Login without a PASSWORD (CVSS 10)
A good way of understanding SSH is to deep dive on the protocol itself and exploit known vulnerabilities.
In this video, we will exploit a critical vulnerability (CVSS 10) in Erlang SSH library that allows unauthenticated login to the server.
P.S There are some typo in the video about the CVE number. It should be CVE-2025-32433 and not CVE-2025-3243.
// Tags
#ethicalhacking #erlang #ssh #exploit #CVE-2025-32433
// Chapters
0:00 - Erlang 101
0:48 - SSH protocol architecture
1:50 - Creating the script
2:41 - Banner and protocol version exchange
4:04 - Key exchange init
8:31 - Why padding is necessary?
9:42 - Opening the channels
// Links
Vulnerability Details: https://nvd.nist.gov/vuln/detail/CVE-...