Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2018-15473 — SSH username enumeration exploit for CVE-2018-15473 (OpenSSH 2.3-7.7). Sends malformed authentication packets to identify valid users on vulnerable servers. | Kitploit
Tools/GitHubGitHub/kaktus5454/cve-2018-15473
ReconnaissanceVulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubkaktus5454/cve-2018-15473

CVE-2018-15473

SSH username enumeration exploit for CVE-2018-15473 (OpenSSH 2.3-7.7). Sends malformed authentication packets to identify valid users on vulnerable servers.

View Repository
25 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2018-15473 - SSH Username Enumeration Exploit

A tool for enumerating valid usernames on vulnerable SSH servers (OpenSSH 2.3 through 7.7).

📋 Vulnerability Description

CVE-2018-15473 allows enumeration of existing users on SSH servers by sending malformed authentication packets. The server responds differently to malformed packets depending on whether the user exists:

  • If user DOES NOT exist → Server immediately returns SSH2_MSG_USERAUTH_FAILURE
  • If user EXISTS → Server attempts to parse the packet, encounters an error, and closes the connection without any response

This tool sends specially crafted packets and interprets the server's response to determine which usernames are valid.

⚙️ Requirements

  • Python 3.6 or newer
  • paramiko library

Install Dependencies

root@kitploit:~
pip3 install paramiko
Download Tool