Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2018-15473 PoC — OpenSSH 竞争条件问题漏洞

Source
https://github.com/JoeBlackSecurity/SSHUsernameBruter-SSHUB
Associated Vulnerability
Title:OpenSSH 竞争条件问题漏洞 (CVE-2018-15473)
Description:OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Description
Fully functional script for brute forcing SSH and trying credentials - CVE-2018-15473
Readme
# SSHUsernameBruter (SSHUB)
Fully functional script for brute forcing a list or supplied usernames againse vulnerable OpenSSH servers with the option to try username/username as login credentials - CVE-2018-15473
File Snapshot

 [4.0K]  /data/pocs/76ad12e70d2ea698efff4f8381db7f96af59922b
├── [107K]  large
├── [1.3K]  medium
├── [ 213]  README.md
├── [ 429]  small
└── [ 19K]  SSHUsernameBrute.py

0 directories, 5 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →