libssh-scanner - GitLite

KO | EN

gitlite — search

#python #hacktoberfest #react #ai #golang #deep-learning #docker #kubernetes #vue #security #pytorch #ios #openai #open-source

libssh-scanner

(★ 235)

Script to identify hosts vulnerable to CVE-2018-10933

File Explorer

Download Latest Version (.zip)

.gitattributes
libsshscan.py
LICENSE
README.md
requirements.txt

# Installation Guide

1. Get the code

git clone https://github.com/jobroche/libssh-scanner

Downloads the entire project code from GitHub to your computer.

cd libssh-scanner

Moves into the project folder you just downloaded.

2. Python

Easy Recommended

Prerequisites

Git Needed to download the project code from GitHub.
Python 3 On Windows, be sure to check 'Add Python to PATH' during installation.

pip install -r requirements.txt

Installs the Python libraries listed in requirements.txt (or similar).

python <실행할 파일명>.py # README에서 정확한 실행 파일명을 확인하세요

Runs the Python script (or module).

✅ If it runs without errors and prints output in the terminal, it worked.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# libssh scanner

## Introduction

* * *

This is a python based script to identify hosts vulnerable to CVE-2018-10933. Libssh scanner has two modes: passive (banner grabbing) and aggressive (bypass auth) to validate vulnerability's existence. By default, libssh scanner uses passive mode but supply the -a argument and aggressive mode will be used which provides more accurate results.

The vulnerability is present on versions of libssh 0.6+ and was remediated by a patch present in libssh 0.7.6 and 0.8.4. For more details: <https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/>

## Installation

* * *

Run `pip install -r requirements.txt` within the cloned libssh-scanner directory.

## Help

* * *

libssh Scanner - Find vulnerable libssh services by Leap Security (@LeapSecurity)

positional arguments:
      target                An ip address or new line delimited file containing
                            IPs to search for the vulnerability.

optional arguments:
      -h, --help            show this help message and exit
      -v, --version         show program's version number and exit
      -p PORT, --port PORT  Set port of SSH service
      -a, --aggressive      Identify vulnerable hosts by bypassing authentication