CVE-2023-48795 PoC — OpenSSH 安全漏洞

Description

Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 (Terrapin) by analyzing OpenSSH version banners via netcat. Useful for internal audits, penetration testing, and vulnerability assessments.

介绍

# 🛡️ Terrapin Vulnerability Scanner (CVE-2023-48795)

A Python tool to identify SSH servers potentially vulnerable to [CVE-2023-48795 (Terrapin)](https://terrapin-attack.com/) by extracting OpenSSH version banners over port 22 using `netcat`.

---

## 📌 Description

This scanner checks if a target SSH server is running a vulnerable version of OpenSSH (prior to 9.6) which may be affected by the Terrapin attack. The tool is designed for internal audits, penetration testing, and infrastructure risk assessments.

---

## 🚀 Usage

### Scan a single IP:
```bash
python3 terrapin_scan.py --ip 192.168.0.50

文件快照

备注