Sploitus

Exploit for CVE-2022-21449 CVE-2022-21449 CVE-2023-25136

githubexploit · 2023-02-07

Exploit Code

README27 lines
## https://sploitus.com/exploit?id=1BBD17B2-C6D3-51D3-9890-ABF4D9148C06
# CVE-2023-25136 Proof-of-Concept

### Overview

This is a DoS Proof-of-Concept of OpenSSH 9.1p1 Double-Free Vulnerability CVE-2023-25136.  
It will trigger the double-free and cause an abort crash.  
For a comprehensive understanding, check out the accompanying [blog post](https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/) for in-depth details.

### Dependencies

* Python 3.6+
* `paramiko` Python Library

### Usage

1. Verify `paramiko` is installed:
```
pip install paramiko
```

2. Change the `VICTIM_IP` to match your vulnerable OpenSSH Server IP.  

3. Run the PoC:
```
python cve-2023-25136.py
```