CVE-2025-32433 Erlang/OTP SSH RCE Exploit SSH远程代码执行漏洞EXP
CVE-2025-32433
Python exploit for CVE-2025-32433 targeting Erlang OTP SSH server. Sends crafted SSH packets to open a reverse shell and gain root access.
Proof-of-concept exploit for CVE-2025-32433, an Erlang/OTP SSH pre-authentication channel confusion vulnerability, demonstrating authentication bypass and remote code execution with a Docker lab.
CVE-2025-32433-available-for-windows-victims
Python exploit for CVE-2025-32433 targeting Erlang SSH remote code execution with reverse shell and command execution capabilities.
Based on the original version:https://github.com/vulhub/vulhub/blob/master/erlang/CVE-2025-32433/exploit.py Replace Unicode checkmark with ASCII character for Windows compatibility
PoC showing unauthenticated remote code execution in Erlang/OTP SSH server. By exploiting a flaw in SSH protocol message handling, an attacker can execute arbitrary commands on the target without valid credentials.
test
Go PoC for CVE-2025-32433 — unauthenticated RCE in Erlang/OTP SSH.
Missing Authentication for Critical Function (CWE-306)-Exploit
Proof-of-concept exploit for CVE-2025-32433, a pre-authentication RCE in Erlang/OTP SSH daemon. Includes Python script to send crafted SSH channel requests and execute arbitrary commands.
Go-based exploit for CVE-2025-32433
CVE-2025-32433 Summary and Attack Overview
Proof-of-concept exploit for CVE-2025-32433, enabling unauthenticated remote code execution in Erlang/OTP SSH. Includes Docker setup and reverse shell payloads for security research and CTF challenges.
The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication.
Custom YARA rule for detecting artifacts of CVE-2025-32433, an Erlang/OTP SSH pre-authentication RCE vulnerability. Validated against public PoCs and lab captures for defensive detection engineering.
A proof-of-concept exploit for CVE-2025-32433, a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via malformed SSH_MSG_CHANNEL_REQUEST packets.
A Flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials in the Erlang/OTP SSH server
Proof-of-concept exploit for CVE-2025-32433 with simulated and real attack modes, including a Flask-based C2 server for reverse shell callbacks and post-exploitation simulation.
Python-based exploit for CVE-2025-32433 with netcat listener integration for remote shell access and payload delivery.
This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers
These is a PoC for the CVE-2025-32433 vulnerability, do NOT test on systems that you dont own!!!
CVE-2025-32433 – Erlang/OTP SSH vulnerability allowing pre-auth RCE
This project simulates a real-world attack-and-defend scenario across two virtual machines. You will exploit a critical pre-authentication RCE vulnerability (CVE-2025-32433) in an Erlang/OTP SSH server, crack extracted password hashes, and then harden the victim machine with firewall rules and patching.
This is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the code does and instructions for setting up the server to perform the exploit yourself.
python script to find vulnerable targets of CVE-2025-32433
the task from C*****k
This script is a custom security tool designed to test for a critical pre-authentication vulnerability in systems running Erlang-based SSH servers
CVE-2025-32433 https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2
Reproduction of cve-2025-32433-erlang_ssh_rce_reproduction
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
Erlang/OTP SSH 远程代码执行漏洞
Exploit code for CVE-2025-32433, a specific vulnerability, providing proof-of-concept or exploitation capabilities.
A critical flaw has been discovered in Erlang/OTP's SSH server allows unauthenticated attackers to gain remote code execution. One malformed SSH handshake bypasses authentication and exploits improper handling of SSH protocol messages.
CVE-2025-32433 PoC – SSH Protocol Python-based PoC for controlled lab testing of SSH message handling, channel operations, and pre-auth interactions. Designed for safe security research and analysis.
Erlang OTP SSH NSE Discovery Script
