514 matches found
linuxprivcheck
linuxprivcheck Linux 권한 상승을 위한 Python 스크립트 원저자는 Mike Czumak Tv3rn1x -- @SecuritySift 입니다. 스크립트 old-linuxprivchecker.py: 유명한 linuxprivchecker.py Python - 업데이트 포함. 더 이상 업데이트하지 않습니다. linuxprivchecker3.py: 유명한 linuxprivchecker.py, Python 2 & 3 모두 호환되며 업데이트 포함. 옵션 --fast 는 .sh 파일에서 비밀번호를 확인하지 않습니다. 새로...
vault-conductor
🗝️ vault-conductor Bitwarden Secret Manager にシークレットとして保存された SSH 鍵を提供する SSH エージェントです。 SSH 認証と Git コミット署名に対応しています。 デモ 特徴 Unix ドメインソケットサーバーとして SSH エージェントプロトコルを実装し、SSH クライアントと Bitwarden Secrets Manager の間の安全なブリッジとして機能します。 特徴は以下のとおりです: エージェントのライフサイクル :...
sshkey-grab
sshkey-grab 이 스크립트는 ssh-agent의 버그를 이용하여 에이전트에 마지막으로 추가된 키를 가져올 수 있습니다. ssh-agent가 종료되지 않고 이전 키가 제거된 이후 새 키가 추가되지 않은 경우, ssh-add -t, -d, -D를 통해 ssh-agent에서 제거된 키를 복구할 수 있습니다. 이 버그는 보고되었으며 새 버전의 OpenSSH에서 수정될 수 있으므로, 이 도구가 작동하지 않을 수 있습니다. 요구 사항 grabagentmem.sh는 제대로 작동하기 위해 대상 시스템에서 root 액세스와 gdb가...
PKCS11SSHAgent
SRO PKCS11 – SSH Agent CNG PKCS11 + SSHエージェント + Pageant + CNG/スマートカードの主権的統合 伝統的に分離されていた4つの機能を1つのWindows実行ファイルに統合します： 完全なPKCS11モジュール（Firefox、OpenSC、ssh -I） OpenSSH/Git/VS/WSL対応のSSHエージェント PuTTY/plink/pscp対応のPageantサーバー スマートカード向けの安全なCNG/KSPオーケストレーター 目次 1. 哲学 2. アーキテクチャ 3. 実行モード 4. インストール 5. 設定 6...
CVE-2023-38408
OpenSSH の脆弱性 - CVE-2023-38408 📚 はじめに OpenSSH 9.3p2 より前のバージョン に脆弱性が発見されました。OpenSSH の ssh-agent における PKCS11 機能は、検索パスが十分に信頼できないため、エージェントが攻撃者制御のシステムに転送されるとリモートコード実行につながります /usr/lib 内のコードは ssh-agent にロードしても必ずしも安全ではありません。この欠陥により、サーバー上の転送されたエージェントソケットを制御し、クライアントホストのファイルシステムに書き込む権限を持つ攻撃者は、ssh-agent...
CVE-2023-38408
参考 / 情報 https://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt...
openssh: OpenSSH: ssh-agent allows remote execution of local operations
A flaw was found in OpenSSH's ssh-agent component. A misinteraction between agent locking and the [email protected] extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS11 tokens or utilize keys with destination...
RLSA-2026:69130 Important: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...
openssh security update
An update is available for openssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
RLSA-2026:69129 Important: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...
openssh security update
An update is available for openssh. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux,...
RockyLinux 9 : openssh (RLSA-2026:69130)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...
AlmaLinux 10 : openssh (ALSA-2026:69129)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69129 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...
RockyLinux 10 : openssh (RLSA-2026:69129)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69129 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrec...
AlmaLinux 9 : openssh (ALSA-2026:69130)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69130 advisory. openssh: OpenSSH: sftp client allows attacker to control downloaded file location CVE-2026-59995 openssh: OpenSSH sshd: Security bypass due to incorrect...
cve-2023-38408
CVE-2023-38408: 現実世界のSSHエージェント脆弱性の理解とシミュレーション 目次 1. はじめに 2. 背景概念 3. CVE-2023-38408の脆弱性 4. 実践的なシミュレーションとテスト 5. 技術的分析 6. 修正と緩和策 7. 結論 1. はじめに レポートの目的 本レポートの目的は、OpenSSHで発見された重大な現実世界の脆弱性であるCVE-2023-38408を、理論的な理解と実践的なシミュレーションの両方を通じて分析することです。このレポートでは、脆弱性の技術的基盤を説明し、制御された環境での悪用方法を示し、実装された緩和策を検証します。...
openssh: OpenSSH: ssh-agent allows remote execution of local operations
A flaw was found in OpenSSH's ssh-agent component. A misinteraction between agent locking and the [email protected] extension allows operations intended for local execution to be performed remotely. This could enable a remote attacker to add PKCS11 tokens or utilize keys with destination...
Important: Red Hat Security Advisory: openssh security update
An update for openssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
Security Bulletin: Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent
Summary Impacted IBM optim versions 1.0.0, 1.1.0 by vulnerability in golang.org/x/crypto/ssh/agent, IBM Optim 1.2.0 resolves these vulnerabilities by upgrading the affected open-source dependencies to fixed versions. Vulnerability Details CVEID:CVE-2025-47913 DESCRIPTION: SSH clients receiving...