61 matches found
totp-ssh-fluxer
TOTP SSHใใผใใใฉใฏใทใณใฐ ไธ้จใฎไบบใฏใใตใผใใผใฎSSHใใผใใๅคๆดใใฆใใใใใใใฎไปใฎๅไปใชใใฎใซ่ฆใคใใใซใใใใฆใใพใใใใใฏไธ่ฌ็ใซ้ ่ฝใซใใใปใญใฅใชใใฃใจ่ฆใชใใใพใใใๅฎ้ใซใฏ/var/log/auth.logใงๅธธใซ่ฆใใใ่ชๅใญใฐใคใณใฎๅคใใๆ้คใใใฎใซ้ๅธธใซๅนๆ็ใงใใ ใใใใใใใใใใซ้ฆฌ้นฟใใใฌใใซใซๅผใไธใใใใฉใใงใใใใ๏ผ้ๅธธใฏใฆใงใใตใคใใธใฎใญใฐใคใณใฎ็ฌฌ2่ฆ็ด ใจใใฆไฝฟ็จใใใTOTPใณใผใใใๅฎ้ใซsshdใตใผใใผใๅพ ใกๅใใฆใใใใผใใ็ฅใใใใซไฝฟใใจใใใ๏ผ...
pentestkoala
Koala ใฏ dropbear SSH ใตใผใใผใฎใใใ็ใงใใใผใใซใใคใณใใใไปฃใใใซใชใขใผใใฏใฉใคใขใณใใซๆฅ็ถใใฆใชใใผในใทใงใซใ้ใใพใใ ใใใฏใๆช็จใใใใใทใณใง pty ใฟใผใใใซใๅๅพใใใฎใซไพฟๅฉใงใใใSSH ใใผใใใฉใฏใผใใฃใณใฐใไปใใๅฎๅ จใชใใผใฟใฎๅค้จๆผๆดฉใซใๅฝน็ซใกใพใใๅ็ SSH ใใผใใใฉใฏใผใใฃใณใฐๆฉ่ฝใไฝฟ็จใใฆใใใใใ่กใใใจใใงใใพใใ ไฝฟใๆน ใฏใฉใคใขใณใใงไปฅไธใฎใณใใณใใๅฎ่กใใฆ SSH ๆฅ็ถใๅพ ใกๅใใพใ: $ ncat -lvp 5000 --sh-exec 'ncat -lvp 9999' ๆช็จใใใใในใใงไปฅไธใๅฎ่ก: $...
pentest-pivoting
ใใใใใฌใคใ ็ฎๆฌก 1. ้่ฆใชๆณจๆไบ้ 2. SSHๅ็ใใผใใใฉใฏใผใใฃใณใฐ 3. SSHใชใขใผใใใผใใใฉใฏใผใใฃใณใฐ 4. SSHใญใผใซใซใใผใใใฉใฏใผใใฃใณใฐ 5. ใใใซใใใใ 6. sshuttle 7. Chisel 8. ใใญใญใทใจใใฆBurpsuiteใไฝฟ็จใใ 9. ๅฝน็ซใคใชใฝใผใน ้่ฆใชๆณจๆไบ้ SOCKSใใญใญใทใฎใในใใซICMPใจใณใผ่ฆๆฑ๏ผping๏ผใไฝฟ็จใใชใใงใใ ใใใ...
idb
Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...
CVE-2024-6387_Check
CVE-2024-6387Check ๐ ๆ่ฟฐ CVE-2024-6387Check ๆฏไธๆฌพ่ฝป้ใ้ซๆ็ๅทฅๅ ท๏ผๆจๅจ่ฏๅซ่ฟ่กๅญๅจๆผๆด็ OpenSSH ็ๆฌ็ๆๅกๅจ๏ผไธ้จ้ๅฏนๆ่ฟๅ็ฐ็ regreSSHion ๆผๆด๏ผCVE-2024-6387๏ผใ่ฏฅ่ๆฌๆๅฉไบๅฟซ้ๆซๆๅคไธช IP ๅฐๅใๅๅๅ CIDR ็ฝ็ป่ๅด๏ผไปฅๆฃๆตๆฝๅจๆผๆดๅนถ็กฎไฟๅบ็ก่ฎพๆฝๅฎๅ จใ ๐ ๅ่ฝ็นๆง ๅฟซ้ๆซๆ ๏ผๅฟซ้ๆซๆๅคไธช IP ๅฐๅใๅๅๅ CIDR ่ๅด๏ผๆฃๆต CVE-2024-6387 ๆผๆดใ ๆจชๅน ่ทๅ ๏ผๆ ้่ฎค่ฏๅณๅฏ้ซๆ่ทๅ SSH ๆจชๅน ใ ๅค็บฟ็จ ๏ผไฝฟ็จ็บฟ็จ่ฟ่กๅนถๅๆฃๆฅ๏ผๆพ่็ผฉ็ญๆซๆๆถ้ดใ ่ฏฆ็ป่พๅบ...
CVE-2026-75754
Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...
CVE-2026-63226: Improper Restriction of Communication Channel to Intended Endpoints
Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...
MAL-2026-11002 Malicious code in habinger (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e193021af7a2102362115c0e0f4564f90f3cf86a4e867b6f02ce266ba419e5 The package's postinstall hook package.json postinstall: node test.js auto-executes two malicious flows on npm install. First, on Linux it fetches an...
๐ WatchGuard Firebox Default SSH Credentials
This is a python script to detect whether or not WatchGuard Firebox devices allow unauthorized access via default credentials admin:readwrite on port 4118. =============================================================================================================================================...
CVE-2017-18443
cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...
CVE-2020-10888
This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SSH port forwarding requests during...
EUVD-2025-201181
An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with netwo...
CVE-2025-59396
CVE-2025-59396 is associated with a default-configuration vulnerability in WatchGuard Firebox devices. The exposed detail from connected documents shows that the default SSH port 4118 permits administrative access using the default admin:readwrite credentials, enabling unauthenticated remote cont...
CVE-2025-54546
CVE-2025-54546 affects Arista DANZ Monitoring Fabric (and related Arista products) where a restricted user could use SSH port forwarding to access host-internal services. The advisory confirms this vulnerability and lists affected platforms (DMF, CCF, CVA, MCD) and affected DMF versions (e.g., DM...
CVE-2025-54546: Incorrect Permission Assignment for Critical Resource
On affected platforms, restricted users could use SSH port forwarding to access host-internal services...
EUVD-2020-3294
Malware in sbrugna...
EUVD-2017-9559
Malware in sbrugna...
EUVD-2015-7660
Malware in sbrugna...
CVE-2025-49599
CVE-2025-49599 affects Huawei ONT gateway devices: EG8141A5 (V5R019C00S100 and earlier), EG8145V5 (V5R019C00S100 and earlier), and EG8145V5-V2 (V5R021C00S184 and earlier). The issue allows the Epuser account to disable the ONT firewall, removing default blocking of SSH/TELNET ports. Connected sou...
CVE-2019-13069
extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service...