CVE-2018-10933 PoC — libssh server-side state machine 安全漏洞

Source

https://github.com/reanimat0r/bpnd-libssh

Associated Vulnerability

Title: libssh server-side state machine 安全漏洞 (CVE-2018-10933)
Description:A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Description

Multi-threaded, reliable scanner for CVE-2018-10933.

Readme

# bpnd-libssh


blueintel bpnd-libssh is a multi-threaded, remote scanner for CVE-2018-10933.  

# Requirements

* python3
* paramiko module

# Install

Example:

```
apt-get update
apt-get install -y libffi-dev libssl-dev
pip3 install paramiko
```

# Install with docker

To build docker container:

```
./dockerbuild.sh
```

To run docker container:

```
./dockerrun.sh
```


# Usage examples

Scan 192.168.0.1 on port 22:

```
./bpnd-libssh 192.168.0.1 -p 22
```

Scan 192.168.0.0 network with netmask 255.255.255.0, checking ports 22, 2222 and 8022, with verbose output:

```
./bpnd-libssh 192.168.0.0/24 -p 22,2222,8022 -v
```

Scan ip's from a file named ip.lst (using default ports 22 and 2222, and showing even more verbose output):

```
./bpnd-libssh -f -v -v <ip.lst
```

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →