CVE-2016-6210 PoC — OpenSSH 信息泄露漏洞

Description

User name enumeration against SSH daemons affected by CVE-2016-6210.

Readme

# CVE-2016-6210

User name enumeration against SSH daemons affected by CVE-2016-6210.

Use against your own hosts only! Attacking stuff you are not permitted to may put you in big trouble!

# INSTALATION

### Clone the Repository:

    git clone https://github.com/coolbabayaga/CVE-2016-6210.git
    cd ssh-enum-cve-2016-6210

### Create and Activate a Virtual Environment (Optional but recommended):

    python3 -m venv venv
    source venv/bin/activate

### Install Dependencies:

    pip install -r requirements.txt

### Run the Script:

     40136.py -h

# USAGE

#### usage: 40136.py [-h] [-u USER | -U USERLIST] [-e] [-s] [--bytes BYTES] [--samples SAMPLES] [--factor FACTOR] [--trials TRIALS] host
#
    example: 40136.py -U /usr/share/wordlists/metasploit/unix_users.txt -e -s 192.168.44.63:22

positional arguments:
  host                  Give SSH server address like ip:port or just by ip

options:
  -h, --help            show this help message and exit
  -u, --user USER       Give a single user name
  -U, --userlist USERLIST
                        Give a file containing a list of users
  -e, --enumerated      Only show enumerated users
  -s, --silent          Silent mode
  --bytes BYTES         Bytes to send as password
  --samples SAMPLES     Samples for baseline timing
  --factor FACTOR       Factor for timing boundary
  --trials TRIALS       Trials per user

File Snapshot

Remarks