soledad208 / cve-2018-10933 Goto Github PK
View Code? Open in Web Editor NEWCVE-2018-10933 very simple POC
CVE-2018-10933 very simple POC
I received this traceback, I think it may be related to the RFC reference below the traceback
Traceback (most recent call last):
File "CVE-2018-10933.py", line 44, in
main(**vars(args))
File "CVE-2018-10933.py", line 29, in main
cmd_channel = transport.open_session()
File "/usr/local/lib/python2.7/dist-packages/paramiko/transport.py", line 806, in open_session
timeout=timeout,
File "/usr/local/lib/python2.7/dist-packages/paramiko/transport.py", line 933, in open_channel
raise e
EOFError
5.3. Closing a Channel
When a party will no longer send more data to a channel, it SHOULD
send SSH_MSG_CHANNEL_EOF.
byte SSH_MSG_CHANNEL_EOF
uint32 recipient channel
No explicit response is sent to this message. However, the
application may send EOF to whatever is at the other end of the
channel. Note that the channel remains open after this message, and
more data may still be sent in the other direction. This message
does not consume window space and can be sent even if no window space
is available.
Hi!
I followed the instruction in the INSTALL file until:
If you want to install libssh after compilation run:
make install
Which gave me the following error:
Building C object src/CMakeFiles/ssh_shared.dir/libcrypto.c.o
/fake/path/libssh-0.7.4/src/libcrypto.c: In function ‘evp’:
/fake/path/libssh-0.7.4/src/libcrypto.c:136:16: error: storage size of ‘md’ isn’t known
EVP_MD_CTX md;
Any idea about this?
PS: I installed all the suggested libraries and packages.
Thank you
Need to add paramiko.util.log_to_file("pwnSSH.log")
38: print(f'SSH Exception: {e}', file=sys.stdout)
Should be:
38: printf('SSH Exception: {e}', file=sys.stdout)
Hey there,
I am getting the fopllowing error. Do you have any suggestions?
Secsh channel 0 open FAILED: : Administratively prohibited
Traceback (most recent call last):
File "D:/.../libssh.py", line 29, in
exit(poc())
File "D:/.../libssh.py", line 20, in poc
cmd_channel = transport.open_session()
File "C:\Python36\lib\site-packages\paramiko\transport.py", line 806, in open_session
timeout=timeout,
File "C:\Python36\lib\site-packages\paramiko\transport.py", line 944, in open_channel
raise e
paramiko.ssh_exception.ChannelException: (1, 'Administratively prohibited')
Best Regards!
Bernhard
$ ./samplesshd-cb 127.0.0.1 -p 2222
Error listening to socket: Failed to import private DSA host key
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.