ssh-audit

Git/ssh-audit

Fork 0

mirror of https://github.com/jtesta/ssh-audit.git synced 2024-11-24 19:41:40 +01:00

Commit Graph

Select branches

Hide Pull Requests

master

#101

#104

#105

#113

#116

#12

#123

#125

#126

#131

#134

#135

#142

#150

#157

#158

#160

#162

#171

#182

#185

#187

#194

#196

#20

#212

#215

#218

#233

#242

#244

#249

#252

#259

#259

#264

#264

#266

#267

#271

#276

#277

#278

#281

#285

#286

#287

#289

#29

#302

#303

#304

#306

#307

#307

#35

#37

#38

#39

#40

#43

#44

#45

#48

#50

#53

#58

#62

#68

#69

#71

#80

#84

#85

#88

#92

#93

#95

#99

v1.5.0

v1.6.0

v1.7.0

v2.0.0

v2.1.0

v2.1.1

v2.2.0

v2.3.0

v2.3.1

v2.4.0

v2.5.0

v2.9.0

v3.0.0

v3.1.0

v3.2.0

v3.3.0

84549b74f2 Add Travis CI configuration. Andris Raugulis 2016-09-28 16:10:15 +0300
758d839d29 Merge branch 'master' into develop Andris Raugulis 2016-09-27 16:45:11 +0300
f1003ab195 Merge pull request #7 from ProZsolt/patch-1 Andris Raugulis 2016-09-26 00:41:39 +0300
954989c3b7 Fix typo in README.md Zsolt Prontvai 2016-09-24 22:02:39 +0200
7d5f74810b Back to development version. Andris Raugulis 2016-09-20 12:36:14 +0300
e9b9a457dd Release 1.5.0. v1.5.0 Andris Raugulis 2016-09-20 12:26:14 +0300
4dcf1c91cd Bump version. Andris Raugulis 2016-09-17 20:37:48 +0300
3421c8e294 Output fingerprint (defaults to SHA256 format). Andris Raugulis 2016-09-17 20:37:03 +0300
684ea315ec Shorten variables. Andris Raugulis 2016-09-17 20:24:53 +0300
a70b93862a Output SSH1 host-key algorithm. Andris Raugulis 2016-09-17 20:21:18 +0300
b16ef4d040 Add fingerprint support. Andris Raugulis 2016-09-17 20:15:47 +0300
5bc31ea70c Implement SSH1 support (cipher, auth, compatibility, texts, etc) #6. Andris Raugulis 2016-09-17 19:33:03 +0300
fce491767c Signed mpint. Andris Raugulis 2016-09-17 19:23:24 +0300
ddc5ea22f5 Refactor algorithm functions. Andris Raugulis 2016-09-17 05:38:11 +0300
adba0ea08a Refactor timeframe and compatibility functions. Andris Raugulis 2016-09-17 00:58:06 +0300
11ee9ecd05 Fix output compatibility for ssh client. Andris Raugulis 2016-09-17 00:35:33 +0300
a861fe0c8a Since text could be empty or client-only. Andris Raugulis 2016-09-17 00:30:04 +0300
f6a6fb98bc Recognize Allegro Software RomSShell. Andris Raugulis 2016-09-16 16:09:49 +0300
cb19718568 Add SSH1 and SSH2 forcing options. By default, both are allowed. Andris Raugulis 2016-09-16 14:55:27 +0300
9030e71892 Initial SSH1 support (packet reading, SMSG_PUBLIC_KEY, CRC32, etc) #6. Andris Raugulis 2016-09-15 18:00:09 +0300
d6980242ba Pyython 2.6 compatible bit length. Andris Raugulis 2016-09-15 15:52:16 +0300
285d7280eb Implement mpint1 read/write. Optimize mpint writing. Test mpint1. Andris Raugulis 2016-09-15 06:09:08 +0300
089d7d597c Implement mpint2 read/write and tests. Refactor (Read|Write)Buf. Andris Raugulis 2016-09-14 16:33:38 +0300
bfa9e6f936 Do not hang when remote host closes connection fast. Fix security output. Andris Raugulis 2016-09-13 13:17:41 +0300
e3559a76b8 Differentiate between server and client security issues. Ignore client-side. Andris Raugulis 2016-09-13 13:01:38 +0300
4479db966a Implement OpenSSH version comparison. Andris Raugulis 2016-09-13 12:38:05 +0300
74a1ca08ee Create tests for Dropbear SSH version comparison. Andris Raugulis 2016-09-12 19:23:27 +0300
3aaad8b734 Implement specific Dropbear SSH version comparison (e.g., 0.44 vs 0.44test3). Andris Raugulis 2016-09-12 19:21:57 +0300
e8fd70a541 Fix Software __repr__. Andris Raugulis 2016-09-09 17:43:25 +0300
b11018bd7d Add other security information. Add remote root exploit for Dropbear SSH. Andris Raugulis 2016-09-08 20:04:48 +0300
864b5dae85 Bump version. Andris Raugulis 2016-09-08 19:01:17 +0300
bdee87c7d3 Do not use padding, when outputting in batch mode. Andris Raugulis 2016-09-08 19:00:35 +0300
2747907784 Consistent output for compression. Andris Raugulis 2016-09-08 18:52:38 +0300
243e4db74f Create security section. Add CVE for Dropbear SSH. Andris Raugulis 2016-09-08 18:50:19 +0300
13d945d8df Fix: Do not hang, while reading banner. Andris Raugulis 2016-09-08 15:01:57 +0300
dbcc0f2c4f Do not repeat strings, use constants. Also, encapsulate MSG constants. Andris Raugulis 2016-09-08 14:55:58 +0300
71a18e153c Add Prospector (Python Static Analysis) config and run script. Andris Raugulis 2016-09-08 14:54:40 +0300
3f6a8eb7ba Specify order for compatibility output. Andris Raugulis 2016-09-08 14:10:39 +0300
b8effe1462 Better output for OpenSSH patch-level. Andris Raugulis 2016-09-08 14:06:36 +0300
6d402819cb Recognize some Windows SSHd servers. Andris Raugulis 2016-09-07 19:40:30 +0300
ac64f87327 Extract software (Dropbear, OpenSSH, HP iLO, Cisco) and OS (NetBSD, FreeBSD) from banner. Andris Raugulis 2016-09-07 19:26:33 +0300
d07d5078cb Do not capture unnecessary regex groups. Andris Raugulis 2016-09-07 19:22:47 +0300
c68211b8e7 Wait for server banner, before sending client banner (fixes Cisco sshd). Andris Raugulis 2016-09-07 14:32:40 +0300
280a37ba20 Protocol is numbers. Andris Raugulis 2016-09-07 13:00:53 +0300
2ae93b1934 Reduce multiple protocol prefixed banner. Andris Raugulis 2016-09-07 12:58:03 +0300
673b88b2b1 Select the least protocol if banner has double protocol. Andris Raugulis 2016-09-07 12:22:51 +0300
19ee986e3d Extract banner and recognize other SSH1 banners (e.g, 1.3-1.5). Andris Raugulis 2016-09-06 18:55:17 +0300
f7cd4fd954 Better packet parsing error output (e.g., protocol mismatch). Andris Raugulis 2016-09-06 15:25:29 +0300
82a319f0e7 Document changes. Andris Raugulis 2016-09-02 18:10:16 +0300
72b0c2e216 Document new arguments. Andris Raugulis 2016-09-02 18:08:15 +0300
0a5d66fcde Refactor KexDB. Andris Raugulis 2016-09-02 17:56:47 +0300
fba6397721 Multiple style fixes (protector, veryhigh). Andris Raugulis 2016-09-02 17:22:00 +0300
c759e53779 Batch implies Verbose. Andris Raugulis 2016-09-02 16:32:32 +0300
34ae7d9bec Fix typos. Andris Raugulis 2016-09-02 16:31:16 +0300
5189c341f3 Implement new features: minimum output level and batch output. Andris Raugulis 2016-09-02 16:25:57 +0300
ef8d727356 Fix compatibility with Python 2.6. Fixes #3. Andris Raugulis 2016-08-30 15:09:59 +0300
e8bd764cdb Clarify SSH version compatibility feature. Andris Raugulis 2016-08-12 16:33:34 +0300
eb7cb4a36a Release v1.0.20160812. Andris Raugulis 2016-08-12 16:29:51 +0300
d4d8c6a659 Parse pre-banner header. Handle sock read/write errors. Andris Raugulis 2016-08-12 16:20:32 +0300
07ca434061 Fix Dropbear SSH version typo. Andris Raugulis 2016-08-12 04:40:13 +0300
744aec76fb Finish implementing compatibility feature. Fix wrong algorithm warning. Stop on empty packet. Andris Raugulis 2016-08-12 04:28:46 +0300
6df21a9891 Implement compatibility checker (based on returned algorithms). Andris Raugulis 2016-08-11 19:40:10 +0300
4ba3485664 More output refactor. Andris Raugulis 2016-08-11 18:47:27 +0300
96da1af9ef Refactor result output. Andris Raugulis 2016-08-11 18:45:14 +0300
f6b40d63bb Update screenshot. Andris Raugulis 2016-08-03 17:42:11 +0300
2c84824378 Update version number. Andris Raugulis 2016-08-03 17:35:35 +0300
f82c9825d9 Add new key-exchange algorithms. Use OpenSSH 7.3 banner. Andris Raugulis 2016-08-03 17:32:46 +0300
5af8859d6b Add initial code for Diffie-Hellman key exchange. Andris Raugulis 2016-04-01 18:37:20 +0300
926b78889e Add write buffer, implement ssh packet sending. Use shared block size. Andris Raugulis 2016-04-01 18:30:54 +0300
b8201f2550 Add re-entrant banner retrieval method. Andris Raugulis 2016-04-01 18:19:18 +0300
06992d7da6 Refactor ssh connection within class for future improvements. Andris Raugulis 2016-04-01 17:56:06 +0300
8442dfac0e Update ChangeLog. Andris Raugulis 2016-03-07 13:01:57 +0200
d834074378 Use OpenSSH 7.2 banner. Add OpenSSH 7.2 warning messages. Fix OpenSSH 7.0 failure messages. Add forgotten failure on rijndael-cbc. Bump version. Andris Raugulis 2016-03-07 12:58:13 +0200
b074d4a3ce Create thinner screenshot. Andris Raugulis 2016-01-05 18:13:46 +0200
46a0c457a1 Update screenshot. Andris Raugulis 2016-01-05 18:11:31 +0200
466595e403 Document changes. Andris Raugulis 2016-01-05 18:04:49 +0200
6f70e328b2 Add warnings for encryption and MAC. Add none cipher and MAC. Andris Raugulis 2016-01-05 18:02:05 +0200
ca9baf80b8 Fail on unsafe elliptic curves. Andris Raugulis 2016-01-05 17:01:04 +0200
e8fd13e2d8 Add warnings for Kex and Ciphers. Andris Raugulis 2016-01-05 16:58:42 +0200
3b4d96e885 Document changes. Andris Raugulis 2016-01-05 14:14:50 +0200
9d4625d9a0 Version bump. Andris Raugulis 2016-01-05 14:12:03 +0200
122588cb00 Better compression handling. Andris Raugulis 2016-01-05 14:10:48 +0200
c485ffb01e Ensure reading enough data. Andris Raugulis 2016-01-05 14:10:02 +0200
173f3d79de dependency-free Andris Raugulis 2015-12-30 17:01:11 +0200
03690ad151 new release Andris Raugulis 2015-12-30 13:17:58 +0200
716b6acaaa Version bump. Andris Raugulis 2015-12-30 13:09:42 +0200
92e6aabcc8 Add Dropbear SSH historical information. Andris Raugulis 2015-12-30 13:07:50 +0200
f15f7dac23 Add support for dropbear sshd: - send client banner first - use data read in first chunk (buffer data) Andris Raugulis 2015-12-29 17:28:08 +0200
8ac2750cca Remove unused variable. Andris Raugulis 2015-12-23 06:02:20 +0200
6c1f28befd Note compatibility. Andris Raugulis 2015-12-23 05:56:22 +0200
ffe7ff818f Initial readme. Andris Raugulis 2015-12-23 05:52:21 +0200
3fccc44bc7 Import source. Andris Raugulis 2015-12-23 05:01:24 +0200
2ef7e65721 Init project. Andris Raugulis 2015-12-23 04:56:13 +0200