PuttyRider

PuttyRider Putty 세션을 가로채서 대화를 스니핑하고 Linux 명령을 주입합니다. Download PuttyRider-bin.zip Documentation Defcamp 2014 프레젠테이션 - pdf Defcamp 2014 프레젠테이션 - video Examples 실행 중인 Putty 프로세스와 그 상태주입됨/주입되지 않음를 나열합니다. root@kitploit: PuttyRider.exe -l 첫 번째로 발견된 putty.exe에 DLL을 주입하고 DLL에서 내 IP:Port로 역방향 연결을 시작한 후...

SessionGopher

Copyright 2017 FireEye、Brandon Arvanaghi（@arvanaghi）が作成 Licensed under the Apache License, Version 2.0 the "License"; you may not use this file except in compliance with the License. You may obtain a copy of the License at root@kitploit: http://www.apache.org/licenses/LICENSE-2.0 Unless required ...

vuln-chm-hijack

PuTTY の脆弱性 vuln-chm-hijack CHM ハイジャッキングによる悪意のあるコード実行の可能性 概要 バージョン 0.70 以前では、Windows 版 PuTTY GUI ツールのいずれかでオンラインヘルプを起動すると、そのツールは自身の実行ファイルと同じディレクトリを探してヘルプファイルを特定していました。 もし、無関係なコードがファイルを落とし込めるディレクトリ（例えば、ブラウザーの既定のダウンロードディレクトリから直接実行する場合など）から PuTTY を実行していたとすると、誰かが putty.chm...

CVE-2024-31497-POC

CVE-2024-31497 POC この脆弱性は、ecc-ssh.c ファイルにおける ECDSA ノンス生成の偏りを悪用します。ノンスは $sha512ID\ ||\ sha512privKey\ ||\ sha1data\ mod\ q$ で生成され、上位9ビットがゼロになります。秘密鍵を復元するには60個の署名が必要ですが、58個でも成功確率は50%です。 脆弱性は Bäumer と Marcus Brinkmann によって発見されました。 要件 このエクスプロイトを使用するには、sagemath と requirements.txt 内の Python...

CVE-2024-31497

-CVE-2024-31497 一个旨在利用 CVE-2024-31497 揭示 Putty 漏洞的脚本。...

The vulnerability of the PuTTY encryption protection mechanism lies in its insufficient verification of data authenticity, allowing attackers to execute arbitrary code.

The vulnerability of the PuTTY encryption method is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260709-73-0032

The vulnerability in Putty is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260707-73-0021

The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

ROS-20260707-73-0023

The vulnerability of the sshrsakexfreekey function in the PuTTY cryptographic protection tool is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

ROS-20260707-73-0022

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

MGASA-2026-0210 Updated putty packages fix security vulnerabilities

ECDSA signature verification can be made to fail an assertion. Server can provoke a double free in RSA KEX code. Telnet session data is marked with trust sigils after authenticating to a proxy. PuTTY Ed25519 Signature ecc-ssh.c eddsaverify signature verification. CVE-2026-4115...

[SECURITY] Fedora 43 Update: putty-0.84-1.fc43

Putty is a SSH, Telnet & Rlogin client - this time for Linux...

[SECURITY] Fedora 44 Update: putty-0.84-1.fc44

Putty is a SSH, Telnet & Rlogin client - this time for Linux...

Fedora 44 : putty (2026-1ab61e6e20)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1ab61e6e20 advisory. This is an update fixing several security related problems in putty. Tenable has extracted the preceding description block directly from the Fedora...

Fedora 43 : putty (2026-61f53cc218)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-61f53cc218 advisory. This is an update fixing several security related problems in putty. Tenable has extracted the preceding description block directly from the Fedora...

The vulnerability of the Telnet protocol implementation in the cryptographic security tool PuTTY, which allows attackers to perform spoofing attacks

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

The vulnerability of the ssh_rsakex_freekey() function in the PuTTY cryptographic protection tool allows a hacker to induce a service failure.

The vulnerability of the sshrsakexfreekey function in the PuTTY cryptographic protection tool is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the ECDSA algorithm (Elliptic Curve Digital Signature Algorithm) in the PuTTY cryptographic protection tool allows a hacker to induce a service failure.

The vulnerability of the ECDSA Elliptic Curve Digital Signature Algorithm algorithm in the PuTTY cryptographic protection tool is related to an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

openSUSE 16 Security Update : putty (openSUSE-SU-2026:20851-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:20851-1 advisory. Changes in putty: - Update to release 0.84 Fixed a remotely triggerable double-free in RSA key exchange. Fixed a remotely triggerable crash assertion...

OPENSUSE-SU-2026:20851-1 Security update for putty

This update for putty fixes the following issues: Changes in putty: - Update to release 0.84 Fixed a remotely triggerable double-free in RSA key exchange. Fixed a remotely triggerable crash assertion failure - program termination in NIST ECDSA signature verification. Fixed marking of Telnet and...