pentest_teamcity

Pentest TeamCity using Metasploit TL;DR: Obtain passwords fromJetBrains IDE like IntelliJ or PyCharm and use those credentials inside TeamCity Continuous Integration Server in order to get meterpreter session on server and build agents using metasploit by Kacper Szurek. JetBrains Comment This is ...

CVE-2024-6387-Checker

CVE-2024-6387-Checker Descripción CVE-2024-6387-Checker es una herramienta diseñada para identificar servidores que ejecutan versiones vulnerables de OpenSSH, específicamente dirigida a la vulnerabilidad regreSSHion recientemente descubierta CVE-2024-6387. Este script facilita el escaneo rápido d...

vcheck

vcheck Audita un host Linux remoto a través de SSH en busca de las vulnerabilidades de módulos del kernel Copy Fail y Dirty Frag y, opcionalmente, aplica mitigaciones:...

cbrutekrag

cbrutekrag Pruebas de penetración en servidores SSH mediante ataques de diccionario. Escrito en C. brute krag significa "fuerza bruta" en afrikáans Descargo de responsabilidad Esta herramienta es solo para fines de pruebas éticas. cbrutekrag y sus propietarios no se hacen responsables por el uso...

cbrutekrag

cbrutekrag Penetration tests on SSH servers using dictionary attacks. Written in C. brute krag means "brute force" in afrikáans Disclaimer This tool is for ethical testing purpose only. cbrutekrag and its owners can't be held responsible for misuse by users. Users have to act as permitted by loca...

cve-2022-31749

CVE-2022-31749 by 1vere$k Simple PoC-checker for CVE-2022-31749 by 1vere$k. It exploits a parameter injection vulnerability in the WatchGuard SSH interface. The vulnerability allows a low privileged user to exfiltrate arbitrary system files to an attacker controlled FTP server. Fortunately, there...

Kopia Server 0.23.0 - Remote Code Execution

Kopia before version 0.23.0 allows unauthenticated remote code execution when started in server mode with the --without-password flag. When the /api/v1/repo/exists endpoint is exposed, it enables instantiation of the SFTP storage backend with user-supplied sshArguments. Due to improper argument...

Cockpit Web Console < 360 - Remote Code Execution

Cockpit's remote login feature passes user-supplied hostnames and usernames from the web interface to the SSH client without validation or sanitization. An attacker with network access to the Cockpit web service can craft a single HTTP request to the login endpoint that injects malicious SSH...

sidedoor

sidedoor sidedoor mantiene una conexión SSH o un túnel con un demonio de script de shell. El caso de uso principal es mantener un reenvío de puerto remoto al servidor SSH local o a otro puerto. De esta manera, se puede acceder al dispositivo local sin utilizar conexiones entrantes que podrían est...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

islechat

isle.chat A ssh powered chat server with public and private invite-only channels Each channel has an owner who can change its banner and invite users anyone can join if its public Demo it with ssh [email protected] This project is very new right now so don't rely on it for anything critical...

CVE-2024-3094

CVE-2024-3094 CVE-2024-3094 expuso una puerta trasera en la biblioteca de compresión XZ, permitiendo acceso SSH remoto al omitir la autenticación. Es un ataque importante a la cadena de suministro que afecta a sistemas Linux, destacando los riesgos en componentes confiables de código abierto. La...

CVE-2025-32433-PoC

CVE-2025-32433: PoC de RCE no autenticado en Erlang/OTP SSH Este repositorio contiene una prueba de concepto PoC para CVE-2025-32433, una vulnerabilidad crítica de ejecución remota de código RCE no autenticada que afecta a la implementación del servidor SSH en Erlang/Open Telecom Platform OTP. Es...

firehol

FireHOL http://firehol.org/ root@kitploit: FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade...

vSphereyeeter

vsphereyeeter.sh es un script bash automatizado para explotar la vulnerabilidad CVE-2021-21972 en el cliente vSphere para servidores vCenter. Una vez ejecutado, simplemente proporciónale la dirección IP de tu objetivo vulnerable y se te presentará un shell SSH. "El vSphere Client HTML5 contiene u...

sshprank

Descripción Una herramienta rápida de escáner masivo SSH, cracker de inicios de sesión, capturador de banners y verificador de autenticación por contraseña que utiliza los módulos python-masscan y shodan. Uso root@kitploit: hacker@blackarch $ sshprank -H / / / / / / / / / / / / /// | / / / // /...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387 Vulnerability Checker Overview This Python script is designed to check SSH servers for the CVE-2024-6387 vulnerability, specifically targeting the recently discovered regreSSHion , which is associated with specific versions of OpenSSH. The tool supports multiple IP addresses, URLs,...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...

OpenSSH-Vulnerability-test

Verificador de Vulnerabilidad OpenSSH CVE-2024-6387 Descripción general Este programa en C escanea direcciones IP o rangos de red especificados para comprobar si los servidores están ejecutando una versión potencialmente vulnerable de OpenSSH. Comprueba si el puerto SSH por defecto es 22 está...

Aker

Aker SSH Gateway What is Aker? Aker is a security tool that helps you configure your own Linux ssh jump/bastion host. Named after an Egyptian mythology deity who guarded the borders, Aker would act as choke point through which all your sysadmins and support staff access Linux production servers...