Tech Challenge

2026-08-04

🔐

Daily Tech Challenge

Cybersecurity

medium

Question 1 of 5

A developer enables SSH agent forwarding so they can run `git clone git@github.com:...` directly on a shared build host. Other engineers hold root on that host. While the session is open, what can an attacker on the build host actually do?

Example

# ~/.ssh/config on the developer's laptop
Host build-shared
  HostName build.example.com
  User dev
  ForwardAgent yes        # so git works "in one hop"

$ ssh build-shared
dev@build:~$ echo $SSH_AUTH_SOCK
/tmp/ssh-XXXX8Kq1/agent.4711
dev@build:~$ ssh-add -l
256 SHA256:9mF3...  dev@laptop (ED25519)

Tuesday, August 4, 2026 · A new challenge drops every day