CVE-2013-4434 PoC — Dropbear SSH Server ‘svr-auth.c’ 用户枚举漏洞

Source

https://github.com/styx00/Dropbear_CVE-2013-4434

Associated Vulnerability

Title:Dropbear SSH Server ‘svr-auth.c’ 用户枚举漏洞 (CVE-2013-4434)
Description:Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames.

Description

Dropbear user enumeration (CVE-2013-4434) PoC

Readme

# Dropbear_CVE-2013-4434

**dropbear_CVE-2013-4434.sh**
  * This script checks for [CVE-2013-4434] (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4434). Dropbear SSH Server before 2013.59 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to discover valid usernames.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!