CVE-2018-15473 PoC — OpenSSH 竞争条件问题漏洞

Description

Test CVE-2018-15473 exploit on Shodan IP

介绍

Here is a simple script to test CVE-2018-15473 exploit on 100 IP addresses referenced by Shodan. Usernames tested are contained in users.txt

The file that has to be executed is main.py. It works on Linux and you have to get your own API key from www.shodan.io

The results only appear on the standard output. Expect the IP list which is save under ips.txt.

CVE attack forked from https://github.com/Sait-Nuri/CVE-2018-15473

Make sure you have the libraries argparse, shodan and paramiko.
You also can try the following command: chmod +x cve.py

The purpose of this project is purely educational.

文件快照

备注