CVE-2024-3094-check

CVE-2024-3094 vul check tools This vulnerability allows an attacker to log into the server and execute arbitrary code without passing SSH authentication. For details, please see: https://www.openwall.com/lists/oss-security/2024/03/29/4 use curl -fsSL...

OpenSSH-4.7p1-CVE-2008-5161-Exploit

CVE-2008-5161 OpenSSH 4.7p1 Audit Helper Automates version checking and credential auditing of legacy OpenSSH 4.7p1 Debian-8ubuntu1 targets by driving Metasploit’s auxiliary/scanner/ssh/sshlogin module from Python via pwntools. This project is intended for research and authorized security testing...

Exploit for Incorrect Implementation of Authentication Algorithm in Golang Crypto

CVE-2026-46595 proof https://vulners.com/cve/CVE-2026-46595 i...

CVE-2024-6387-Exploit-POC

CVE-2024-6387-Exploit-POC This repository contains a Proof of Concept POC to exploit the vulnerability CVE-2024-6387 in SSH servers running vulnerable versions of OpenSSH. What is a POC? A POC, or Proof of Concept, is a program or script that demonstrates the exploitation of a security...

CVE-2024-22894

CVE-2024-22894 Downloaded the latest heatpump firmware version wp2reg-V3.88.0-9015 of https://www.heatpump24.com/DownloadArea.php. Within this firmware is a file called : wp2reg-V3.88.0-9015\wp2reg-AlphaInnotech-prod\home.wp2reg-V3.88.0-9015221213\share\shadow This contains a 3DES encrypted...

CVE-2025-32433-Exploit-edited

CVE-2025-32433 Exploit Windows Compatible Erlang/OTP SSH Unauthenticated Remote Code Execution Description This repository contains an exploit for CVE-2025-32433, a critical unauthenticated remote code execution vulnerability in Erlang/OTP SSH server. Key Features: ✅ Pre-authentication RCE exploi...

CVE-2026-55200

Security Report: CVE-2026-55200 📝 General Description CVE-2026-55200 is a critical heap-based buffer overflow vulnerability dynamic memory corruption affecting the libssh2 library in versions up to 1.11.1. It allows a malicious SSH server to compromise vulnerable clients that connect to it. ⚡...

threat-intel-cve-2024-3094

Threat Intelligence Report: CVE-2024-3094 – XZ Utils Backdoor This repository contains a threat intelligence report analyzing CVE-2024-3094 , a high-profile backdoor vulnerability discovered in the xz-utils compression tool in 2024. CVE-2024-3094 is a severe supply chain compromise where a...

cybersecurity_portfolio

Portafolio. Gleb Usoltsev Estudiante de segundo año, Instituto de Ciencias de la Computación y Ciberseguridad, Universidad Politécnica de San Petersburgo Pedro el Grande, especialidad 10.03.01 «Seguridad de la información». Como parte de la práctica educativa de iniciación en Positive Technologie...

CVE-2025-32433-LAB

CVE-2025-32433 Investigación de Vulnerabilidades y Laboratorio de Seguridad Este repositorio proporciona un laboratorio de investigación de seguridad completo, listo para su entrega y contenedorizado para CVE-2025-32433 vulnerabilidad de autenticación faltante en Erlang/OTP SSH. Permite a...

Exploiting-a-vulnerability-using-reverse-shell

Information Security Fundamentals — Spring 2026 Project Total Points: 20 | Deadline: No late submissions accepted Overview This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability CVE-2025-32433 in...

cve-2025-32433

Erlang/OTP SSH Unauthenticated Blind RCE CVE-2025-32433 PoC 📜 Description CVE-2025-32433 is a critical unauthenticated remote code execution vulnerability in Erlang/OTP's SSH server. Prior to the patched versions, the SSH daemon incorrectly processes channel messages before authentication is...

SSH-Stealer

RunAs-Stealer Capacidad inteligente de keylogging para robar credenciales SSH, incluida la contraseña y la clave privada. Uso Las credenciales robadas se escriben en la secuencia ADS log de C:\Users\Desktop\desktop.ini. Para obtener las credenciales, escriba el comando cmd: more...

FencePost

FencePost Multi-host UFW firewall dashboard. Connects to Linux hosts over SSH, parses firewall rules and listening ports, explains everything in plain English, and flags security gaps. Features Multi-host overview -- see UFW status, default policies, and active services across all hosts at a...

ssh-honeypot-research

🍯 SSH Honeypot — Research & Threat Intelligence A medium-interaction Cowrie honeypot deployed on a rented public-internet Linux VPS, designed to attract, log and analyse real-world SSH brute-force traffic. Over an 8-day capture window the sensor recorded 37,477 sessions from 1,582 unique attacker...

driftwood

Driftwood ⚠️ The Driftwood CLI tool is no longer supported. Please use TruffleHog instead! ⚠️ Driftwood is a tool that can enable you to lookup whether a private key is used for things like TLS or as a GitHub SSH key for a user. Driftwood performs lookups with the computed public key, so the...

driftwood

Driftwood ⚠️ La herramienta CLI Driftwood ya no es compatible. ¡Por favor, usa TruffleHog en su lugar! ⚠️ Driftwood es una herramienta que te permite verificar si una clave privada se utiliza para cosas como TLS o como clave SSH de GitHub para un usuario. Driftwood realiza búsquedas con la clave...

ssh_scan

sshscan Un escáner de configuración y políticas SSH ⚠️ Aviso de desuso ⚠️ Mozilla ya no mantiene el proyecto SSH Scan. Por favor, haga un fork para continuar el desarrollo. Beneficios clave Dependencias mínimas - Utiliza Ruby nativo y BinData para su funcionamiento, sin dependencias pesadas. No es...

ssh_scan

sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...

honssh

!!! Este proyecto ya no recibe mantenimiento. !!! HonSSH https://github.com/tnich/honssh Derechos de autor C 2016 Thomas Nicholson HonSSH está diseñado para usarse junto con un honeypot de alta interacción. HonSSH se sitúa entre el atacante y el honeypot y crea dos conexiones SSH separadas. Lee l...