cve-2024-41110-checker

CVE-2024-41110 Docker Security Checker This tool is designed to check multiple hosts for vulnerabilities related to CVE-2024-41110 in Docker installations. It specifically looks for vulnerable Docker versions and the use of AuthZ plugins, which can potentially lead to security issues. Features...

cerbrutus

Cerbrutus Modular brute force tool written in Python, for very fast password spraying SSH, and FTP and in the near future other network services. COMING SOON: SMB, HTTPs POST, HTTPs GET, HTTP BASIC AUTH Thanks to @0dayctf, Rondons, Enigma, and 001 for testing and contributing Installation: cd /op...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

CVE-2024-6387

Project Information Name Project : POC - CVE-2024-6387 - Scanner Last version : 1.0.0 Last updated : 09/07/2024 Programming language : Python Company name :acyber IT Security Lab Iran CVE-2024-6387 regreSSHion, CVE-2024-6387, is an unauthenticated remote code execution in OpenSSH’s server sshd th...

How-To-Secure-A-Linux-Server

How To Secure A Linux Server An evolving how-to guide for securing a Linux server that, hopefully, also teaches you a little about security and why it matters. Table of Contents Introduction Guide Objective Why Secure Your Server Why Yet Another Guide Other Guides To Do / To Add Guide Overview...

sshuttle

sshuttle: where transparent proxy meets VPN meets ssh As far as I know, sshuttle is the only program that solves the following common case: Your client machine or router is Linux, FreeBSD, or MacOS. You have access to a remote network via ssh. You don't necessarily have admin access on the remote...

Mikrotrick_POC

RouterOS SSH Modulus-Confusion Validator CVE-2026-67276 An automated behavioral validator designed to detect the SSH public key authentication bypass vulnerability in MikroTik RouterOS CVE-2026-67276. The script tests whether an SSH service incomplete-validation flaw allows authentication by...

Crimson-Cloak-ISH-wrapper-iOS-

Crimson-Cloak-ISH-wrapper-iOS Wrapper to maximize iSH iOS app capabilities without jailbreak. What It Does HTTP API + embedded dashboard on http://127.0.0.1:8088 WebSocket real-time streaming on ws://127.0.0.1:8089 Auto-discovery of SynChan tools Huginn, OmnINT, Daedalus, Argus, Neural, Ophelia,...

CVE-2025-32433-PoC

CVE-2025-32433: Erlang/OTP SSH Unauthenticated RCE PoC This repository contains a Proof-of-Concept PoC for CVE-2025-32433, a critical unauthenticated Remote Code Execution RCE vulnerability affecting the SSH server implementation in Erlang/Open Telecom Platform OTP. This PoC is designed for...

cve-2025-32433-erlang_ssh_rce_reproduction

CVE-2025-32433: Erlang/OTP SSH Daemon Pre-Auth Remote Code Execution CVSS Score: 10.0 CRITICAL Status: Actively Exploited in the Wild Disclosure: June 2025 Overview CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in the SSH server implementation ssh application...

CVE-2023-4596-OpenSSH-Multi-Checker

CVE-2024-6387-OpenSSH-Multi-Checker The CVE-2024-6387-checker.sh script is a tool designed to check multiple targets IPs or hostnames at once for the CVE-2024-6387 vulnerability. This script performs a local OpenSSH version check, scans remote servers for SSH banners, and determines whether they...

sentinelssh

SentinelSSH: Advanced CVE-2024-6387 Vulnerability Scanner SentinelSSH is an advanced, high-performance SSH vulnerability scanner written in Go. It's specifically designed to detect the CVE-2024-6387 vulnerability in OpenSSH servers across various network environments. Installation To install...

liffy

Advanced LFI Exploitation Tool A powerful Python tool for Local File Inclusion LFI exploitation with advanced features including WAF bypass, encoding techniques, and comprehensive vulnerability detection. Liffy v2.0 is the significantly enhanced version of liffy which was originally created by...

cve-2023-38408

CVE-2023-38408: Understanding and Simulating a Real-World SSH-Agent Vulnerability Table of Contents 1. Introduction 2. Background Concepts 3. The CVE-2023-38408 Vulnerability 4. Practical Simulation and Testing 5. Technical Analysis 6. Fix and Mitigation 7. Conclusion 1. Introduction Purpose of...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

GateKeeper

GateKeeper GateKeeper is a self-hosted SSH access gateway written in Go. It acts as a centralized control layer in front of SSH, providing access control, MFA enforcement, session recording, auditing, and policy enforcement --- all delivered as a single binary with an embedded web UI. No external...

legba

legba Join the project community on our server! Legba is a multiprotocol credentials bruteforcer / password sprayer and enumerator built with Rust and the Tokio asynchronous runtime in order to achieve better performances and stability while consuming less resources than similar tools. Key Featur...

cve-2026-86060

CVE-2026-86060 — MikroTik RouterOS SSH Pre-Authentication Privilege Escalation to Full Administrative Control Field| Value ---|--- CVE| CVE-2026-86060 Product| MikroTik RouterOS SSH service Affected versions| RouterOS 6.x and 7.0.0 – 7.23.3 inclusive Fixed versions| RouterOS 7.23.4 and later...

CVE-2018-10933

CVE-2018-10933 libssh server authentication bypass vulnerability CVE-2018-10933 libssh是一个提供ssh相关接口的开源库，包含服务端、客户端等。其服务端代码中存在一处逻辑错误，攻击者可以在认证成功前发送MSGUSERAUTHSUCCESS消息，绕过认证过程，未授权访问目标SSH服务器。 0x00 docker for libssh vuln https://github.com/vulhub/vulhub/blob/master/libssh/CVE-2018-10933/README.md 0x01...

fapro

FaPro Free,Cross-platform,Single-file mass network protocol server simulator 中文Readme Description FaPro is a Fake Protocol Server tool, Can easily start or stop multiple network services. The goal is to support as many protocols as possible, and support as many deep interactions as possible for...