GitHub

Detect and automatically respond to Metasploit SSH login scanner fingerprinting activity on Linux hosts.

When Metasploit's auxiliary/scanner/ssh/ssh_login module successfully authenticates via SSH, it immediately executes a deterministic command sequence to identify the ...
GitHub

Metasploit, SSH Exploitation & Post-Exploitation

This exercise brings everything together. Using Metasploit Framework we scan, exploit, and post-exploit our Ubuntu VM — establishing a full attack chain from initial recon to Meterpreter session. I ...
Threat Post

Tectia SSH Server Remote Authentication Bypass Exploit Published

UPDATE–Unix and Linux versions of Tectia SSH server as well as the open source versions of Free FTPD and FreeSSHD for Windows are vulnerable to a critical remote authentication bypass exploit ...
Bleeping Computer

Researchers extract RSA keys from SSH server signing errors

A team of academic researchers from universities in California and Massachusetts demonstrated that it’s possible under certain conditions for passive network attackers to retrieve secret RSA keys from ...
ZDNet

Hacking with Metasploit on a Nokia N800

Earlier this month at the RSA conference, I got a chance to see a demo of Immunity's Silica, a $3600 handheld devide that can search for and join 802.11 (Wi-Fi) access points, scan other connections ...