CVEs-PoC/2018/CVE-2018-10933.md

### [CVE-2018-10933](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10933)
![](https://img.shields.io/static/v1?label=Product&message=libssh&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-592&color=brighgreen)

### Description

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

### POC

#### Reference
- https://www.exploit-db.com/exploits/45638/
- https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

#### Github
- https://github.com/0xRar/FlandersWriteup
- https://github.com/0xStrygwyr/OSCP-Guide
- https://github.com/0xT11/CVE-POC
- https://github.com/0xZipp0/OSCP
- https://github.com/0xadaw/libSSH-bypass
- https://github.com/0xsyr0/OSCP
- https://github.com/1o24er/RedTeam
- https://github.com/20142995/sectool
- https://github.com/915425297/CVES
- https://github.com/ARPSyndicate/cvemon
- https://github.com/AVarro/libssh-zero-day-POC
- https://github.com/Al1ex/Red-Team
- https://github.com/Anonimo501/libssh
- https://github.com/Apri1y/Red-Team-links
- https://github.com/AvivYaniv/FireWall
- https://github.com/Bifrozt/CVE-2018-10933
- https://github.com/CVEDB/PoC-List
- https://github.com/CVEDB/awesome-cve-repo
- https://github.com/CVEDB/top
- https://github.com/DynamicDesignz/Alien-Framework
- https://github.com/Echocipher/Resource-list
- https://github.com/EmmanuelCruzL/CVE-2018-10933
- https://github.com/GhostTroops/TOP
- https://github.com/HSw109/CVE-2018-10933
- https://github.com/HSw109/CVE-2018-10933-PoC
- https://github.com/InesMartins31/iot-cves
- https://github.com/JERRY123S/all-poc
- https://github.com/JoSecMx/CVE-2018-10933_Scanner
- https://github.com/Kurlee/LibSSH-exploit
- https://github.com/Ly0nt4r/OSCP
- https://github.com/MarkBuffalo/exploits
- https://github.com/OCEANOFANYTHING/BHR_Labs
- https://github.com/Ondrik8/RED-Team
- https://github.com/Rubikcuv5/CVE-2018-10933
- https://github.com/SF4bin/SEEKER_dataset
- https://github.com/SenukDias/OSCP_cheat
- https://github.com/SexyBeast233/SecBooks
- https://github.com/SilasSpringer/CVE-2018-10933
- https://github.com/SirElmard/ethical_hacking
- https://github.com/SoledaD208/CVE-2018-10933
- https://github.com/Threekiii/Awesome-Exploit
- https://github.com/Threekiii/Awesome-POC
- https://github.com/Threekiii/Vulhub-Reproduce
- https://github.com/TrojanAZhen/Self_Back
- https://github.com/Virgula0/POC-CVE-2018-10933
- https://github.com/VladimirFogel/PRO4
- https://github.com/a-n-n-a-c-g/advanced-pentesting
- https://github.com/angristan/awesome-stars
- https://github.com/b3nn3tt/Kali-Linux-Setup-Tool
- https://github.com/bakery312/Vulhub-Reproduce
- https://github.com/blackhatruby/BHR_Labs
- https://github.com/blacknbunny/CVE-2018-10933
- https://github.com/crispy-peppers/Libssh-server-CVE-2018-10933
- https://github.com/cve-2018/cve-2018-10933
- https://github.com/cyberanand1337x/bug-bounty-2022
- https://github.com/cyberharsh/Libssh-server-CVE-2018-10933
- https://github.com/dk47os3r/hongduiziliao
- https://github.com/e-hakson/OSCP
- https://github.com/eljosep/OSCP-Guide
- https://github.com/ensimag-security/CVE-2018-10933
- https://github.com/gojhonny/libssh-scanner
- https://github.com/hackerhouse-opensource/cve-2018-10933
- https://github.com/hackerhouse-opensource/hackerhouse-opensource
- https://github.com/hackingyseguridad/libssh
- https://github.com/hasee2018/Safety-net-information
- https://github.com/hktalent/TOP
- https://github.com/hook-s3c/CVE-2018-10933
- https://github.com/hudunkey/Red-Team-links
- https://github.com/ivanacostarubio/libssh-scanner
- https://github.com/jas502n/CVE-2018-10933
- https://github.com/jbmihoub/all-poc
- https://github.com/jobroche/libssh-scanner
- https://github.com/john-80/-007
- https://github.com/kgwanjala/oscp-cheatsheet
- https://github.com/kn6869610/CVE-2018-10933
- https://github.com/kristyna-mlcakova/CVE-2018-10933
- https://github.com/lalishasanduwara/CVE-2018-10933
- https://github.com/landscape2024/RedTeam
- https://github.com/leapsecurity/libssh-scanner
- https://github.com/likescam/CVE-2018-10933-libSSH-Authentication-Bypass
- https://github.com/likescam/CVE-2018-10933_ssh
- https://github.com/lnick2023/nicenice
- https://github.com/lp008/Hack-readme
- https://github.com/marco-lancini/hunt-for-cve-2018-10933
- https://github.com/nikhil1232/LibSSH-Authentication-Bypass
- https://github.com/ninp0/cve-2018-10933_poc
- https://github.com/nitishbadole/oscp-note-3
- https://github.com/nobiusmallyu/kehai
- https://github.com/oscpname/OSCP_cheat
- https://github.com/pghook/CVE-2018-10933_Scanner
- https://github.com/qazbnm456/awesome-cve-poc
- https://github.com/r3dxpl0it/CVE-2018-10933
- https://github.com/reanimat0r/bpnd-libssh
- https://github.com/revanmalang/OSCP
- https://github.com/sambiyal/CVE-2018-10933-POC
- https://github.com/shifa123/pythonprojects-CVE-2018-10933
- https://github.com/slimdaddy/RedTeam
- https://github.com/svbjdbk123/-
- https://github.com/throwawayaccount12312312/precompiled-CVE-2018-10933
- https://github.com/trbpnd/bpnd-libssh
- https://github.com/twensoo/PersistentThreat
- https://github.com/txuswashere/OSCP
- https://github.com/u53r55/darksplitz
- https://github.com/weeka10/-hktalent-TOP
- https://github.com/wj158/snowwolf-script
- https://github.com/xFreed0m/CVE-2018-10933
- https://github.com/xbl3/awesome-cve-poc_qazbnm456
- https://github.com/xhref/OSCP
- https://github.com/xiaoZ-hc/redtool
- https://github.com/youkergav/CVE-2018-10933
- https://github.com/yut0u/RedTeam-BlackBox