CVE-2025-26466
poc for CVE-2025-26466
made by Fikret Can Gurbuz
USAGE
python3 poc.py -i <ip> -p <port>
These are the steps:
- TCP connect to port
- recieve server banner (SSH-2.0-OpenSSH_X.Xp1)
- send your client banner (SSH-2.0-YourClient\r\n)
- send wrap_ssh_packet(build_kexinit())
- recieve server's KEXINIT response
- loop sending build_ping()
! never complete KEX, so pong responses queue unbounded