Git/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2024-11-23 11:01:40 +01:00
Code Issues Packages Projects Releases Wiki Activity
675 Commits 1 Branch 16 Tags 6.3 MiB
84647ecb32
Commit Graph

675 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Andris Raugulis
cb19718568 Add SSH1 and SSH2 forcing options. By default, both are allowed. 2016-09-16 14:55:27 +03:00
Andris Raugulis
9030e71892 Initial SSH1 support (packet reading, SMSG_PUBLIC_KEY, CRC32, etc) #6. 2016-09-15 18:00:09 +03:00
Andris Raugulis
d6980242ba Pyython 2.6 compatible bit length. 2016-09-15 15:55:27 +03:00
Andris Raugulis
285d7280eb Implement mpint1 read/write. Optimize mpint writing. Test mpint1. 2016-09-15 06:09:08 +03:00
Andris Raugulis
089d7d597c Implement mpint2 read/write and tests. Refactor (Read|Write)Buf. 2016-09-14 16:33:38 +03:00
Andris Raugulis
bfa9e6f936 Do not hang when remote host closes connection fast. Fix security output. 2016-09-13 13:17:41 +03:00
Andris Raugulis
e3559a76b8 Differentiate between server and client security issues. Ignore client-side. 2016-09-13 13:01:38 +03:00
Andris Raugulis
4479db966a Implement OpenSSH version comparison. 2016-09-13 12:38:05 +03:00
Andris Raugulis
74a1ca08ee Create tests for Dropbear SSH version comparison. 2016-09-12 19:23:27 +03:00
Andris Raugulis
3aaad8b734 Implement specific Dropbear SSH version comparison (e.g., 0.44 vs 0.44test3). 2016-09-12 19:21:57 +03:00
Andris Raugulis
e8fd70a541 Fix Software __repr__. 2016-09-09 17:43:25 +03:00
Andris Raugulis
b11018bd7d Add other security information. Add remote root exploit for Dropbear SSH. 2016-09-08 20:04:48 +03:00
Andris Raugulis
864b5dae85 Bump version. 2016-09-08 19:01:17 +03:00
Andris Raugulis
bdee87c7d3 Do not use padding, when outputting in batch mode. 2016-09-08 19:00:35 +03:00
Andris Raugulis
2747907784 Consistent output for compression. 2016-09-08 18:52:38 +03:00
Andris Raugulis
243e4db74f Create security section. Add CVE for Dropbear SSH. 2016-09-08 18:50:19 +03:00
Andris Raugulis
13d945d8df Fix: Do not hang, while reading banner. 2016-09-08 15:01:57 +03:00
Andris Raugulis
dbcc0f2c4f Do not repeat strings, use constants. Also, encapsulate MSG constants. 2016-09-08 14:55:58 +03:00
Andris Raugulis
71a18e153c Add Prospector (Python Static Analysis) config and run script. 2016-09-08 14:54:40 +03:00
Andris Raugulis
3f6a8eb7ba Specify order for compatibility output. 2016-09-08 14:10:39 +03:00
Andris Raugulis
b8effe1462 Better output for OpenSSH patch-level. 2016-09-08 14:06:36 +03:00
Andris Raugulis
6d402819cb Recognize some Windows SSHd servers. 2016-09-07 19:40:30 +03:00
Andris Raugulis
ac64f87327 Extract software (Dropbear, OpenSSH, HP iLO, Cisco) and OS (NetBSD, FreeBSD) from banner. 2016-09-07 19:26:33 +03:00
Andris Raugulis
d07d5078cb Do not capture unnecessary regex groups. 2016-09-07 19:22:47 +03:00
Andris Raugulis
c68211b8e7 Wait for server banner, before sending client banner (fixes Cisco sshd). 2016-09-07 14:32:40 +03:00
Andris Raugulis
280a37ba20 Protocol is numbers. 2016-09-07 13:00:53 +03:00
Andris Raugulis
2ae93b1934 Reduce multiple protocol prefixed banner. 2016-09-07 12:58:03 +03:00
Andris Raugulis
673b88b2b1 Select the least protocol if banner has double protocol. 2016-09-07 12:22:51 +03:00
Andris Raugulis
19ee986e3d Extract banner and recognize other SSH1 banners (e.g, 1.3-1.5). 2016-09-06 18:55:17 +03:00
Andris Raugulis
f7cd4fd954 Better packet parsing error output (e.g., protocol mismatch). 2016-09-06 15:25:29 +03:00
Andris Raugulis
82a319f0e7 Document changes. 2016-09-02 18:10:16 +03:00
Andris Raugulis
72b0c2e216 Document new arguments. 2016-09-02 18:08:15 +03:00
Andris Raugulis
0a5d66fcde Refactor KexDB. 2016-09-02 17:56:47 +03:00
Andris Raugulis
fba6397721 Multiple style fixes (protector, veryhigh). 2016-09-02 17:22:00 +03:00
Andris Raugulis
c759e53779 Batch implies Verbose. 2016-09-02 16:32:32 +03:00
Andris Raugulis
34ae7d9bec Fix typos. 2016-09-02 16:31:16 +03:00
Andris Raugulis
5189c341f3 Implement new features: minimum output level and batch output. 2016-09-02 16:25:57 +03:00
Andris Raugulis
ef8d727356 Fix compatibility with Python 2.6. Fixes #3. 2016-08-30 15:09:59 +03:00
Andris Raugulis
e8bd764cdb Clarify SSH version compatibility feature. 2016-08-12 16:33:34 +03:00
Andris Raugulis
eb7cb4a36a Release v1.0.20160812. 2016-08-12 16:29:51 +03:00
Andris Raugulis
d4d8c6a659 Parse pre-banner header. Handle sock read/write errors. 2016-08-12 16:20:32 +03:00
Andris Raugulis
07ca434061 Fix Dropbear SSH version typo. 2016-08-12 04:40:13 +03:00
Andris Raugulis
744aec76fb Finish implementing compatibility feature. 
Fix wrong algorithm warning.
Stop on empty packet.
 2016-08-12 04:28:46 +03:00
Andris Raugulis
6df21a9891 Implement compatibility checker (based on returned algorithms). 2016-08-11 19:40:10 +03:00
Andris Raugulis
4ba3485664 More output refactor. 2016-08-11 18:47:27 +03:00
Andris Raugulis
96da1af9ef Refactor result output. 2016-08-11 18:45:14 +03:00
Andris Raugulis
f6b40d63bb Update screenshot. 2016-08-03 17:42:11 +03:00
Andris Raugulis
2c84824378 Update version number. 2016-08-03 17:35:35 +03:00
Andris Raugulis
f82c9825d9 Add new key-exchange algorithms. 
Use OpenSSH 7.3 banner.
 2016-08-03 17:32:46 +03:00
Andris Raugulis
5af8859d6b Add initial code for Diffie-Hellman key exchange. 2016-04-01 18:37:20 +03:00