ansible-ssh-hardening

ssh-hardening Ansible Role Внимание: Эта роль была перенесена в нашу коллекцию hardening: https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening Пожалуйста, открывайте все вопросы и pull request там! Требования Ansible 2.5 Переменные роли networkipv6enable По...

ansible-ssh-hardening

ssh-hardening Ansible Role Attention: This role has been migrated to our hardening-collection: https://github.com/dev-sec/ansible-os-hardening/ https://galaxy.ansible.com/devsec/hardening Please open any issues and pull requests there! Requirements Ansible 2.5 Role Variables networkipv6enable...

CVE-2025-32433

🚨 CVE-2025-32433: Unauthenticated RCE in Erlang/OTP SSH Server Critical Pre-Authentication Remote Code Execution Vulnerability A severe flaw in the Erlang/OTP built-in SSH daemon allows unauthenticated remote attackers to achieve full remote code execution RCE by sending crafted SSH connection...

cve-2018-15473

CVE-2018-15473 OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c. Install You may need t...

CVE-2023-48795

🛡️ Terrapin Vulnerability Scanner CVE-2023-48795 A Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 Terrapin by extracting OpenSSH version banners over port 22 using netcat. 📌 Description This scanner checks if a target SSH server is running a vulnerable version of...

CVE-2024-22274

CVE-2024-22274 Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123" then spawn ssh with root shell. Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64...

provisioner

Provisioner Overview Provisioner is a developer-focused provisioning sidekick for single-board computers SBCs, particularly U-Boot-based platforms. It provides a self-contained environment to: Remotely access boards Automate bring-up workflows Provision kernels and root filesystems Execute flashi...

WHS3_vulhub

CVE-2017-8386: git-shell Sandbox Bypass to RCE PoC 정수진@suz1n Overview Git-shell provides an environment that only allows restricted git commands via SSH. However, in specific versions of git-shell such as 2.12.2, a vulnerability CVE-2017-8386 exists that exploits the less command to bypass the...

CVE-2018-14847

CVE-2018-14847 create global proxy based on RouterOS via CVE-2018-14847 How To Use prepare pip3 install paramiko ipcalc optparse hashlib usage for ip file python3 loop.py -f list.txt for single ip python3 loop.py ip Copyright the poc part in this repository that use CVE-2018-14187 to get...

mitigate_ssh

This repository does not have a README...

CVE-2024-6387_Checker

CVE-2024-6387Checker Excluded patched versions SSH-2.0-OpenSSH8.9p1 Ubuntu-3ubuntu0.10+ SSH-2.0-OpenSSH9.3p1 Ubuntu-1ubuntu3.6+ SSH-2.0-OpenSSH9.3p1 Ubuntu-3ubuntu3.6+ SSH-2.0-OpenSSH9.6p1 Ubuntu-3ubuntu13.3+ SSH-2.0-OpenSSH9.2p1 Debian-2+deb12u3+ SSH-2.0-OpenSSH8.4p1 Debian-5+deb11u3+...

CVE-2024-3094-analysis

CVE-2024-3094 – Real-World Supply Chain Threat What is CVE-2024-3094? CVE-2024-3094 is a major backdoor vulnerability discovered in the xz compression library. It allows attackers to potentially execute code remotely through SSH. The vulnerability was introduced intentionally and affects critical...

sshamble

sshamble SSHamble is a research tool for SSH implementations that includes: Interesting attacks against authentication Post-session authentication attacks Pre-authentication state transitions Authentication timing analysis Post-session enumeration This project is a work-in-progress and likely to...

cve-2019-14326

CVEID : CVE-2019-14326 Name of the affected products and versions : Andy all versions up to 46.11.113 Problem type : CWE-284: Improper Access Control Summary Andy is an Android emulator for Windows and Mac. During our tests, we have found open local TCP ports which could be exploited to escalate...

pentest-pivoting

Pivoting Guide Table of Contents 1. Important Notes 2. SSH Dynamic Port Forwarding 3. SSH Remote Port Forwarding 4. SSH Local Port Forwarding 5. Double Pivoting 6. sshuttle 7. Chisel 8. Using Burpsuite as Proxy 9. Usefull Resources Important Notes Do not use ICMP echo requests ping to test SOCKS...

ubuntu-privesc-lab

ubuntu-privesc-lab Full penetration testing workflow: credential brute force, SSH access and privilege escalation CVE-2021-4034 OVERVIEW This project demonstrates a full penetration testing workflow against a vulnerable Ubuntu virtual machine. The attack chain includes reconnaissance, credential...

CVE-2024-415770-ssrf-rce

CVE-2024-415770-SSRF-RCE Description This script is designed to interact with the teamserver. Update the script with your teamserver URL. It performs several steps to register an agent, open a socket, and inject an SSH key into the target's authorized keys. Prerequisites Python 3.x Required Pytho...

CVE-2017-1000117

CVE-2017-1000117 Malicious actors can craft "ssh://…" links to trick victims into accessing the malicious link when executing programs, thereby achieving command execution. This link can be placed in the .gitmodules file of a git project, so that when a victim performs git clone...

CVE-2024-6387

CVE-2024-6387 This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH.This script is a faster and simpler version of an OpenSSH vulnerability scanner. The tool leverages multi-threading to optimize scanning...

cve-2024-3094

🛡️ Cybersecurity Project: Analyzing the XZ Backdoor in liblzma 📄 Overview This project analyzes the high-profile backdoor discovered in xz-utils liblzma , affecting versions 5.6.0 and 5.6.1. The malicious code introduced into the upstream build system targeted SSH authentication by modifying how...