exploitdb icon indicating copy to clipboard operation
exploitdb copied to clipboard

45233.py multiple CryptographyDeprecationWarning [Kali 2020.1]

Open aenagy opened this issue 4 years ago • 0 comments

Trying to run 45233.py (https://github.com/offensive-security/exploitdb/blob/master/exploits/linux/remote/45233.py) I get get

import paramiko
ImportError: No module named paramiko

So I try 'pip install paramiko' (https://stackoverflow.com/questions/28173520/importerror-no-module-named-paramiko). That generated another error (sorry, not output) which lead me to 'pip install paramiko==2.0.8' (https://github.com/paramiko/paramiko/issues/1314). Then I try again and get:

root@Kali:~# python 45233.py --userList unix_users.txt --outputFile validusers.txt 192.168.1.105
/usr/local/lib/python2.7/dist-packages/paramiko/ecdsakey.py:134: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
  self.ecdsa_curve.curve_class(), pointinfo
/usr/local/lib/python2.7/dist-packages/paramiko/ecdsakey.py:202: CryptographyDeprecationWarning: signer and verifier have been deprecated. Please use sign and verify instead.
  signature, ec.ECDSA(self.ecdsa_curve.hash_object())
/usr/local/lib/python2.7/dist-packages/paramiko/rsakey.py:110: CryptographyDeprecationWarning: signer and verifier have been deprecated. Please use sign and verify instead.
  algorithm=hashes.SHA1(),
[+] Results successfully written to validusers.txt in List form.
root@Kali:~#

Based on the link below it seems that this script needs to be updated.

https://github.com/paramiko/paramiko/issues/1030

root@Kali:~# python --version
Python 2.7.17
root@Kali:~# lsb_release -a
No LSB modules are available.
Distributor ID: Kali
Description:    Kali GNU/Linux Rolling
Release:        2020.1
Codename:       kali-rolling
root@Kali:~#

aenagy avatar Nov 11 '21 22:11 aenagy