922 matches found
CVE-2020-9283
Exploit for CVE-2020-9283 This project is inspired by the original POC found here github.com/mark-adams/exploits/CVE-2020-9283. I was curious as to how the Go SSH library was implemented so decided to implement the PoC using go. A short writeup can be found here...
CVE-2025-32433
CVE-2025-32433 Erlang/OTP SSH RCE EXP Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to perform unauthenticated remote code execution RCE. By exploiting a flaw in SSH protocol message handling, a malicious actor could gain...
pyrexecd
PyRexecd PyRexecd es un servidor SSH independiente para Windows. CaracterĆsticas: AplicaciĆ³n Win32 independiente no un servicio que reside en la bandeja del sistema. Soporta un solo usuario / autenticaciĆ³n solo con clave pĆŗblica. Notifica conexiones entrantes mediante ventana emergente...
pyrexecd
PyRexecd PyRexecd is a standalone SSH server for Windows. Features: Standalone Win32 app not a service that resides in SysTray. Supports a single user / pubkey auth only. Notifies incoming connections via popup. Sends/Receives the clipboard text via stdin/stdout. PyPI Project page:...
gogs-CVE-2025-8110
Gogs CVE-2025-8110 PoC This repository contains a Proof of Concept PoC for CVE-2025-8110, a Remote Code Execution RCE vulnerability in Gogs. The exploit targets the internal SSH server implementation, allowing attackers to inject malicious commands via the sshCommand configuration. Usage To run t...
cve-2025-32433
Build root@kitploit: Ā» git clone https://github.com/0xPThree/cve-2025-32433.git && cd cve-2025-32433 Ā» docker build -t erlang-ssh . Ā» docker run -d --name erlang-ssh -p 2222:2222 erlang-ssh POC root@kitploit: kdev :: /erlang/CVE-2025-32433 ā¹maināŗ Ā» python3 cve-2025-32433.py -h usage:...
CVE-2023-25136
OpenSSH Vulnerability Testing Tool for CVE-2023-25136 This repository provides a Proof of Concept PoC for testing the CVE-2023-25136 vulnerability in OpenSSH versions 9.0 and 9.1. The vulnerability allows for potential security risks and this tool helps identify if a server is running a vulnerabl...
cve-2025-32433
CVE-2025-32433 - Pre-Auth RCE in Erlang/OTP SSH Server Link to detailed write-up All considered vulnerable versions using Docker: Erlang/OTP-25.3.2 Erlang/OTP-26.2.5.11 Erlang/OTP-27.3.2...
puppet-ssh-hardening
Puppet SSH hardening Description This Puppet module provides secure ssh-client and ssh-server configurations. Requirements Puppet Puppet modules: saz/ssh = 2.3.6, puppetlabs/stdlib = 4.2.0 Parameters ipv6enabled = false - true if IPv6 is needed...
CVE-2025-32433-PoC-Analysis
FAQ - CVE-2025-32433 1. What is Erlang OTP? Erlang is a general-purpose programming language. OTP Open Telecom Platform is a collection of middleware, libraries, and design principles used for fault tolerance using the BEAM VPN. 2. Why is this version of Erlang vulnerable? OTP 26.2.5.10 is...
CVE-2025-32433
Erlang/OTP SSH Remote Code Execution Vulnerability. The root cause is a flaw in the SSH protocol's message handling mechanism, allowing attackers to send connection protocol messages before authentication is complete. Notably, this vulnerability affects all Erlang/OTP versions running SSH server...
CVE-2024-45337-POC
CVE-2024-45337-POC Proof of concept POC for CVE-2024-45337 Build root@kitploit: go version go version go1.23.2 linux/amd64 go build Usage root@kitploit: Usage of ./CVE-2024-45337-POC: -addr string Address of ssh server default "127.0.0.1:2222" -authorised-pubkey string The allowed pubkey that wil...
Libssh2-Exploit
Libssh2-Exploit Goals In this project, we aim to create an exploit to an out of bounds read vulnerabulity in libssh2 described in CVE-2019-13115. Create a malicious ssh server to cause a client connecting to it to crash and see if this can be exploited further to steal data from the client. Getti...
cve-2024-6387_hassh
CVE-2024-6387 HASSH Fingerprints HASSH fingerprints for identifying OpenSSH servers potentially vulnerable to CVE-2024-6387 regreSSHion. The primary goal of this repository is to share the generated HASSH fingerprint database. The scripts use the Shodan API to compile a list of HASSH fingerprints...
CVE-2024-6387-Exploit-POC
CVE-2024-6387-Exploit-POC This repository contains a Proof of Concept POC to exploit the vulnerability CVE-2024-6387 in SSH servers running vulnerable versions of OpenSSH. What is a POC? A POC, or Proof of Concept, is a program or script that demonstrates the exploitation of a security...
CVE-2026-55200
Security Report: CVE-2026-55200 š General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ā”...
SECURITY-3314-3315
= SECURITY-3314/SECURITY-3315 Mitigation This repository documents mitigations preventing exploitation of SECURITY-3314 and SECURITY-3315 on affected instances. == Overview Access to the CLI needs to be disabled. Both of the following steps must be taken: Remove the CLI HTTP endpoint Disable the...
CVE-2024-6387
root@kitploit: EXPLOIT CVE-2024-6387 š„ EXPLOIT CVE-2024-6387 regreSSHion Tool for analysis, detection and controlled testing of the CVE-2024-6387 vulnerability in OpenSSH servers. ā ļø Legal and Ethical Notice This repository is exclusively educational. Use it only on: Labs HTB, TryHackMe Personal...
CVE-2025-32433
CVE-2025-32433 Introduction This document presents a study of the vulnerability CVE-2025-32433 , affecting the built-in SSH server implementation in the Erlang/OTP platform. This vulnerability is a Remote Code Execution RCE opportunity without authentication and affects several Erlang/OTP branche...
USN-8722-1: libssh2 vulnerabilities
It was discovered that libssh2 incorrectly handled certain SFTP server responses. A remote attacker controlling an SSH server could use this issue to cause libssh2 to crash or possibly execute arbitrary code. CVE-2026-66032 It was discovered that libssh2 incorrectly handled AES-GCM cipher...