CVE-2018-10933 PoC — libssh server-side state machine 安全漏洞

Source

https://github.com/Kurlee/LibSSH-exploit

Associated Vulnerability

Title:libssh server-side state machine 安全漏洞 (CVE-2018-10933)
Description:A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Description

Takes advantage of CVE-2018-10933

Readme

# LibSSH-exploit

CVE-2018-10933

Vulnerable ssh servers - libssh before 0.8.4

Sends user authorized message which allows RCE

#### Usage:
''' Libssh_exploit.py <host> <port> <command>'''

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!