Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/hssmo/cve-2024-6387_aimade
Vulnerability AnalysisExploitationPenetration TestingLearning & EducationRemote Access Tool
GitHubhssmo/cve-2024-6387_aimade

cve-2024-6387_AImade

Python script to test CVE-2024-6387 OpenSSH race condition vulnerability, enabling remote code execution on glibc-based Linux systems for security research and educational purposes.

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Presentation of the Test Code for CVE-2024-6387

Introduction

This document presents a Python script designed to test the vulnerability CVE-2024-6387, identified in OpenSSH. This vulnerability is a race condition in the SIGALRM signal handler that can allow remote code execution (RCE) on glibc-based Linux systems. The script was generated by an artificial intelligence for educational and security research purposes.

Description of CVE-2024-6387

  • Identifier: CVE-2024-6387
  • Description: A race condition in OpenSSH, reintroduced by a code change in October 2020, allows an attacker to invoke non-async-signal-safe functions in the SIGALRM handler.
  • Impact: Remote code execution as root on vulnerable systems.
  • Affected Versions: OpenSSH 8.5p1 to 9.8p1.

Functioning of the Script

The script attempts to trigger the race condition by establishing numerous connections to the targeted SSH server. Each attempt sends specially crafted packets to test the timing and exploit the vulnerability.

NOTE

I DIDN'T TEST IT !!!!!!!

but you find more info about the exploit here: https://github.com/zgzhang/cve-2024-6387-poc/blob/main/regresshion.txt

Download Tool