Skip to content
KitploitKITPLOIT
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ
๋„๊ตฌ๋ธ”๋กœ๊ทธ
์ œ์ถœ

ํ•ดํ‚น, ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋ฐ ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋„๊ตฌ๋ฅผ ๋‹น์‹ ์˜ ๋ณด์•ˆ ๋ฌด๊ธฐ๊ณ ์—!

Kitploit์€ ํ•ดํ‚น, ์‚ฌ์ด๋ฒ„ ๋ณด์•ˆ ๋ฐ ์นจํˆฌ ํ…Œ์ŠคํŠธ ๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ์ž…๋‹ˆ๋‹ค. ์ตœ์‹  ํ”„๋กœ์ ํŠธ ์—…๋ฐ์ดํŠธ๋ฅผ ๋ฐœ๊ฒฌํ•˜์—ฌ ์ทจ์•ฝ์ ์„ ์ฐพ๊ณ , ์‹œ์Šคํ…œ์„ ๋ถ„์„ํ•˜๊ณ , ํ…Œ์ŠคํŠธ๋ฅผ ์ž๋™ํ™”ํ•˜๊ณ , ๋ณด์•ˆ์„ ๊ฐ•ํ™”ํ•˜์„ธ์š”.

ยทยทํ”ผ๋“œยท๋ฌธ์˜ยท๊ฐœ์ธ์ •๋ณดยทยฉ 2026 Kitploit

๋„๊ตฌ ๋””๋ ‰ํ† ๋ฆฌ

์นดํ…Œ๊ณ ๋ฆฌ

๋ชจ๋“  ์นดํ…Œ๊ณ ๋ฆฌ ๋ณด๊ธฐ
Loading categories
๋„๊ตฌ/GitHubGitHub/kikechans/-ssh-enum-cve-2018-15473
Vulnerability AnalysisExploitationInformation GatheringPenetration TestingLearning & EducationLabs & Practice
GitHubkikechans/-ssh-enum-cve-2018-15473

-SSH-Enum-CVE-2018-15473

๐Ÿ›ก๏ธ SSH ์‚ฌ์šฉ์ž ์—ด๊ฑฐ (CVE-2018-15473). Python 3, ๋ฉ€ํ‹ฐ์Šค๋ ˆ๋“œ ๋ฐ ์˜คํƒ ๋ณด์ •. ๐Ÿงต

์ €์žฅ์†Œ ๋ณด๊ธฐ
35๊ฐœ์›” ์ „์•„์ง ๊ฒ€ํ† ๋˜์ง€ ์•Š์Œ

์ธ๊ธฐ

๋ชจ๋‘ ๋ณด๊ธฐ โ†’

์ปค๋ฎค๋‹ˆํ‹ฐ์—์„œ ๊ฐ€์žฅ ๋งŽ์ด ์‚ฌ์šฉ๋˜๋Š” ๋„๊ตฌ๋ฅผ ์ฐพ์•„๋ณด์„ธ์š”.

๋ชจ๋“  ๋„๊ตฌ ํƒ์ƒ‰

๋„๊ตฌ ์ปฌ๋ ‰์…˜์„ ๋‘˜๋Ÿฌ๋ณด์„ธ์š”

๋ชจ๋“  ๋„๊ตฌ ๋ณด๊ธฐ โ†’
๊ณต์œ 

๐Ÿ›ก๏ธ OpenSSH User Enumeration Tool (CVE-2018-15473)

OpenSSH 7.7 ๋ฏธ๋งŒ ๋ฒ„์ „์„ ์œ„ํ•œ ์‚ฌ์šฉ์ž ์—ด๊ฑฐ ๋„๊ตฌ์ž…๋‹ˆ๋‹ค. ์ด ๋ฒ„์ „์€ Python 3์œผ๋กœ ํฌํŒ…๋˜์—ˆ์œผ๋ฉฐ, HackTheBox ๋ฐ TryHackMe ์‹ค์Šต ํ™˜๊ฒฝ์—์„œ ์ตœ๋Œ€ ์•ˆ์ •์„ฑ์„ ์œ„ํ•ด ์ตœ์ ํ™”๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

โœจ ์ฃผ์š” ๊ฐœ์„  ์‚ฌํ•ญ

  • ํ˜ธํ™˜์„ฑ: paramiko 3.x์—์„œ ์ž‘๋™ํ•ฉ๋‹ˆ๋‹ค (property object is not subscriptable ์˜ค๋ฅ˜ ์ˆ˜์ •).
  • ๋ณด์ •: ๋ฌด์ž‘์œ„ ์‚ฌ์šฉ์ž๋กœ ์ดˆ๊ธฐ ํ…Œ์ŠคํŠธ๋ฅผ ์ˆ˜ํ–‰ํ•˜์—ฌ ์„œ๋ฒ„์— ์œ„์–‘์„ฑ์„ ์œ ๋ฐœํ•˜๋Š” ๋ณดํ˜ธ ์žฅ์น˜๊ฐ€ ์žˆ๋Š”์ง€ ๊ฐ์ง€ํ•ฉ๋‹ˆ๋‹ค.
  • ์ฆ‰๊ฐ์ ์ธ ํ”ผ๋“œ๋ฐฑ: imap_unordered๋ฅผ ์‚ฌ์šฉํ•˜์—ฌ ์œ ํšจํ•œ ์‚ฌ์šฉ์ž์™€ ์œ ํšจํ•˜์ง€ ์•Š์€ ์‚ฌ์šฉ์ž๋ฅผ ์‹ค์‹œ๊ฐ„์œผ๋กœ ํ‘œ์‹œํ•˜๋ฉฐ ์Šคํฌ๋ฆฝํŠธ๋Š” ๊ณ„์† ์‹คํ–‰๋ฉ๋‹ˆ๋‹ค.
  • ์‹œ๊ฐ์  ์ถœ๋ ฅ: ์„ฑ๊ณต(+)๊ณผ ์‹คํŒจ(-)๋ฅผ ๋น ๋ฅด๊ฒŒ ์‹๋ณ„ํ•  ์ˆ˜ ์žˆ๋Š” ์ƒ‰์ƒ ๋งˆ์ปค.

๐Ÿ› ๏ธ ์„ค์น˜

root@kitploit:~
pip3 install paramiko --break-system-packages

๐Ÿš€ ์‚ฌ์šฉ๋ฒ•

root@kitploit:~
# ๋‹จ์ผ ์‚ฌ์šฉ์ž ํ…Œ์ŠคํŠธ
python3 exploit_ssh.py <IP> --user root

# ์‚ฌ์šฉ์ž ์ง€์ • ์Šค๋ ˆ๋“œ๋กœ ์›Œ๋“œ๋ฆฌ์ŠคํŠธ ์‚ฌ์šฉ
python3 exploit_ssh.py <IP> --wordlist /usr/share/wordlists/metasploit/unix_users.txt --threads 10

โš ๏ธ ๋ฉด์ฑ… ์กฐํ•ญ

์ด ์Šคํฌ๋ฆฝํŠธ๋Š” ๊ต์œก ๋ชฉ์  ๋ฐ ํ—ˆ๊ฐ€๋œ ํ™˜๊ฒฝ์—์„œ๋งŒ ์‚ฌ์šฉํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. ์ €์ž๋Š” ์ด ๋„๊ตฌ์˜ ์˜ค์šฉ์— ๋Œ€ํ•ด ์ฑ…์ž„์„ ์ง€์ง€ ์•Š์Šต๋‹ˆ๋‹ค.

๋„๊ตฌ ๋‹ค์šด๋กœ๋“œ