oz9un/sshole
Can I trust it?
Worth a closer look before you use it.
Warnings Check
Very new: it was created yesterday. Wait a little before installing it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change today.
Licence OK
MIT: you can use it for free, also in a commercial product. Keep the licence notice.
Quick checks from public data. They help, but they are no guarantee.
What it is
A proof-of-concept and check script for a password authentication bypass in OpenSSH on musl libc. Accounts with '*' as password can be logged into with any password over 256 characters. Includes a check script, a Docker test setup and an upstream patch.
Who it's for
System administrators and security engineers running OpenSSH on musl-based Linux such as Alpine, OpenWrt or Buildroot
How to use it
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up oz9un/sshole in my project. Follow its README: https://github.com/oz9un/sshole. Explain each step and check it is safe before running anything.
Star curve
Get alerts for repos like this
We'll email you when something in Dev infrastructure starts rising. Free, once a week, only what matches.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/oz9un/sshole?ref=badge)Similar repos
- miilv/ya-station-root-shell
Proof-of-concept chain that uses a publicly compromised eMudhra intermediate CA key to impersonate the configuration backend of Yandex Station Mini 2 and Station Lite smart speakers over the local net
- S12cybersecurity/CredGuardRuntimeShutdown
Proof-of-concept C code that claims to disable Windows Credential Guard at runtime and read NT password hashes from LSASS memory after a test logon. It requires an elevated admin process and includes
- dis0rder0x00/TrustedHive
Proof-of-concept local privilege escalation exploit for Windows 11 and Server 2025 that abuses an ungated method of the TrustedInstaller CBS session COM object, together with NTFS junctions and symbol
- anomalyco/deadbolt
A decentralized password manager written in Rust. Devices sync directly with each other over iroh, and a new device joins only by pairing from one already trusted. It has no accounts and no servers of
- aozorae/EdgeSSH
A self-hosted WebSSH workspace running on Cloudflare Workers, with browser SSH terminal, SFTP file manager, host and key management, server process monitoring, and an HTTP port forwarding preview. Hos
- opentrap/opentrap
A Linux desktop workspace for web application security testing, offering an intercepting proxy with HTTP history, Repeater, Intruder, Collaborator and a scanner built on the OWASP ZAP engine. Distribu