CVE-2020-15778

This is a writeup describing CVE-2020-15778, an authenticated command injection vulnerability in OpenSSH's scp utility (versions <= 8.3p1). The vulnerability allows remote command execution via crafted filenames due to improper sanitization in the scp command construction.

This repository contains a Python-based exploit for CVE-2020-15778, targeting OpenSSH. The exploit generates a reverse shell payload and uses SCP to transfer and execute it on the target system. The updated version includes host status checking via nmap.

This repository provides a proof-of-concept for CVE-2020-15778, a command injection vulnerability in SCP clients. It uses Docker containers to simulate an SCP server and client, demonstrating how arbitrary commands can be injected via the SCP protocol.

This repository contains a Bash script that checks if the installed SCP version is vulnerable to CVE-2020-15778, a command injection vulnerability in OpenSSH SCP. It also allows users to test input strings for unsafe patterns like backticks.

This repository contains a functional exploit for CVE-2020-15778, an OpenSSH vulnerability. The exploit uses SCP to transfer a malicious shell script to the target system and execute it, resulting in a reverse shell.