{"id":28693189,"url":"https://github.com/doyensec/sshnuke_info","last_synced_at":"2025-06-26T17:34:00.047Z","repository":{"id":293162740,"uuid":"939557506","full_name":"doyensec/SSHNuke_info","owner":"doyensec","description":"SSH Nuke Info","archived":false,"fork":false,"pushed_at":"2025-03-04T17:29:36.000Z","size":8,"stargazers_count":5,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-06-14T08:11:23.175Z","etag":null,"topics":["exploit","exploit-development","sshd","vulnerability"],"latest_commit_sha":null,"homepage":"https://blog.doyensec.com/2025/03/04/exploitable-sshd.html","language":"C","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/doyensec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-02-26T18:23:14.000Z","updated_at":"2025-04-30T16:02:19.000Z","dependencies_parsed_at":"2025-05-14T02:51:48.613Z","dependency_job_id":"7fcb32e6-ee40-470d-b0f0-4f958c99454b","html_url":"https://github.com/doyensec/SSHNuke_info","commit_stats":null,"previous_names":["doyensec/sshnuke_info"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/doyensec/SSHNuke_info","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doyensec%2FSSHNuke_info","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doyensec%2FSSHNuke_info/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doyensec%2FSSHNuke_info/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doyensec%2FSSHNuke_info/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/doyensec","download_url":"https://codeload.github.com/doyensec/SSHNuke_info/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/doyensec%2FSSHNuke_info/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262113731,"owners_count":23261092,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["exploit","exploit-development","sshd","vulnerability"],"created_at":"2025-06-14T08:10:54.860Z","updated_at":"2025-06-26T17:34:00.019Z","avatar_url":"https://github.com/doyensec.png","language":"C","funding_links":[],"categories":[],"sub_categories":[],"readme":"# SSHNuke_info\n\n\u003e This repo pairs with the [!exploitable Episode Two - Enter the Matrix](https://blog.doyensec.com/2025/03/04/exploitable-sshd.html) blog post.\n\nSSHNuke, aka the exploit used by Trinity in *The Matrix Reloaded*, attacks\nOpenSSH versions prior to 2.3.0. \n\nThe `main.c` re-implements the vulnerability in the simplest package. This\nallows you to prototype your own basic exploits to understand this famous\nvulnerability.\n\n# build instructions\n\n```\ngcc -g main.c\n```\n\nThat's it, you get an `a.out` which accepts the exploit buffer over `stdin`.\n\n## alt\n\nIf you want to cheat, switch to the cheat branch and see a crash example.\n\n# Credit\n\n* Code is 99% copy/pasted from OpenSSH with an attempt to retain all copywrites\n* Dennis Goodlett of Doyensec wrote only the `main` function\n* Vulnerability originaly discovered by Michal Zalewski [ref](https://web.archive.org/web/20020205102640/http://razor.bindview.com/publish/advisories/adv_ssh1crc.html)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdoyensec%2Fsshnuke_info","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdoyensec%2Fsshnuke_info","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdoyensec%2Fsshnuke_info/lists"}