You should note that the SSH key has been changed. $ dsocks.sh ssh level01@ctf.stri.pe @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ W

You should note that the SSH key has been changed. $ dsocks.sh ssh level01@ctf.stri.pe @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that a host key has just been changed. The fingerprint for the RSA key sent by the remote host is 74:67:32:4a:04:b8:9f:05:b6:e8:29:43:26:12:75:11. Please contact your system administrator. Add correct host key in /home/jcr/.ssh/known_hosts to get rid of this message. Offending RSA key in /home/jcr/.ssh/known_hosts:8 RSA host key for ctf.stri.pe has changed and you have requested strict checking. Host key verification failed. It may be something harmless/simple like round-robin DNS combined with a failure to replicate the key, or more likely, someone has rooted the box. EDIT: As confirmed by gdb and ab below, there's a good reason for the key change.