CVE-2018-15473 PoC — OpenSSH 竞争条件问题漏洞

Source

https://github.com/Dirty-Racoon/CVE-2018-15473-py3

Associated Vulnerability

Title: OpenSSH 竞争条件问题漏洞 (CVE-2018-15473)
Description:OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

Readme

# CVE-2018-15473-py3
https://github.com/r3dxpl0it/CVE-2018-15473 is the original I got this from. All I did was make this a little more friendly for python3. fixed the print statements and changed "._handler_table" to "._client_handler_table" so paramiko doesnt complain. It may not for you but on the latest Parrot install it was throwing errors.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →