moften/cve-2018-15473-pocCheck if a username is valid on the SSH server by attempting an authentication. The server response will indicate whether the username exists.
Check if a username is valid on the SSH server by attempting an authentication. The server response will indicate whether the username exists.
CVE-2018-15473 Proof of Concept (PoC)
This repository contains a proof-of-concept (PoC) exploit for the vulnerability CVE-2018-15473, which affects the OpenSSH service.
Description
CVE-2018-15473 is a user enumeration vulnerability in OpenSSH. An attacker can exploit this flaw to determine which usernames exist on a vulnerable system without prior authentication.
Usage
python3 cve-2018-15473-poc.py -t <target_ip> -u
Parameters:
-t <target_ip>: IP address of the target server.
-u : Username to check.
-U <userlist.txt>: List of users to perform mass enumeration.
Requirements
Python 3.x
Required modules (can be installed with pip install -r requirements.txt if a dependencies file is provided)
Mitigation
To protect against this vulnerability, it is recommended to:
Update OpenSSH to a secure version.
Disable authentication based on usernames and passwords, favoring SSH keys.
Configure AllowUsers in sshd_config to restrict access.
Disclaimer
This code is provided for educational and research purposes only. Misuse of this software on systems without authorization may be illegal. The author is not responsible for any damage caused by its improper use.
References
NVD - CVE-2018-15473
OpenSSH
