monkeysec-sys/kangarooAuthentication bypass exploit for CVE-2026-32746 targeting legacy Telnet servers, with defensive guidance and Go-based implementation for authorized security testing.
A exploit that bypasses authentication on telnet servers running 2.7 or lower.
Also known as cve-2026-32746
Disable Telnet: Stop and turn off the telnetd daemon on your servers and network devices immediately if you do not need it.Block Port 23: Use firewalls or network rules to block all outside access to TCP port 23 so people on the internet cannot reach the service.Update Software: Check your system vendor or GNU Inetutils updates for versions higher than 2.7 that include the bug fix.Switch to SSH: Replace Telnet with Secure Shell (ssh), which encrypts your connection and is much safer for remote management.
[!NOTE]
This software utilizes native Unix system calls. Windows and non-POSIX environments are explicitly unsupported.
[!WARNING]
Authorized Use Only: This tool is developed strictly for authorized security auditing, research, and administrative purposes.
- You must obtain explicit, written permission from the system owner before executing this software against any target network or infrastructure.
- Unauthorized use, scanning, or exploitation of systems without prior consent is illegal and violates local and international laws.
- The developers assume no liability and are not responsible for any misuse, damage, or legal consequences caused by this software.
Execute the following commands in your terminal to clone the repository and configure the environment:
# Clone the repository
git clone https://github.com/MonkeySeC-sys/Kangaroo.git
# Configure executable permissions and run the installation script
cd Kangaroo
chmod +x Kangaroo.go
go build Kangaroo.go
go run Kangaroo.go