🔐 CVE-2025-3243 SSH Checker

Fast. Lean. No-BS.
Python script for initial exposure check of the CVE-2025-3243 vulnerability related to the Erlang/OTP SSH client.

This project was designed for quick triage, reduction of operational uncertainty, and attack surface validation in environments where SSH is a critical asset.

🧠 Strategic Context

CVE-2025-3243 affects specific versions of the Erlang/OTP SSH Client, potentially causing unexpected behavior during connection negotiation.

👉 This script does NOT exploit the vulnerability.
👉 It detects signals, measures response, and collects technical indicators for decision making.

Think of it as early-warning intelligence, not as a weapon.

⚙️ What the script does

• 📡 Tests TCP connectivity on SSH port (default: 22)
• 🏷️ Captures and displays the SSH banner
• 🧪 Performs a non-interactive SSH connection attempt
• ⏱️ Measures total response time
• 🧾 Returns clear codes for manual analysis or automation

All with low noise, low risk, and high signal.

📦 Requirements

• Python 3.8+
• OpenSSH Client installed
• Linux / Unix-like system (uses timeout and ssh via CLI)

🚀 Usage

python3 cve_2025_3243_checker.py <host>
Exemplo
Copiar código
Bash
python3 cve_2025_3243_checker.py 192.168.1.10
🧾 Saída esperada (exemplo)
Copiar código
Text
[+] Testando 192.168.1.10:22
[*] Banner: SSH-2.0-OpenSSH_8.9
[*] Testando conexão SSH básica...
[!] Falha de autenticação (normal)
[+] Tempo total: 1.42s
⚠️ Falha de autenticação é esperada