pentestkoala

Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

totp-ssh-fluxer

TOTP SSH 포트 플럭싱 일부 사람들은 서버의 SSH 포트를 변경하여 봇이나 다른 악성 프로그램이 찾기 어렵게 만듭니다. 이는 일반적으로 보안을 통한 모호성의 행위로 간주되지만, /var/log/auth.log에서 항상 볼 수 있는 자동화된 로그인 시도를 상당히 줄이는 데 효과적입니다. 하지만 이 개념을 극단적으로 발전시킬 수 있다면 어떨까요? 일반적으로 웹사이트 로그인 시 2차 인증 코드로 사용되는 TOTP 코드를 사용하여 sshd 서버가 수신 대기 중인 포트를 실제로 알 수 있다면 어떨까요? 이를 위해...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 説明 CVE-2024-6387Check は、OpenSSH の脆弱性（特に最近発見された regreSSHion 脆弱性 CVE-2024-6387）を標的とする、軽量かつ効率的なツールです。このスクリプトは、複数の IP アドレス、ドメイン名、CIDR ネットワーク範囲を迅速にスキャンし、潜在的な脆弱性を検出してインフラの安全性を確保します。 🌟 特長 高速スキャン : 複数の IP アドレス、ドメイン名、CIDR 範囲を CVE-2024-6387 脆弱性に対して迅速にスキャンします。 バナー取得 : 認証なしで効率的に SSH...

pentest-pivoting

ピボットガイド 目次 1. 重要な注意事項 2. SSH動的ポートフォワーディング 3. SSHリモートポートフォワーディング 4. SSHローカルポートフォワーディング 5. ダブルピボット 6. sshuttle 7. Chisel 8. プロキシとしてBurpsuiteを使用する 9. 役立つリソース 重要な注意事項 SOCKSプロキシのテストにICMPエコー要求（ping）を使用しないでください。...

CVE-2026-75754

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

CVE-2026-63226: Improper Restriction of Communication Channel to Intended Endpoints

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

MAL-2026-11002 Malicious code in habinger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e193021af7a2102362115c0e0f4564f90f3cf86a4e867b6f02ce266ba419e5 The package's postinstall hook package.json postinstall: node test.js auto-executes two malicious flows on npm install. First, on Linux it fetches an...

📄 WatchGuard Firebox Default SSH Credentials

This is a python script to detect whether or not WatchGuard Firebox devices allow unauthorized access via default credentials admin:readwrite on port 4118. =============================================================================================================================================...

CVE-2017-18443

cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...

CVE-2020-10888

This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SSH port forwarding requests during...

EUVD-2025-201181

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with netwo...

CVE-2025-59396

CVE-2025-59396 is associated with a default-configuration vulnerability in WatchGuard Firebox devices. The exposed detail from connected documents shows that the default SSH port 4118 permits administrative access using the default admin:readwrite credentials, enabling unauthenticated remote cont...

CVE-2025-54546

CVE-2025-54546 affects Arista DANZ Monitoring Fabric (and related Arista products) where a restricted user could use SSH port forwarding to access host-internal services. The advisory confirms this vulnerability and lists affected platforms (DMF, CCF, CVA, MCD) and affected DMF versions (e.g., DM...

CVE-2025-54546: Incorrect Permission Assignment for Critical Resource

On affected platforms, restricted users could use SSH port forwarding to access host-internal services...

EUVD-2015-7660

Malware in sbrugna...

EUVD-2017-9559

Malware in sbrugna...

EUVD-2020-3294

Malware in sbrugna...

CVE-2025-49599

CVE-2025-49599 affects Huawei ONT gateway devices: EG8141A5 (V5R019C00S100 and earlier), EG8145V5 (V5R019C00S100 and earlier), and EG8145V5-V2 (V5R021C00S184 and earlier). The issue allows the Epuser account to disable the ONT firewall, removing default blocking of SSH/TELNET ports. Connected sou...

CVE-2019-13069

extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service...