CVE-2018-10933 PoC — libssh server-side state machine 安全漏洞

Source

Associated Vulnerability

Description

Multi-threaded, reliable scanner for CVE-2018-10933.

Readme

# bpnd-libssh


blueintel bpnd-libssh is a multi-threaded, remote scanner for CVE-2018-10933.  

# Requirements

* python3
* paramiko module

# Install

Example:

```
apt-get update
apt-get install -y libffi-dev libssl-dev
pip3 install paramiko
```

# Install with docker

To build docker container:

```
./dockerbuild.sh
```

To run docker container:

```
./dockerrun.sh
```


# Usage examples

Scan 192.168.0.1 on port 22:

```
./bpnd-libssh 192.168.0.1 -p 22
```

Scan 192.168.0.0 network with netmask 255.255.255.0, checking ports 22, 2222 and 8022, with verbose output:

```
./bpnd-libssh 192.168.0.0/24 -p 22,2222,8022 -v
```

Scan ip's from a file named ip.lst (using default ports 22 and 2222, and showing even more verbose output):

```
./bpnd-libssh -f -v -v <ip.lst
```

File Snapshot

 [4.0K]  /data/pocs/8fc0a096a340e1026550a0c010fd7ab4e7825091
├── [111K]  20181017.blueintel.libssh.G.pdf
├── [120K]  20181019.blueintel.libssh_analysis.pdf
├── [ 95K]  20181019.blueintel.libssh_UPDATE1.G.pdf
├── [5.1K]  bpnd-libssh
├── [4.0K]  docker
│   └── [ 264]  Dockerfile
├── [ 112]  dockerbuild.sh
├── [  54]  dockerrun.sh
├── [ 782]  README.md
└── [   9]  requirements.txt

1 directory, 9 files

Remarks