SSH Username Enumeration Exploit

This script is a modified version of an original exploit that allows enumeration of SSH users on vulnerable servers (OpenSSH 2.3 < 7.7).

Functionality

• The script uses a vulnerability in the SSH protocol to enumerate valid users on the target server.
• It can enumerate individual users by providing a username via the -u argument.
• It can also enumerate users from a list of usernames provided in a text file using the -w argument.
• The script displays results in the console, with valid users in green and invalid users in red.

Usage

1. Make sure you have Python 3.x installed on your system.

2. Install the required dependencies by running pip install -r requirements.txt to ensure you have the necessary libraries (such as paramiko and colorama).

3. Run the script with the following arguments:

   • To enumerate a single user:

     root@kitploit:~

     python CVE-2018-15473.py <target_IP> -u <username>
     

     

   • To enumerate users from a list:

     root@kitploit:~

     python CVE-2018-15473.py <target_IP> -w <user_list_file>
     

     

4. The script will display the results in the console.

Requirements

• Python 3.x
• paramiko package (install with pip install paramiko)
• colorama package (install with pip install colorama)

Important

This script is provided for educational and security purposes. Its use on systems or networks without explicit authorization is not recommended.

Credits

This script is an edited version of an original exploit. Credits and details of the original version can be found here.