Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-6387 — Python script to scan and secure SSH configurations against the CVE-2024-6387 race condition vulnerability, with automated LoginGraceTime adjustment and reporting. | Kitploit
Tools/GitHubGitHub/grupooruss/cve-2024-6387
ReconnaissanceVulnerability ScannersScripting & AutomationConfiguration AuditingNetwork SecurityPenetration Testing
GitHubgrupooruss/cve-2024-6387

CVE-2024-6387

Python script to scan and secure SSH configurations against the CVE-2024-6387 race condition vulnerability, with automated LoginGraceTime adjustment and reporting.

View Repository
222 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

OpenSSH CVE-2024-6387 Mitigation Script

This repository contains a Python script designed to help network administrators scan and secure SSH configurations against the CVE-2024-6387 vulnerability found in OpenSSH's signal handling mechanism. This vulnerability, if exploited, can allow unauthorized access or denial of service attacks due to race conditions during authentication timeouts.

Background

CVE-2024-6387 targets a race condition issue in OpenSSH where failure to authenticate within the LoginGraceTime can lead to potential security vulnerabilities. This script helps in identifying and mitigating such risks by adjusting server configurations and ensuring systems are updated and secure.

Features

  • SSH Configuration Scanning: Automatically scans the SSH configurations of network hosts.
  • LoginGraceTime Adjustment: Suggests or makes adjustments to the LoginGraceTime parameter to secure SSH servers.
  • Reporting: Generates a detailed report of the current SSH configurations and any changes applied.

Prerequisites

Before running this script, ensure you have the following:

  • Python 3.6 or higher
  • Paramiko library installed (pip install paramiko)

Installation

Clone this repository to your local machine:

git clone https://github.com/grupooruss/CVE-2024-6387-Tester.git cd CVE-2024-6387-Tester

To run the script, execute the following command in your terminal: CVE-2024-6387.py

Make sure to modify the script with appropriate credentials and IP addresses of the servers you intend to scan.

License

This project is licensed under the MIT License - see the LICENSE.md file for details. Contact

For any inquiries or contributions, please contact www.grupooruss.com or open an issue in this repository.

Acknowledgments

root@kitploit:~
Thanks to all contributors who have helped in identifying and mitigating this vulnerability:

https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server Special thanks to cybersecurity researchers and network administrators dedicated to improving network security.

Download Tool