ssh-audit

ssh-audit ssh-audit はSSHサーバー監査のためのツールです。 特徴 SSH1およびSSH2プロトコルサーバーサポート; バナーを取得、デバイスまたはソフトウェアとオペレーティングシステムを認識、圧縮を検出; 鍵交換、ホスト鍵、暗号化、メッセージ認証コードアルゴリズムを収集; アルゴリズム情報を出力（利用可能時期、削除/無効、安全でない/弱い/レガシーなど）; アルゴリズム推奨を出力（認識されたソフトウェアバージョンに基づいて追加または削除）; セキュリティ情報を出力（関連する問題、割り当てられたCVEリストなど）;...

pentestkoala

Koala は dropbear SSH サーバーのパッチ版で、ポートにバインドする代わりにリモートクライアントに接続してリバースシェルを開きます。 これは、悪用されたマシンで pty ターミナルを取得するのに便利であり、SSH ポートフォワーディングを介した安全なデータの外部漏洩にも役立ちます。動的 SSH ポートフォワーディング機能を使用してピボットも行うことができます。 使い方 クライアントで以下のコマンドを実行して SSH 接続を待ち受けます: $ ncat -lvp 5000 --sh-exec 'ncat -lvp 9999' 悪用されたホストで以下を実行: $...

wireguard-initramfs

wireguard-initramfs dropbear を wireguard 経由で使用します。 カーネル起動中、暗号化パーティションがマウントされる前に wireguard ネットワーキングを有効にします。dropbear と組み合わせることで、鍵素材を保存したりリモートネットワーク上にポートを公開したりすることなく、完全に暗号化されたリモートブートを実現できます。wireguard サーバーのエンドポイントに到達できるインターネット接続が存在するだけでよいのです。 通常の dropbear 接続と DNS 解決を使用して wireguard エンドポイントを見つけることができます...

Dropbear_CVE-2013-4434

DropbearCVE-2013-4434 dropbearCVE-2013-4434.sh このスクリプトは、CVE-2013-4434 https://vulners.com/cve/CVE-2013-4434 をチェックします。2013.59 より前の Dropbear SSH Server は、ログオン試行の失敗に対して、ユーザーアカウントが存在するかどうかに応じて異なる時間遅延でエラーメッセージを生成するため、リモートの攻撃者は有効なユーザー名を発見できます。...

CVE-2016-3116-DropbearSSH

このリポジトリには README がありません。...

CVE-2025-15638

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

SUSE CVE-2025-15638

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

EUVD-2025-209545

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

CVE-2025-15638

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

CVE-2025-15638

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

CVE-2025-15638 Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

CVE-2025-15638 Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

CVE-2025-15638

The Net::Dropbear Perl module (an SSH client interface based on Dropbear) versions prior to 0.14 are vulnerable because they bundle an insecure version of the libtomcrypt library. Specifically, these versions include Dropbear 2019.78 or earlier , which are affected by CVE-2016-6129 and CVE-2018-1...

CVE-2025-15638 Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

PT-2026-33994

Name of the Vulnerable Software and Affected Versions Net::Dropbear versions prior to 0.14 Description Net::Dropbear for Perl contains a vulnerable version of libtomcrypt, specifically including versions of Dropbear 2019.78 or earlier. Recommendations Update Net::Dropbear to version 0.14 or later...

Net::Dropbear 安全漏洞

Net::Dropbear is an SSH client interface module developed by ATRODO’s individual developers, based on Dropbear. Versions of Net::Dropbear prior to 0.14 contained security vulnerabilities, which stemmed from the inclusion of the vulnerable libtomcrypt library. These vulnerabilities may be affected...

CVE-2025-15638: Dependency on Vulnerable Third-Party Component

Net::Dropbear versions before 0.14 for Perl contains a vulnerable version of libtomcrypt. Net::Dropbear versions before 0.14 includes versions of Dropbear 2019.78 or earlier. These include versions of libtomcrypt v1.18.1 or earlier, which is affected by CVE-2016-6129 and CVE-2018-12437...

CVE-2026-3706

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...

EUVD-2026-10213

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...

CVE-2026-3706

A vulnerability was determined in mkj Dropbear up to 2025.89. Impacted is the function unpackneg of the file src/curve25519.c of the component S Range Check. This manipulation causes improper verification of cryptographic signature. The attack can be initiated remotely. The attack is considered t...