Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2018-10933 — LibSSH authentification bypass | Kitploit
Tools/GitHubGitHub/bidaoui4905/cve-2018-10933
Authentication & AuthorizationVulnerability AnalysisExploitationNetwork SecurityPenetration Testing
GitHubbidaoui4905/cve-2018-10933

CVE-2018-10933

LibSSH authentification bypass

View Repository
189 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2018-10933 - SSH Authentication Bypass PoC

Description

CVE-2018-10933 is an authentication bypass vulnerability in the server-side implementation of libssh. The flaw allows an attacker to send a SSH2_MSG_USERAUTH_SUCCESS message without any prior authentication, gaining unauthorized access.

Impacted Systems

Any server using vulnerable versions of libssh for SSH services is affected.

Vulnerable Versions

  • libssh 0.6 and above
  • Fixed in versions: 0.7.6 and 0.8.4

Usage

  1. Replace ip in the script with the target's IP address.
  2. Run the script:
pip install paramiko
python3 CVE_2018_10933.py
Download Tool