CVE-2018-10933 PoC — libssh server-side state machine 安全漏洞

Source

https://github.com/likescam/CVE-2018-10933_ssh

Associated Vulnerability

Title:libssh server-side state machine 安全漏洞 (CVE-2018-10933)
Description:A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Readme

# CVE-2018-10933
to test this code: 
- get vulnerable version of libssh at homepage: https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz
- uncompress and build, then go to example directory, there's a simple sshd server using libssh name: samplesshd-cb

run this simple sshd by command:
    $ samplesshd-cb 127.0.0.1 -p 2222

- run my code, output will be:
	Allocated session channel
	Allocated shell
mean that i can bypass authentication and spawn a shell without any credential

File Snapshot


 [4.0K]  /data/pocs/3725dea9d7d12c69402cdabc6926747d26a8a90a
├── [1.1K]  CVE-2018-10933.py
├── [ 481]  README.md
└── [  16]  requirements.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!