CVE-2024-6387 PoC

This Bash script is designed to check if a server is running a vulnerable version of OpenSSH based on its SSH banner. It verifies if the SSH port is open and examines the banner response to determine if it matches any known vulnerable versions.

Usage

1. Clone the Repo

git clone https://github.com/shamo0/CVE-2024-6387_PoC
cd CVE-2024-6387_PoC

2. Run the script

check.sh <ip> [<ip> ...] [--port=<port>] [--timeout=<timeout>] [--file=<filename>]

Output

• If the server is vulnerable, the script will print : vulnerable (running SSH version).
• If the server is not vulnerable, it will print : not vulnerable (running SSH version).
• If the SSH port is closed, it will print : closed.