pentestkoala

Koala is a patched version of the dropbear SSH server that instead of binding to a port opens up reverse shells by connecting to a remote client. This is useful for gaining a pty terminal on an exploited machine and also for secure exfiltration of data via SSH port forwarding. Pivoting can also b...

totp-ssh-fluxer

Fluctuation de port SSH via TOTP Certaines personnes changent leur port SSH sur leurs serveurs pour qu'il soit légèrement plus difficile à trouver pour les bots ou autres nuisibles, et bien que cela soit généralement considéré comme une action de sécurité par l'obscurité, cela fonctionne très bie...

idb

Idb idb is a tool to simplify some common tasks for iOS pentesting and research. Originally there was a command line version of the tool, but it is no longer under development so you should get the GUI version. idb has a new homepage athttp://www.idbtool.com All documentation and news are posted...

CVE-2024-6387_Check

CVE-2024-6387Check 📜 Description CVE-2024-6387Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH, specifically targeting the recently discovered regreSSHion vulnerability CVE-2024-6387. This script facilitates rapid scanning of multiple IP...

pentest-pivoting

Pivoting Guide Table of Contents 1. Important Notes 2. SSH Dynamic Port Forwarding 3. SSH Remote Port Forwarding 4. SSH Local Port Forwarding 5. Double Pivoting 6. sshuttle 7. Chisel 8. Using Burpsuite as Proxy 9. Usefull Resources Important Notes Do not use ICMP echo requests ping to test SOCKS...

CVE-2026-75754

Missing Authentication for Critical Function, Server-Side Request Forgery SSRF, and Use of Hard-coded Credentials in ASUS Control Center allow an unauthorized user to obtain the encryption key via an HTTP request, causing a local service to enable SSH on port 2222. The attacker can then log in wi...

CVE-2026-63226: Improper Restriction of Communication Channel to Intended Endpoints

Printers and Multifunction Printers MFPs provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations. When SSH is enabled on an affected product, SSH port forwarding may be leveraged to connect to other node on the LAN...

MAL-2026-11002 Malicious code in habinger (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56e193021af7a2102362115c0e0f4564f90f3cf86a4e867b6f02ce266ba419e5 The package's postinstall hook package.json postinstall: node test.js auto-executes two malicious flows on npm install. First, on Linux it fetches an...

📄 WatchGuard Firebox Default SSH Credentials

This is a python script to detect whether or not WatchGuard Firebox devices allow unauthorized access via default credentials admin:readwrite on port 4118. =============================================================================================================================================...

CVE-2017-18443

cPanel before 64.0.21 allows demo and suspended accounts to use SSH port forwarding SEC-247...

CVE-2020-10888

This vulnerability allows remote attackers to bypass authentication on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of SSH port forwarding requests during...

EUVD-2025-201181

An issue was discovered on Thermo Fisher Ion Torrent OneTouch 2 INS1005527 devices. They run an SSH server accessible over the default port 22. The root account has a weak default password of ionadmin, and a password change policy for the root account is not enforced. Thus, an attacker with netwo...

CVE-2025-59396

CVE-2025-59396 is associated with a default-configuration vulnerability in WatchGuard Firebox devices. The exposed detail from connected documents shows that the default SSH port 4118 permits administrative access using the default admin:readwrite credentials, enabling unauthenticated remote cont...

CVE-2025-54546

CVE-2025-54546 affects Arista DANZ Monitoring Fabric (and related Arista products) where a restricted user could use SSH port forwarding to access host-internal services. The advisory confirms this vulnerability and lists affected platforms (DMF, CCF, CVA, MCD) and affected DMF versions (e.g., DM...

CVE-2025-54546: Incorrect Permission Assignment for Critical Resource

On affected platforms, restricted users could use SSH port forwarding to access host-internal services...

EUVD-2017-9559

Malware in sbrugna...

EUVD-2015-7660

Malware in sbrugna...

EUVD-2020-3294

Malware in sbrugna...

CVE-2025-49599

CVE-2025-49599 affects Huawei ONT gateway devices: EG8141A5 (V5R019C00S100 and earlier), EG8145V5 (V5R019C00S100 and earlier), and EG8145V5-V2 (V5R021C00S184 and earlier). The issue allows the Epuser account to disable the ONT firewall, removing default blocking of SSH/TELNET ports. Connected sou...

CVE-2019-13069

extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH and port forwarding to reach a 127.0.0.1 service...