Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/jfrog/jfrog-cve-2023-25136-openssh_double-free
Vulnerability AnalysisExploitationPenetration TestingPapers & ResearchLearning & EducationBinary Exploitation
GitHubjfrog/jfrog-cve-2023-25136-openssh_double-free

jfrog-CVE-2023-25136-OpenSSH_Double-Free

Proof-of-concept exploit triggering a double-free vulnerability (CVE-2023-25136) in OpenSSH 9.1p1, causing a denial-of-service crash via pre-auth packet manipulation.

View Repository
41113 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-25136 Proof-of-Concept

Overview

This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136.
It will trigger the double-free and cause an abort crash.
For a comprehensive understanding, check out the accompanying blog post for in-depth details.

Dependencies

  • Python 3.6+
  • paramiko Python Library

Usage

  1. Verify paramiko is installed:
root@kitploit:~
pip install paramiko

  1. Change the VICTIM_IP to match your vulnerable OpenSSH Server IP.

  2. Run the PoC:

root@kitploit:~
python cve-2023-25136.py
Download Tool