Exploits

CVE-2024-6387-nmap

Script for checking CVE-2024-6387 (regreSSHion)

Used to detect ssh servers vulnerable to CVE-2024-6387. Shameless robbery from https://github.com/bigb0x/CVE-2024-6387 using ChatGPT to translate the code to PHP.

This Python script exploits a remote code execution vulnerability (CVE-2024-6387) in OpenSSH.

This script, created by R4Tw1z, is designed to scan IP addresses to check if they are running a potentially vulnerable version of OpenSSH. The tool leverages multi-threading to optimize scanning performance and handle multiple IP addresses concurrently.

CVE-2024-6387 exploit

This is a POC I wrote for CVE-2024-6387

Recently, the OpenSSH maintainers released security updates to fix a critical vulnerability that could lead to unauthenticated remote code execution (RCE) with root privileges. This vulnerability, identified as CVE-2024-6387, resides in the OpenSSH server component (sshd), which is designed to listen for connections from client applications.

Exploit for CVE-2024-6387 targeting a race condition in OpenSSH's signal handler on glibc-based Linux, enabling remote code execution and root access via unsafe async signal functions in SIGALRM handler.

OpenSSH CVE-2024-6387 Vulnerability Checker

SSH RCE PoC CVE-2024-6387

CLI Tool to Check SSH Servers for Vulnerability to CVE-2024-6387

CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH

CVE-2024-6387 for SSH RCE in Python [Update]

Case Study: SSHtranger Things (CVE-2019-6111, CVE-2019-6110) in Cisco SD-WAN

SSHd cve-2024-6387-poc

PoC RCE in OpenSSH

32-bit PoC for CVE-2024-6387 "regreSSHion" -- mirror of the original 7etsuo/cve-2024-6387-poc