Catálogo de exploits

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

lala-amber/CVE-2024-6387

CVE-2017-12617

iamz24/CVE-2021-3493_CVE-2022-3357

Redfox-Security/Unveiling-Moniker-Link-CVE-2024-21413-Navigating-the-Latest-Cybersecurity-Landscape

Linux Kernel < 4.13.1 - BlueTooth Buffer Overflow (PoC) BlueBorne - Proof of Concept - Unarmed/Unweaponized - DoS (Crash) only

CVE-2017-0144 (Eternal Blue) | CVE-2023-3881 | CVE-2011-2523

CVE-2017-0144 (Eternal Blue) | CVE-2023-3881 | CVE-2011-2523

CVE-2024-4577 EXP

PoC Exploit for CVE-2024-5084

CVE-2024-39844 (ZNC < 1.9.1 modtcl RCE)

SSH Exploit for CVE-2024-6387 : RCE in OpenSSH's server, on glibc-based Linux systems

jocker2410/CVE-2024-6387_poc

Targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems.

t3rry327/cve-2024-6387-poc

SentinelSSH is an advanced, high-performance SSH vulnerability scanner written in Go. It's specifically designed to detect the CVE-2024-6387 vulnerability in OpenSSH servers across various network environments.

This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH. The tool leverages multi-threading to optimize scanning performance and handle multiple IP addresses concurrently.

Test For CVE-2017–7921;

SSH RCE PoC CVE-2024-6387

OpenSSH CVE-2024-6387 Vulnerability Checker

muyuanlove/CVE-2024-6387fixshell

Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote code execution (RCE) with root privileges. This vulnerability, identified as CVE-2024-6387, resides in the OpenSSH server component (sshd), which is designed to listen for connections from client applications.

This is a POC I wrote for CVE-2024-6387

ahlfors/CVE-2024-6387

Mufti22/CVE-2024-6387-checkher

CVE-2024-6387 exploit

This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.

Used to detect ssh servers vulnerable to CVE-2024-6387. Shameless robbery from https://github.com/bigb0x/CVE-2024-6387 using ChatGPT to translate the code to PHP.

Script for checking CVE-2024-6387 (regreSSHion)

CVE-2024-6387-nmap