CVE-2018-10933 PoC — libssh server-side state machine 安全漏洞

Source

Associated Vulnerability

Title: libssh server-side state machine 安全漏洞 (CVE-2018-10933)
Description:A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Description

Implementation of CVE-2018-10933 with CIDR block scanner

Readme

# libSSH-bypass
Implementation of CVE-2018-10933 // but with a CIDR block scanner.

Didn't feel like spending $$ on Shodan's API, so i've added a range scanner that dumps vuln servers into a file with a soft scan.  

you'll need to pip install paramiko as a dependency.

this is an early PoC version, I'll later branch of @blackbunny's to add the range scanner.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →