pyrexecd

PyRexecd PyRexecd is a standalone SSH server for Windows. Features: Standalone Win32 app not a service that resides in SysTray. Supports a single user / pubkey auth only. Notifies incoming connections via popup. Sends/Receives the clipboard text via stdin/stdout. PyPI Project page:...

dsa

A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...

reverse-ssh

ReverseSSH A statically-linked ssh server with a reverse connection feature for simple yet powerful remote access. Most useful during HackTheBox challenges, CTFs or similar. Has been developed and was extensively used during OSCP exam preparation. Get the latest Release Features Catching a revers...

Libssh-server-CVE-2018-10933

libssh Authentication Bypass VulnerabilityCVE-2018-10933 中文版本Chinese version libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side. A logic vulnerability was found in libssh's server-side state machine. The attacker can send the MSGUSERAUTHSUCCESS message...

sidedoor

sidedoor sidedoor maintains an SSH connection or tunnel with a shell script daemon. The primary use case is maintaining a remote port forward to the local SSH server or another port. Thus, the local device can be accessed without using incoming connections that may be blocked by a NAT or firewall...

CVE-2018-10933

CVE-2018-10933 libssh server authentication bypass vulnerability CVE-2018-10933 root@kitploit: libssh是一个提供ssh相关接口的开源库，包含服务端、客户端等。其服务端代码中存在一处逻辑错误，攻击者可以在认证成功前发送MSGUSERAUTHSUCCESS消息，绕过认证过程，未授权访问目标SSH服务器。 0x00 docker for libssh vuln...

SSH-Weak-DH

About This tool creates SSH connections to a server and goes through different client configurations to check if the server permits a Diffie-Hellman DH key exchange using a weak group. We aim for our tool to help assess SSH servers for weak DH key exchange settings. Please be aware that this tool...

sish

sish Open source SSH tunneling for HTTPS, WSS, TCP, aliases, and SNI. If you like the simplicity of serveo/ngrok-style sharing but want to use plain SSH and run your own infrastructure, sish is built for that. No custom client required for end users Public and private tunnel workflows Docker and...

CVE-2020-9283

Exploit for CVE-2020-9283 This project is inspired by the original POC found here github.com/mark-adams/exploits/CVE-2020-9283. I was curious as to how the Go SSH library was implemented so decided to implement the PoC using go. A short writeup can be found here...

CVE-2018-15473

CVE-2018-15473 SSH-Username-Enumeration-Exploit OpenSSH 2.3 7.7 Edited version of the original exploit: https://www.exploit-db.com/exploits/45233 Converted to Python3 Added username wordlist option How To Run root@kitploit: Ensure that you install the requirements: foo@bar:$ pip3 install -r...

opensshenum

Description: Opensshenum is an OpenSsh user enumerator permitting to verify an arbitrary list of user names against an OpenSsh server, to know those actually presents on that remote machine. This program exploits a bug corrected in July 2018 proven to be effective at least starting from OpenSSH...

CVE-2024-45337-POC

CVE-2024-45337-POC CVE-2024-45337 の概念実証 POC ビルド root@kitploit: go version go version go1.23.2 linux/amd64 go build 使用方法 root@kitploit: Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey that will pass verificatio...

Libssh2-Exploit

Libssh2-Exploit Goals In this project, we aim to create an exploit to an out of bounds read vulnerabulity in libssh2 described in CVE-2019-13115. Create a malicious ssh server to cause a client connecting to it to crash and see if this can be exploited further to steal data from the client. Getti...

sshhipot

Version 2 is under development. Please switch to the v2 branch, build, and run with -h. SSHHiPot High-interaction SSH honeypot ok, it's really a logging ssh proxy. Still more or less a work-in-progress. Feel free to go install this repository if you'd like to try it. Run it with -h to see more...

cve-2024-6387_hassh

CVE-2024-6387 HASSH Fingerprints HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 regreSSHion. The primary goal of this repository is to share the generated HASSH fingerprint database. The scripts use the Shodan API to compile a list of HASSH fingerprints...

CVE-2024-6387-Vulnerability-Checker

CVE-2024-6387 Vulnerability Checker Overview This Python script is designed to check SSH servers for the CVE-2024-6387 vulnerability, specifically targeting the recently discovered regreSSHion , which is associated with specific versions of OpenSSH. The tool supports multiple IP addresses, URLs,...

pyrexecd

PyRexecd PyRexecd — это отдельный SSH-сервер для Windows. Возможности: Отдельное Win32-приложение не служба, работающее в системном трее. Поддерживает только одного пользователя и аутентификацию по открытому ключу. Уведомляет о входящих подключениях через всплывающее окно. Отправляет/получает тек...

CVE-2024-6387-Vulnerability-Checker

Проверка уязвимости CVE-2024-6387 Обзор Этот скрипт на Python предназначен для проверки SSH-серверов на уязвимость CVE-2024-6387, в частности на недавно обнаруженную regreSSHion , которая связана с определёнными версиями OpenSSH. Инструмент поддерживает несколько IP-адресов, URL-адресов,...

CVE-2025-32433-PoC

CVE-2025-32433: Эксплойт RCE без аутентификации в Erlang/OTP SSH Этот репозиторий содержит PoC-эксплойт Proof-of-Concept для CVE-2025-32433 — критической уязвимости удаленного выполнения кода RCE без аутентификации, затрагивающей реализацию SSH-сервера в Erlang/Open Telecom Platform OTP. Данный P...

CVE-2024-6387-Exploit-POC

CVE-2024-6387-Exploit-POC このリポジトリには、脆弱なバージョンのOpenSSHを実行しているSSHサーバー上のCVE-2024-6387脆弱性を悪用するためのProof of Concept（POC）が含まれています。 POCとは？ POC（Proof of Concept）とは、セキュリティ脆弱性の悪用を、制御された再現可能な方法で実証するプログラムまたはスクリプトです。その主な目的は、脆弱性が存在し、悪意のあるコードを実行したり、影響を受けるシステム上で不正な操作を行ったりするために悪用され得ることを示すことです。 POCの仕組み...