App

Orthevs installieren

Die Orthevs Web-App kann auf unterstützten Mobilgeräten und Desktop-Browsern installiert werden.

iPhone und iPad

Öffnen Sie Orthevs in Safari. Tippen Sie auf Teilen, dann auf ‚Zum Home-Bildschirm‘. Aktivieren Sie gegebenenfalls ‚Als Web-App öffnen‘ und tippen Sie auf ‚Hinzufügen‘.

Android

Für die Web-App öffnen Sie das Browsermenü und wählen ‚App installieren‘ oder ‚Zum Startbildschirm hinzufügen‘. Bestätigen Sie die Installation.

Desktop-Browser

Öffnen Sie das Browsermenü oder das Installationssymbol in der Adressleiste und wählen Sie ‚App installieren‘ beziehungsweise ‚Zum Dock hinzufügen‘.

Die Web-App-Installation hängt vom Browser ab. Falls kein Installationsdialog erscheint, nutzen Sie die angezeigten Schritte im Browser.