CVEs-PoC/2008/CVE-2008-0166.md

CVE-2008-0166

Description

OpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random number generator that generates predictable numbers, which makes it easier for remote attackers to conduct brute force guessing attacks against cryptographic keys.

POC

Reference

• https://www.exploit-db.com/exploits/5622
• https://www.exploit-db.com/exploits/5632
• https://www.exploit-db.com/exploits/5720

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/AhegaoPsyops/sslWeakness
• https://github.com/AlienTec1908/Ephemeral3_HackMyVM_Easy
• https://github.com/AlienTec1908/Klim_HackMyVM_Medium
• https://github.com/Alirezarv700/CryptoDeepTools
• https://github.com/CVE-2008-0166/dwk_blocklists
• https://github.com/CVE-2008-0166/dwk_blocklists_sqlite3
• https://github.com/CVE-2008-0166/dwklint
• https://github.com/CVE-2008-0166/key_generator
• https://github.com/CVE-2008-0166/openssl_blocklists
• https://github.com/CVE-2008-0166/private_keys
• https://github.com/CVEDB/PoC-List
• https://github.com/CVEDB/awesome-cve-repo
• https://github.com/D4-project/snake-oil-crypto
• https://github.com/DFKTYNBY967/-
• https://github.com/Pirtmoppfnx861le/CryptoDeepTools
• https://github.com/RanadheerDanda/debian-ssh
• https://github.com/RodrigoVarasLopez/Download-Scanners-from-Nessus-8.7-using-the-API
• https://github.com/alexispotter27/Vulnerability-Scanning
• https://github.com/amphib24/nessus_scan_cysa-_book
• https://github.com/avarx/vulnkeys
• https://github.com/b4el7d/KlimAutoRoot
• https://github.com/badkeys/debianopenssl
• https://github.com/brimstone/stars
• https://github.com/bunyadovaytac/cyber-lab4
• https://github.com/chnzzh/OpenSSL-CVE-lib
• https://github.com/coinsed/deep-tool
• https://github.com/darkweb1663/Network-Vulnerability-Project
• https://github.com/demining/Chinese-version-of-Bitcoin-blockchain-cryptanalysis
• https://github.com/demining/CryptoDeepTools
• https://github.com/demining/Japanese-version-of-Bitcoin-blockchain-cryptanalysis
• https://github.com/demining/Korean-version-of-Bitcoin-blockchain-cryptanalysis
• https://github.com/demining/Vulnerable-to-Debian-OpenSSL-bug-CVE-2008-0166
• https://github.com/faithfultin/pkimetal
• https://github.com/g0tmi1k/debian-ssh
• https://github.com/git-forgexnmo0/CryptoDeepTools
• https://github.com/google/paranoid_crypto
• https://github.com/hackerhouse-opensource/exploits
• https://github.com/hackerschoice/thc-btc-rng-bruteforce
• https://github.com/hdyfha/crypto
• https://github.com/hibahmad30/MetasploitVulnAnalysis
• https://github.com/hoefling/dsa-1571
• https://github.com/huzhifeng/dailybox
• https://github.com/islanddog/htb_oscp_notes
• https://github.com/jessexe/Crypto
• https://github.com/kherrick/hacker-news
• https://github.com/kherrick/lobsters
• https://github.com/krlabs/openssl-vulnerabilities
• https://github.com/manyunya/CryptoDeepTools
• https://github.com/mueed98/CryptoToolDeep
• https://github.com/nitishbadole/oscp-note-2
• https://github.com/olivexo28/potential-octo-waddle
• https://github.com/pixel-wipe/CryptoDeepTools
• https://github.com/pkimetal/pkimetal
• https://github.com/rileyHoward92/CryptoDeepTools
• https://github.com/rmsbpro/rmsbpro
• https://github.com/satisfiedtrig/pkimetal
• https://github.com/shn3rd/OpenSSL-PRNG
• https://github.com/snowdroppe/ssh-keybrute
• https://github.com/zhaoolee/garss