Skip to content
This repository has been archived by the owner on Nov 28, 2022. It is now read-only.

45233.py multiple CryptographyDeprecationWarning [Kali 2020.1] #211

Closed
aenagy opened this issue Nov 11, 2021 · 1 comment
Closed

45233.py multiple CryptographyDeprecationWarning [Kali 2020.1] #211

aenagy opened this issue Nov 11, 2021 · 1 comment

Comments

@aenagy
Copy link

aenagy commented Nov 11, 2021

Trying to run 45233.py (https://github.com/offensive-security/exploitdb/blob/master/exploits/linux/remote/45233.py) I get get

import paramiko
ImportError: No module named paramiko

So I try 'pip install paramiko' (https://stackoverflow.com/questions/28173520/importerror-no-module-named-paramiko). That generated another error (sorry, not output) which lead me to 'pip install paramiko==2.0.8' (paramiko/paramiko#1314). Then I try again and get:

root@Kali:~# python 45233.py --userList unix_users.txt --outputFile validusers.txt 192.168.1.105
/usr/local/lib/python2.7/dist-packages/paramiko/ecdsakey.py:134: CryptographyDeprecationWarning: Support for unsafe construction of public numbers from encoded data will be removed in a future version. Please use EllipticCurvePublicKey.from_encoded_point
  self.ecdsa_curve.curve_class(), pointinfo
/usr/local/lib/python2.7/dist-packages/paramiko/ecdsakey.py:202: CryptographyDeprecationWarning: signer and verifier have been deprecated. Please use sign and verify instead.
  signature, ec.ECDSA(self.ecdsa_curve.hash_object())
/usr/local/lib/python2.7/dist-packages/paramiko/rsakey.py:110: CryptographyDeprecationWarning: signer and verifier have been deprecated. Please use sign and verify instead.
  algorithm=hashes.SHA1(),
[+] Results successfully written to validusers.txt in List form.
root@Kali:~#

Based on the link below it seems that this script needs to be updated.

paramiko/paramiko#1030

root@Kali:~# python --version
Python 2.7.17
root@Kali:~# lsb_release -a
No LSB modules are available.
Distributor ID: Kali
Description:    Kali GNU/Linux Rolling
Release:        2020.1
Codename:       kali-rolling
root@Kali:~#
@offensive-security
Copy link
Owner

This isn't a place for support for individual exploits - best to contact the original author

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants