Vendor
low
advisory
Detection of SSH Reverse Port Forwarding on Windows
1 rule 3 TTPsAdversaries are abusing native Windows OpenSSH and Plink binaries to establish unauthorized reverse SSH tunnels, bypassing inbound connectivity controls for C2 and lateral movement.
OpenSSH +1
command-and-control
lateral-movement
proxy
tunneling
windows
1r
3t
medium
advisory
Multiple Vulnerabilities in PuTTY Allow for DoS, Data Manipulation, and Spoofing
2 rules 2 TTPsA remote, anonymous attacker can exploit multiple vulnerabilities in PuTTY to perform a denial of service attack, manipulate data, and possibly carry out spoofing attacks.
PuTTY
vulnerability
denial-of-service
spoofing
2r
2t