CVE-2024-6387-Updated-SSH-RCE

CVE-2024-6387 for SSH RCE in Python [Update] 0day for OpenSSH's sshd on glibc-based Linux systems

The repository provides a working variant of the CVE-2024-6387 vulnerability exploit with support for real-time active shell, multithreading, entering targets from a file, and color output.

Description

An exploit for CVE-2024-6387, targeting a signal handler race condition in OpenSSH's server (sshd) on glibc-based Linux systems. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.

Exploit details

The exploit targets the SIGALRM handler race condition in OpenSSH's sshd, which calls async-signal-unsafe functions. This can be leveraged to achieve remote code execution as root.

Vulnerable versions:

OpenSSH 8.5p1 to 9.8p1

Running

To run exploit you need Python 3. Execute:

python exploit.py -h 1.1.1.1 -c 22

Download

After payment, take a screenshot and send it to my email. I will answer within an hour. olifer.ford@gmail.com Price 50usd usdt trc20:

TMt5mkrjefAsiSK3h639MePzzW18G9Wz9A