This exploit script is designed to simplify exploitation of the Erlang/OTP SSH vulnerability CVE-2025-32433 in the TryHackMe lab environment.
This project is strictly for learning and lab practice on the official TryHackMe room: https://tryhackme.com/room/erlangotpsshcve202532433
Do not use this tool against systems you do not own or have explicit permission to test.
This exploit script is designed to simplify exploitation of the Erlang/OTP SSH vulnerability CVE-2025-32433 in the TryHackMe lab environment.
The goal is to:
This helps learners focus on understanding the vulnerability, not just copying commands.
Interacts with a vulnerable Erlang/OTP SSH service
Guides the user through required inputs
Supports two controlled actions:
No automated scanning, no worm-like behavior, no persistence.
Used to demonstrate remote command execution impact in a controlled environment.
Requires:
nc -lvnp 4444)A non-destructive option to confirm exploitation without spawning a shell.
Recommended for:
When running the script, you will be prompted as follows:
[?] Enter target IP address: 10.49.164.45
[?] Enter target SSH port [22]: 22
[?] Select action:
1. Reverse Shell (requires listener on your machine)
2. Test with file write (safe test)
[?] Choose option [1 or 2]: 1
[?] Enter your IP for reverse shell: 192.168.194.43
[?] Enter port for reverse shell [4444]: 4444
The script then performs the selected action automatically.
By using this exploit, you will understand:
This tool:
If you are learning cybersecurity, mastery begins with discipline and restraint.
Built to make learning exploitation clearer, safer, and more structured.
If you are reviewing this as a learner:
Understand why it works — not just that it works.
✅ Happy learning. Break systems only where you are invited to.