CVE-2019-6111

This exploit demonstrates CVE-2019-6111 and CVE-2019-6110 in OpenSSH's SCP client by sending an additional malicious file (exploit.txt) and hiding its transfer using ANSI escape sequences. It sets up a fake SCP server that exploits vulnerable clients during file downloads.

This exploit demonstrates CVE-2019-6110 and CVE-2019-6111 in OpenSSH's SCP client by creating a malicious SCP server that sends an additional file (exploit.txt) and hides the transfer using ANSI escape sequences. It leverages the SCP protocol's lack of proper validation to manipulate file transfers and terminal output.

This repository documents CVE-2019-6111, an SSH client vulnerability in Cisco SD-WAN v20.4.2.1 that allows file overwrite via malicious SSH servers, potentially leading to RCE. It references external PoCs and requires MITM or social engineering.