Exploit for userenum

kitploit · 2026-08-25

Description

SSH user enumeration via CVE-2018-15473 using user dictionary with searchsploit script.

Affected Openbsd Openssh versions

Openbsd Openssh≤ 7.7

All known vulnerabilities by product

Alt Linux Centos Ibm Aix Openssh Red Hat Suse Ubuntu

CVSS 5.9 for CVE-2018-15473

5.9

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:NONE

Availability:NONE

Exploit Details

Modified:2026-08-25 04:27

Last Seen:2026-08-26 02:13

Reporter:KitPloit

Tags

SSHuser enumerationCVE-2018-15473user dictionaryValentine HTB

Other exploits for CVE-2018-15473

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

2026-08-28 KitPloitKITPLOIT

SSH_Enum_CVE-2018-15473

2026-08-27 KitPloitKITPLOIT

SSH-account-enumeration-verification-script

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

CVE-2018-15473-exp

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN14 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-GABOLC98-USERENUM-CVE-2018-15473
# Userenum CVE-2018-15473

CVE-2018-15473에 대한 사용자 열거

이 스크립트는 Leap Security(@LeapSecurity) https://leapsecurity.io의 CVE-2018-15473 SSH 사용자 열거와 함께 사용자 사전을 사용하는 방법입니다. Valentine HTB 머신을 해결하기 위해 개발된 스크립트입니다.

## 사용 방법

**1\. 다음 명령으로 메인 스크립트를 다운로드합니다.** _searchsploit -x linux/remote/45939.py_

**2\. userenum.py 스크립트에서 매개변수를 변경합니다.**

**3\. 다음 명령으로 스크립트를 실행합니다.** _python3 userenum.py_