Sploitus

Exploit for OS Command Injection in Openbsd Openssh

CVE-2023-51385

githubexploit · 2023-12-26

Exploit Code

README25 lines
## https://sploitus.com/exploit?id=D104D2BF-ED22-588B-A9B2-3CCC562FE8C0
CVE-2023-51385 poc

OpenSSH ProxyCommand RCE poc

OpenSSH 
  


  


## 1.`vim ~/.ssh/config` or edit `C:/Users/username/.ssh/config` on windows system

```
host *.example.com
  ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p
```

## 2. `git clone https://github.com/WLaoDuo/CVE-2023-51385_poc-test --recurse-submodules`

A submodule which would exploit this vulnerability to pop a firefox on kali or calc.exe on windows.


thanks to https://github.com/vin01/poc-proxycommand-vulnerable-v2