Sysax Multi Server Free Download
Tanner Brodnax
I was recently fuzzing a bunch of SSH servers, hoping to find some remote code execution in a non-mainstream server. I ended up finding no code execution in the several that I tried, but I did find one pre-auth denial of service in Syax Multi Server 6.10.
I found that during the key exchange, where the SSH client and SSH server negotiate which ciphers to use, if you messed up just a single specific byte, the server would crash. I started reading through the RFC for SSH keyexchange, and found the key exchange to be mostly ASCII.
I am in need of an SFTP server on our internal network (AD). Does anyone have any suggestions on how to accomplish this without incurring any huge costs? I've read about creating an open SSH server in Windows, but that to me seems to be a long way of going about it. Any help is appreciated.
760c119bf3