Exploiting OpenSSH Vulnerability CVE-2024-6387 🚀

A Python script designed to exploit a remote code execution (RCE) vulnerability in OpenSSH (CVE-2024-6387). This vulnerability involves a condition in the handler that can lead to arbitrary code execution, allowing an attacker to gain root access. This is a proof of concept and for educational purposes only.

Overview 📖

CVE-2024-6387 of OpenSSH is a critical vulnerability. It involves a condition in the handler that can be exploited to execute arbitrary code with root privileges.

Features 🌟

• Multi-threading: Increases success chances.
• Exploit Success Event: Stops after successful exploitation.
• Timing Adjustment: Fine-tunes timing.

Usage 🚀

Requirements

• Python 3.x

1. Clone the repository:

   root@kitploit:~

   git clone https://github.com/k4t3pr0/CVE-2024-6387-POC.git
   cd CVE-2024-6387-POC
   

2. Run the script:

   root@kitploit:~

   python Exploit_2024_6387.py
   

Explanation 🛠️

Speed Improvement

To improve performance, the script uses multi-threading, allowing multiple threads to execute concurrently. Each thread attempts to exploit the vulnerability, increasing the likelihood of success. A thread event (success_event) is used to signal when exploitation is successful, stopping all other attempts. The script also adjusts timing after each attempt for better synchronization.

Legal Disclaimer ⚠️

This exploit is for educational purposes only. Unauthorized use on systems without explicit permission is illegal and unethical. Always follow legal guidelines and obtain explicit permission before conducting security testing on any system.

Contact 📬

For any issues or questions, please open a ticket on GitHub.

---

Always stay safe and responsible! 🔒💻