POC详情： 1368129bee0c3355b378a7bb908638c49a663404

来源
https://github.com/darses/CVE-2025-32433
关联漏洞
标题： Erlang/OTP 访问控制错误漏洞 (CVE-2025-32433)
描述：Erlang/OTP是Erlang/OTP开源的一个JavaScript编写的处理处理异常的库。该库可以捕捉node.js内置API引发的异常。 Erlang/OTP 27.3.3之前版本存在访问控制错误漏洞，该漏洞源于SSH协议消息处理缺陷，可能导致远程代码执行。
描述
Security research on Erlang/OTP SSH CVE-2025-32433.
介绍
# Security research on Erlang/OTP SSH CVE-2025-32433

Python exploit Proof-of-Concept CVE-2025-32433 Unauthenticated Remote Code Execution in Erlang/OTP SSH. I also have a [banner grabbing Nuclei template](https://github.com/darses/nuclei-templates/blob/main/erlang-otp-ssh-detect.yaml) and a [Nuclei RCE](https://github.com/darses/nuclei-templates/blob/main/cve-2025-32433.yaml) check.

The Suricata and Zeek IDS logs are in order based on a succesful Paramiko attack, two regular OpenSSH_9.8 connections without attack, two succesful attacks using [ProDefense/CVE-2025-32433](https://github.com/ProDefense/CVE-2025-32433/blob/main/CVE-2025-32433.py) and one succesful attack using [CVE-2025-32433.yaml by iamnoooob,rootxharsh,pdresearch](https://github.com/projectdiscovery/nuclei-templates/pull/11960/files). Suricata ran with only my own custom rules in `suricata.rules`.

The Suricata rules only detect unencrypted channel open/request messages, which are assumed to be sent unauthenticated.

I have not tested the rules against realistic traffic logs.

## HASHH
- `a42d62b326c107401e08c1ee316f28b6` CVE-2025-32433.yaml by iamnoooob,rootxharsh,pdresearch
- `ca3cc8a7d31514fa9b48636eaec05a78` ProDefense/CVE-2025-32433
- `a2de0f306611e0957be704f5b0e35a82` Paramiko script
文件快照

 [4.0K]  /data/pocs/1368129bee0c3355b378a7bb908638c49a663404
├── [4.3K]  bro.log
├── [1.2K]  CVE-2025-32433.py
├── [ 12K]  eve.json
├── [1.2K]  README.md
└── [ 745]  suricata.rules

0 directories, 5 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。