The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
- https://github.com/averyth3archivist/nmap-network-reconnaissance
- https://github.com/lekctut/sdb-hw-13-01
- https://github.com/pedr0alencar/vlab-metasploitable2
- https://github.com/vshaliii/DC-1-Vulnhub-Walkthrough