
OpenSSH 9.1 vulnerability mass scan and exploit
OpenSSH 9.1 vulnerability mass scan and exploit
As a reminder, OpenSSH is software that implements the SSH protocol, very frequently used to securely connect to Linux (or Windows) machines for remote administration.
Introduced in OpenSSH 9.1, the security flaw CVE-2023-25136 affects the SSH pre-authentication process. By exploiting it, an attacker could corrupt memory and achieve arbitrary code execution on the machine, without being authenticated on the target server.
Run the chosen script scan a list of IP addresses or direct exploitation of a vulnerable IP
• paramiko: to install it just type
pip install paramiko
• pyfiglet: to install it just type
pip install pyfiglet
• termcolor: to install it just type
pip install termcolor
Use Criminal IP
Dork : SSH-2.0_OpenSSH_9.1
More details on the vulnerability
CTF player 💥 | Bug hunter 💻 | apprentice pentester 🎭