SSH Exploit Script | Free 02-25-2019, 03:16 PM
#1
This is a shell script I wrote to automate CVE-2018-15473 OpenSSH Username Enumeration exploit. The exploit (which I don't take any credit for) takes advantage of a flaw in OpenSSH versions less than 7.7. But you can only check one username at a time with it. So I cooked up a short script to automate checking usernames from a file. It's so easy to use that a 5-year old could be taught to use it. Go check it out, it's free. Feel free to contact me with suggestions, questions, or anything else. Feel free to mess around with it or copy it too.
SSH Username Finder (SUF): https://github.com/ghostwalkr/SUF/
SSH Username Finder (SUF): https://github.com/ghostwalkr/SUF/


![[+]](https://sinister.li/images/modern/collapse_collapsed.png)