ssh-mitm

SSH-MITM - ssh audits made simple An interactive SSH interception tool for authorized security audits. Intercept sessions, monitor live traffic, inject commands, and manipulate file transfers — all in real time. !Follow me on...

CVE-2020-15778-SCP-Command-Injection-Check

CVE-2020-15778 – OpenSSH SCP 명령 삽입 취약점 탐지 스크립트 개요 CVE-2020-15778 는 OpenSSH에서 제공하는 scp 유틸리티에서 발견된 명령 삽입 취약점입니다 버전 ≤ 8.3p1. 이 문제는 조작된 대상 인자백틱 포함가 scp에 전달될 경우 공격자가 클라이언트 시스템에서 임의의 명령을 실행할 수 있게 합니다. 이 저장소에는 Bash로 작성된 안전한 탐지 및 시뮬레이션 스크립트 가 포함되어 있습니다. 이 스크립트는 사용자와 시스템 관리자가 다음을 수행하는 데 도움을 줍니다: 시스템의 scp...

CVE-2020-15778

CVE-2020-15778에 대한 분석 보고서 발견자: Chinmay Pandya 이메일 주소 : [email protected] 링크드인 : www.linkedin.com/in/chinmay-pandya 취약점 제목: OpenSSH 8.3p1의 scp에서 eval 삽입 가능 제품: Openssh 영향을 받는 구성 요소: SCP 취약한 버전: 수정된 버전: - CVE 번호: CVE-2020-15778 취약한 코드 라인:...

reverse_ssh

Reverse SSH 아트 크레딧: https://www.instagram.com/smart.hedgehog.art/ SSH를 리버스 셸에 사용하고 싶으신가요? 이제 가능합니다. 기본 SSH 구문으로 리버스 셸 관리 및 연결 동적, 로컬 및 원격 포워딩 대상에서 파일을 검색하기 위한 기본 SCP 및 SFTP 구현 전체 윈도우 셸 http, websockets, tls 등 다양한 네트워크 전송 높은 신뢰도의 제어 채널을 위한 상호 클라이언트 및 서버 인증 그 외에도!text +----------------+ +---------+...

Go-SCP

이 책은 다음 형식으로 다운로드할 수 있습니다: PDF, Mobi 및 ePub. 소개 Go 언어 - 웹 애플리케이션 안전 코딩 실무 가이드는 Go 프로그래밍 언어를 사용하고 이를 웹 개발에 활용하려는 모든 사람을 위해 작성된 안내서입니다. 원래 Checkmarx Security Research Team이 만들었고 이후 OWASP 재단에 기부되었습니다: 프로젝트 페이지를 참조하세요. 이 책은 OWASP Secure Coding Practices - Quick Reference Guide v2 stable 릴리스를 따릅니다. 이 ...

CVE-2016-2434

CVE-2016-2434...

egression

설명 EGRESSION은 주어진 네트워크에서 민감한 데이터를 업로드하는 것이 얼마나 쉬운지 즉시 확인할 수 있는 도구입니다. 이 도구는 로컬에 평문으로 저장된 다음과 같은 내용의 민감한 파일로 시작합니다. 이 파일은 다양한 기술을 사용하여 아웃바운드 연결을 시도하고 이 파일을 업로드함으로써 네트워크의 이그레스/DLP 제어를 테스트하는 데 사용됩니다. //미국 사회보장번호 567-24-4901 //신용카드 번호 4111111111111111 5105105105105100 4222222222222 //생년월일 12.12.94...

CVE-2020-15778

CVE-2020-15778 소개 이 저장소는 CVE-2020-15778을 재현합니다. 단계 1. scp 서버 및 클라이언트용 도커 이미지 빌드 cd client docker build -t client-cve . cd server docker build -t server-cve . 2. 컨테이너에서 scp 서버 실행 docker run -d -P --name scp-server server-cve 다음 명령어로 scp 서버의 내부 IP 주소를 확인합니다. docker inspect --format='range...

Rocky Linux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (ALMALINUX9.6:CLSA-2026:1778269628)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778269628 advisory. - A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785502239)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785502239 advisory. - A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection...

CentOS Linux 8.4 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc (CENTOS8.4:CLSA-2026:1777567965)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777567965 advisory. - In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the...

Rocky Linux 8 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (crlsa-2020_4545)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20204545 advisory. libssh: denial of service when handling AES-CTR or DES ciphers CVE-2020-1730 libssh: unsanitized location in scp could lead to unwanted command execution...

Rocky Linux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785502239)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785502239 advisory. - A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection...

AlmaLinux 9.2 [TuxCare] Security Update: ant / ant-antlr / ant-apache-bcel / ant-apache-bsf / ant-apache-oro / etc (ALMALINUX9.2:CLSA-2026:1789382807)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1789382807 advisory. - The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to...

AlmaLinux 9.6 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal (ALMALINUX9.6:CLSA-2026:1771501913)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1771501913 advisory. - When doing SSH-based transfers using either SCP or SFTP, and setting the knownhosts file, libcurl could still mistakenly accept connecting ...

AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1784280067)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1784280067 advisory. - sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when sftp server:/path . is used with an...

AlmaLinux 9.2 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785499004)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785499004 advisory. - A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection...

Rocky Linux 8 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc (crlsa-2024_3166)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243166 advisory. openssh: scp allows command injection when using backtick characters in the destination argument CVE-2020-15778 Tenable has extracted the preceding description bloc...

CentOS Linux 8 [TuxCare] Security Update: curl / curl-minimal / libcurl / libcurl-devel / libcurl-minimal Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1773153207)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1773153207 advisory. - When an OAuth2 bearer token is used for an HTTPS transfer, and that transfer performs a cross-protocol redirect to a second URL...

AlmaLinux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (ALMALINUX9.6:CLSA-2026:1778269628)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778269628 advisory. - A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory...