CVE-2025-32433

This PoC exploits CVE-2025-32433, a pre-authentication SSH vulnerability, by sending malformed SSH packets to trigger arbitrary file writes on the target system. The exploit constructs SSH_MSG_KEXINIT, SSH_MSG_CHANNEL_OPEN, and SSH_MSG_CHANNEL_REQUEST packets to bypass authentication and execute a file write command.

This repository contains a functional PoC exploit for CVE-2025-32433, an unauthenticated RCE vulnerability in Erlang/OTP SSH server. The exploit leverages flawed SSH protocol message handling to execute arbitrary commands or spawn a reverse shell.

This repository contains a functional Python exploit for CVE-2025-32433, targeting a vulnerability in Erlang's SSH library. The exploit sends a malformed SSH_MSG_CHANNEL_REQUEST packet to achieve pre-authenticated remote code execution via an Erlang payload.

This repository contains a functional Proof-of-Concept (PoC) for CVE-2025-32433, an unauthenticated Remote Code Execution (RCE) vulnerability in Erlang/OTP SSH server. The exploit leverages improper SSH protocol sequence enforcement to execute arbitrary Erlang commands without authentication.

This repository contains a Python script designed to scan CIDR blocks for vulnerable Erlang/OTP SSH servers affected by CVE-2025-32433. It uses Masscan for initial discovery and parses banners to identify vulnerable versions.

This repository contains a functional exploit for CVE-2025-32433, targeting an Erlang OTP SSH server. The exploit establishes an SSH connection, sends a crafted payload to execute arbitrary commands, and demonstrates a reverse shell.

This repository contains a functional PoC for CVE-2025-32433, an Erlang/OTP SSH pre-authentication RCE vulnerability. The exploit sends a crafted SSH packet to trigger a reverse shell and simulates post-exploitation activities.

This repository contains a proof-of-concept exploit for CVE-2025-32433, an unauthenticated remote code execution vulnerability in Erlang/OTP SSH server. The exploit allows arbitrary command execution and reverse shell initiation.

This repository contains a Python-based Proof-of-Concept exploit for CVE-2025-32433, targeting an unauthenticated Remote Code Execution vulnerability in Erlang/OTP SSH. The exploit uses Paramiko to establish an SSH connection and execute arbitrary commands via the `os:cmd` function.

This is a functional exploit for CVE-2025-32433, an unauthenticated RCE vulnerability in Erlang/OTP SSH server. It crafts malicious SSH protocol messages to execute arbitrary commands, specifically a reverse shell, without authentication.

This is a Metasploit module that exploits CVE-2025-32433, a pre-authentication RCE vulnerability in Erlang-based SSH servers. It crafts malicious SSH packets to execute commands via the Erlang `os:cmd` function, establishing a reverse shell.

The repository claims to provide an exploit for CVE-2025-32433, a critical RCE vulnerability in Erlang/OTP SSH, but contains no actual exploit code. Instead, it directs users to an external download link (tinyurl.com) and provides vague, marketing-like descriptions without technical details.

This repository contains functional exploit code for multiple CVEs, including authentication bypass vulnerabilities in TOTOLINK devices and a scanner for Fortinet SSL VPN (CVE-2024-21762). The PoCs demonstrate the vulnerabilities with clear technical details and functional code.

This repository contains a proof-of-concept exploit for CVE-2025-32433, a pre-authentication remote code execution vulnerability in the Erlang/OTP SSH server. The exploit leverages DNS out-of-band techniques to confirm vulnerability and includes both Python and Go implementations for mass scanning.

The repository contains a scanner for CVE-2025-32433, an Erlang/OTP SSH Pre-Auth RCE vulnerability. The exploit logic is a placeholder and does not demonstrate a working RCE, but the scanner checks for vulnerable banners.

This exploit targets an SSH server vulnerability (CVE-2025-32433) by sending a crafted SSH_MSG_CHANNEL_REQUEST with a malicious command payload to achieve remote code execution. The PoC constructs SSH protocol packets to bypass authentication and execute a reverse shell command.

This PoC demonstrates CVE-2025-32433, an authentication bypass in Erlang/OTP SSH allowing pre-authentication command execution via improper SSH protocol state handling.

This PoC demonstrates CVE-2025-32433 by sending an SSH message with ID 80 (reserved for post-auth) during the pre-auth phase, proving the Erlang/OTP SSH server processes invalid messages. The exploit confirms vulnerable behavior but does not include a full RCE payload.

The repository contains a minimal Python script that attempts to establish a socket connection to a specified host and port, then sends a user-provided command. However, it lacks any vulnerability-specific logic or exploitation mechanism for CVE-2025-32433.

This PoC exploits CVE-2025-32433, a pre-authentication RCE vulnerability in Erlang/OTP's SSH implementation. It crafts malicious SSH packets to execute arbitrary commands (e.g., file writes) without authentication.

This PoC exploits a pre-authentication RCE vulnerability in Erlang/OTP SSH servers by sending maliciously crafted SSH protocol messages. It constructs SSH_MSG_KEXINIT, SSH_MSG_CHANNEL_OPEN, and SSH_MSG_CHANNEL_REQUEST packets to execute a reverse shell command.

The repository contains a Go-based exploit for CVE-2025-32433, with a GitHub Actions workflow for building cross-platform binaries. The presence of a Docker setup suggests it includes a test environment for the vulnerability.

This repository contains a functional Python PoC for CVE-2025-32433, demonstrating an SSH protocol exploit that sends crafted SSH messages (KEXINIT, CHANNEL_OPEN, CHANNEL_REQUEST) to trigger a pre-authentication vulnerability. The exploit targets an Erlang/OTP SSH server and attempts to write a file via a malformed 'exec' request.

This repository contains a functional exploit PoC for CVE-2025-32433, demonstrating a remote code execution (RCE) vulnerability. The exploit leverages a malicious IPP server to deliver a payload via CUPS' browsed protocol, targeting vulnerable CUPS instances.

This repository contains a README describing CVE-2025-32433, a critical unauthenticated RCE vulnerability in Erlang/OTP SSH. No exploit code is present, only a detailed writeup about the vulnerability and its context.

This repository provides a YARA rule for detecting exploits and scanners targeting CVE-2025-32433, an Erlang SSH remote code execution vulnerability. It focuses on identifying reverse shells, obfuscated payloads, and scanner patterns with minimal false positives.

This Go-based exploit leverages CVE-2025-32433, a pre-authentication RCE vulnerability in SSH protocol handling, by bypassing authentication and sending malicious payloads via SSH_MSG_CHANNEL_REQUEST. It supports both direct command execution and reverse shell establishment.

This repository contains a working PoC for CVE-2025-32433, an unauthenticated RCE vulnerability in Erlang/OTP SSH. The exploit sends malformed SSH packets to execute arbitrary Erlang commands pre-authentication.

This is a functional exploit for CVE-2025-32433, targeting an unauthenticated RCE vulnerability in Erlang/OTP SSH servers. It sends malformed SSH protocol messages to execute arbitrary Erlang code, resulting in a reverse shell.

This PoC exploits a pre-authentication RCE vulnerability in Erlang-based SSH servers (CVE-2025-32433) by emulating the SSH protocol, brute-forcing channel types, and injecting commands. It supports batch scanning, multithreading, and logging.

This PoC exploits a pre-authentication RCE vulnerability in Erlang-based SSH servers (CVE-2025-32433) by emulating SSH protocol handshakes and injecting commands via malformed channel requests. It supports batch scanning, multithreading, and reverse shell payloads.

The repository provides a writeup for CVE-2025-32433, an unauthenticated RCE vulnerability in Erlang/OTP's SSH server. It includes installation instructions for a vulnerable lab environment but lacks actual exploit code.

This repository contains a functional proof-of-concept exploit for CVE-2025-32433, a pre-authentication RCE vulnerability in the Erlang/OTP SSH daemon. The exploit crafts malicious SSH packets to execute arbitrary commands before authentication, demonstrated by writing a file or spawning a reverse shell.

This exploit targets a pre-authentication RCE vulnerability in an SSH server by sending malformed SSH protocol packets, specifically SSH_MSG_CHANNEL_REQUEST with an 'exec' payload, to achieve remote command execution. The PoC includes a reverse shell command and follows the SSH protocol structure to bypass authentication.

This is a functional exploit for CVE-2025-32433, targeting a pre-authentication RCE vulnerability in Erlang/OTP SSH. It crafts malicious SSH packets to execute arbitrary Erlang commands on vulnerable servers.

This repository contains a Python-based exploit for CVE-2025-32433, targeting a pre-authentication RCE vulnerability in Erlang/OTP SSH. The exploit supports both reverse shell execution and a safe file-write test for verification.

This PoC exploits CVE-2025-32433, a vulnerability in the Erlang OTP SSH server, by crafting malicious SSH packets to achieve remote command execution. It leverages the SSH protocol to send a specially formatted 'exec' request with an Erlang payload that executes arbitrary commands on both Windows and Unix systems.

This repository contains a functional Python exploit for CVE-2025-32433, targeting an authentication bypass in Erlang/OTP's SSH implementation. The exploit crafts malicious SSH packets to execute arbitrary commands or spawn reverse shells without proper authentication.

This repository contains a functional Python exploit for CVE-2025-32433, targeting an SSH server vulnerability. The exploit establishes a connection, performs protocol version exchange, key exchange initialization, and sends a crafted channel request to execute arbitrary commands.

This repository contains a functional Go-based exploit for CVE-2025-32433, targeting an Erlang SSH server. The exploit demonstrates pre-authentication remote code execution by sending crafted SSH packets to execute arbitrary commands via the Erlang `os:cmd` function.

This Metasploit module exploits CVE-2025-32433, a pre-authentication RCE vulnerability in Erlang-based SSH servers. It crafts malicious SSH packets to execute commands via the Erlang `os:cmd` function, establishing a reverse shell.

This repository contains a functional exploit for CVE-2025-32433, targeting an SSH server vulnerability that allows pre-authentication command execution. The PoC constructs malicious SSH packets to trigger the vulnerability, specifically writing a file to the target system.