🛡️ OpenSSH User Enumeration Tool (CVE-2018-15473)

User enumeration tool for OpenSSH versions below 7.7. This version has been ported to Python 3 and optimized for maximum stability in HackTheBox and TryHackMe labs.

✨ Key improvements

• Compatibility: Works with paramiko 3.x (fixes the property object is not subscriptable error).
• Calibration: Performs an initial test with a random user to detect if the server has protections that generate false positives.
• Immediate Feedback: Uses imap_unordered to show valid and invalid users in real time while the script continues running.
• Visual Output: Color markers to quickly identify hits (+) and misses (-).

🛠️ Installation

pip3 install paramiko --break-system-packages

🚀 Usage

# Test a single user
python3 exploit_ssh.py <IP> --user root

# Use a wordlist with custom threads
python3 exploit_ssh.py <IP> --wordlist /usr/share/wordlists/metasploit/unix_users.txt --threads 10

⚠️ Disclaimer

This script is for educational use only and in authorized environments. The author is not responsible for the misuse of this tool.