sshfinder

sshfinder Encuentra cada servicio SSH en tu red, determina si cumple con tu estándar, y recibe una notificación cuando eso cambie. sshfinder es un único archivo Python sin dependencias requeridas. Apúntalo a un rango CIDR y descubre SSH dondequiera que esté realmente escuchando — no solo en el...

cyber-decoy

cyber-decoy Un señuelo de red contenerizado honeypot que anuncia SSH , RDP y SMB , observa cada conexión entrante con eBPF y redirige mediante proxy inverso cada sesión a un contenedor señuelo aislado. El diseño separa dos aspectos: 1. Observación. Un clasificador eBPF TC adjunto a la interfaz de...

CVE-2025-32433

CVE-2025-32433: Erlang/OTP's SSH Server Exploit Information CVE-2025-32433: A critical flaw has been discovered in Erlang/OTP's SSH server allows unauthenticated attackers to gain remote code execution. One malformed SSH handshake bypasses authentication and exploits improper handling of SSH...

provisioner

Provisioner Resumen Provisioner es un asistente de aprovisionamiento orientado a desarrolladores para ordenadores de placa única SBCs, particularmente plataformas basadas en U-Boot. Proporciona un entorno autocontenido para: Acceder a placas de forma remota Automatizar flujos de trabajo de puesta...

XZ-Utils_CVE-2024-3094

Resumen de la vulnerabilidad XZ es un formato de compresión de datos que está presente en casi todas las distribuciones de Linux. liblzma es una biblioteca de software de código abierto que maneja el formato de compresión XZ. El 29 de marzo, los desarrolladores descubrieron un ataque a la cadena ...

CVE-2023-51385-

RCE mediante /.ssh/config inseguro El uso de tokens como %h, %p es bastante popular para utilizar túneles y proxy de conexión mediante SSH ProxyCommand. Configuración vulnerable host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Nota: en mi evaluación inicial, tenía la...

ssh_exploiter_CVE-2024-6387

sshexploiter CVE-2024-6387 con escáner IP automático y explotación automática Comprobador y Explotador de Vulnerabilidad OpenSSH Este script de Python comprueba si los servidores están ejecutando versiones vulnerables de OpenSSH e intenta la explotación si es posible. Características Detección de...

CVE-2026-82928

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...

CVE-2026-82929

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2024-6387-exploit

SSH Vulnerability Scanner The SSH Vulnerability Scanner is a Python script that uses Nmap to scan a list of domains for vulnerable SSH versions. It checks multiple ports for SSH services and identifies versions that are known to have security vulnerabilities. Features Scans multiple domains from ...

CVE-2017-1000117

CVE-2017-1000117 Este módulo se puede usar para comprobar si eres vulnerable a CVE-2017-1000117 git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 Salida si eres vulnerable: $ git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodule...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

CVE-2020-12116

CVE-2020-12116 Código de prueba de concepto para explotar CVE-2020-12116: Lectura arbitraria de archivos sin autenticación en ManageEngine OpManger. Resumen La última versión de OpManger contiene una vulnerabilidad de salto de directorio que permite acceso no restringido a todos los archivos de l...

CVE-2023-38408

OpenSSH Vulnerability - CVE-2023-38408 📚 Introduction A vulnerability was found in OpenSSH before 9.3p2 version. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system...

EUVD-2026-88231

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...

CVE-2026-82932 Missing Firewall Configuration in mH-DEVELOPER

mH-DEVELOPER smart home module does not load any firewall rules at startup. This leaves all listening services, including SSH, HTTP, WebSocket, and Node-RED, fully exposed on the LAN without access control. Any client on the same network can reach every service. This issue was fixed in...

CVE-2026-82929 Use of Shared Cryptographic Key in mH-DEVELOPER

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

EUVD-2026-88229

mH-DEVELOPER smart home module uses the same hard-coded SSH host keys on every device, with no per-device key generation. An attacker who extracts these keys from the firmware can set up a rogue SSH server that clients will trust without warning, enabling man-in-the-middle attacks and credential...

CVE-2026-82929

The mH-DEVELOPER smart home module is vulnerable because it uses identical hard-coded SSH host keys across all devices instead of generating unique per-device keys. An attacker capable of extracting these keys from the firmware can deploy a rogue SSH server that clients will trust automatically. ...

CVE-2026-82928 Undocumented access path in mH-DEVELOPER

mH-DEVELOPER smart home module contains a hardcoded SSH public key in /root/.ssh/authorizedkeys, serving as a potential backdoor. The SSH daemon allows root login via key authentication and starts automatically. An attacker with the matching private key can gain a root shell on any affected devic...