Libssh-Authentication-Bypass - Spawn To Shell Without Any Credentials By Using CVE-2018-10933

Spawn to shell without any credentials by using CVE-2018-10933
Information about CVE-2018-10933 by libSSH : https://www.libssh.org/security/advisories/CVE-2018-10933.txt
Bugfix Release by libSSH : https://www.libssh.org/2018/10/16/libssh-0-8-4-and-0-7-6-security-and-bugfix-release/

Create a vulnerable ssh server:
Download, uncompress and build the vulnerable LibSSH Version : https://www.libssh.org/files/0.7/libssh-0.7.4.tar.xz
And then run LibSSH on your own server.

LibSSH authentication bypass with tool that i wrote

pip install paramiko==2.0.8
pip install socket

python libsshauthbypass.py

Shodan.io LibSSH

Download Libssh-Authentication-Bypass