Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-15473 PoC — OpenSSH 竞争条件问题漏洞

Source
https://github.com/LINYIKAI/CVE-2018-15473-exp
Associated Vulnerability
Title:OpenSSH 竞争条件问题漏洞 (CVE-2018-15473)
Description:OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Description
This is a exp of CVE-2018-15473
Readme
# CVE-2018-15473-exp
#This is a exp of CVE-2018-15473
emmm感觉这个openssh<7.7的用户名枚举还真的挺多的,所以顺手写了一个exp可以调用poc,结合字典进行利用
poc使用python2.7写的,openssh.py采用python3写的,调用的时候要注意一下.
File Snapshot

 [4.0K]  /data/pocs/75ab47b91828790b80a19d5c483177f989cdc478
├── [ 628]  openssh.py
├── [2.7K]  poc.py
├── [ 273]  README.md
└── [ 69K]  user.txt

0 directories, 4 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →