CVE-2024-6387 PoC — Openssh: regresshion - race condition in ssh allows rce/dos

Source

Associated Vulnerability

Description

This Go program scans targets for CVE-2024-6387 in OpenSSH, categorizing servers by vulnerability status and port availability.

Readme

# OpenSSH CVE-2024-6387 Vulnerability Scanner
![CVE-2024-6387](https://github.com/SecWithMoh/CVE-2024-6387/blob/main/run.png)

**🔒 Overview:**

This Go program scans targets for CVE-2024-6387 in OpenSSH, categorizing servers by vulnerability status and port availability. It supports various target types including IP addresses, domain names, files with lists of targets, and CIDR notations. The tool checks if port 22 (default) is open on each target and retrieves the SSH banner to match against known vulnerable OpenSSH versions. Results are categorized into servers likely vulnerable, not vulnerable, or with port 22 closed. Detailed usage instructions and examples are provided for easy integration into security assessments and network monitoring workflows.

**🚀 Usage:**

1. **Clone the repository:**
   ```bash
   git clone https://github.com/SecWithMoh/CVE-2024-6387.git
   cd CVE-2024-6387
   ```

2. **Build the executable:**
   ```bash
   go build
   ```

3. **Prepare targets:**
   - Specify targets as IP addresses, domain names, file paths containing lists of targets, or CIDR network ranges.

4. **Run the scanner:**
   - Execute the program with specified options and targets:
     ```bash
     ./CVE-2024-6387 target1 target2 ...
     ```

   - Example with custom port and timeout:
     ```bash
     ./CVE-2024-6387 -port 2222 -timeout 2.5 target1
     ```

5. **Review results:**
   - View categorized results on the terminal:
     - Servers not vulnerable.
     - Servers likely vulnerable (with details of vulnerable versions).
     - Servers with port 22 closed.
     - Total scanned targets.

6. **File output:**
   - If servers are found vulnerable, their details are written to `exploitable.txt`.

**🛠️ Contributing:**

- Contributions are welcome via pull requests.
- Fork the repository, create a new branch, and submit your enhancements.
- Report bugs or suggest improvements by creating Issues on GitHub.

**📄 License:**

This project is licensed under the GNU General Public License v3.0 - see the [LICENSE](https://github.com/SecWithMoh/GGE/blob/main/LICENSE) file for details.

File Snapshot

 [4.0K]  /data/pocs/a8471996cdea412a7b6c84762e92dd49498ecf8b
├── [4.2K]  main.go
├── [2.1K]  README.md
└── [ 12K]  run.png

0 directories, 3 files

Remarks