Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed interactive password prompt issue #7356

Merged
merged 2 commits into from Sep 23, 2016

Conversation

gpapakyriakopoulos
Copy link
Contributor

Fixed an issue where the exploit would drop to interactive password prompt by default on newer ruby version which rendered the exploit unusable. It now properly forces pubkey authentication instead and proceeds with the bypass as expected.

Fixed an issue where the exploit would drop to interactive password prompt by default on newer ruby version which rendered the exploit unusable. It now properly forces pubkey authentication instead and proceeds with the bypass as expected.
…pt-fix

Fixed interactive password prompt issue
@bcook-r7 bcook-r7 merged commit f1f6184 into rapid7:master Sep 23, 2016
@bcook-r7
Copy link
Contributor

Nice, thanks @gpapakyriakopoulos

@bcook-r7
Copy link
Contributor

bcook-r7 commented Sep 23, 2016

Release Notes

This fix updates windows/ssh/freesshd_authbypass so that it avoids interactive password prompting due to recent updates to the Net-SSH gem.

@bcook-r7 bcook-r7 self-assigned this Sep 30, 2016
@tdoan-r7 tdoan-r7 added the rn-fix release notes fix label Oct 4, 2016
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug module rn-fix release notes fix
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants