Commit Graph

Select branches

Hide Pull Requests

master

#101

#104

#105

#113

#116

#12

#123

#125

#126

#131

#134

#135

#142

#150

#157

#158

#160

#162

#171

#182

#185

#187

#194

#196

#20

#212

#215

#218

#233

#242

#244

#249

#252

#259

#259

#264

#264

#266

#267

#271

#276

#277

#278

#281

#285

#286

#287

#289

#29

#302

#303

#304

#306

#307

#307

#318

#318

#319

#319

#329

#329

#35

#37

#38

#39

#40

#43

#44

#45

#48

#50

#53

#58

#62

#68

#69

#71

#80

#84

#85

#88

#92

#93

#95

#99

v1.5.0

v1.6.0

v1.7.0

v2.0.0

v2.1.0

v2.1.1

v2.2.0

v2.3.0

v2.3.1

v2.4.0

v2.5.0

v2.9.0

v3.0.0

v3.1.0

v3.2.0

v3.3.0

Mono Color

• 6497213900 Fixed docker tests. Joe Testa 2020-10-11 14:41:58 -04:00
• b15664929f
  Improve PyPI packaging (#71) Ganden Schaffner 2020-10-11 18:03:02 +00:00
• 1b0446344c Deleted deepsource config. (#70) Joe Testa 2020-10-01 20:04:54 -04:00
• cd58a6180f
  Remove unused variables (#68) Jürgen Gmach 2020-10-02 01:48:07 +02:00
• ca4ebc56f9 Docker images are now pulled from Dockerhub by default. Joe Testa 2020-10-01 19:42:48 -04:00
• 2a87860e84 Added 1 new cipher: des-cbc@ssh.com. Bumped version. Joe Testa 2020-09-29 15:03:41 -04:00
• 6067da6793 Updated packaging notes and snap build process. Joe Testa 2020-09-29 10:24:36 -04:00
• c8a1db33c8 Fixed pylint warnings regarding bad indendation. Joe Testa 2020-09-28 13:56:39 -04:00
• 32684ddc84 Removed reference to deleted dev branch. Joe Testa 2020-09-28 13:51:18 -04:00
• da4f114b9c Updated Windows build instructions. Joe Testa 2020-09-27 19:32:23 -04:00
• dc0a959402 Use brighter colors on Windows for better readability. Disable unicode characters on Windows since the default terminal does not display them properly. Joe Testa 2020-09-27 19:29:29 -04:00
• eb1588ddc7 Added release date for v2.3.0. Added link for policy tutorial. v2.3.0 Joe Testa 2020-09-27 17:12:10 -04:00
• b7d698d743 Added policy for hardened OpenSSH v8.4. Joe Testa 2020-09-27 17:04:43 -04:00
• b0c00749a6 Improved formatting of usage examples. Added link to web front-end. Joe Testa 2020-09-27 13:24:37 -04:00
• 6e3e8bac74 Added policy audit examples and additional usage examples. Joe Testa 2020-09-27 13:13:38 -04:00
• 632adc076a Policy check output now prints port number, if applicable. Joe Testa 2020-09-27 11:48:15 -04:00
• 13b065b316 Added CONTRIBUTING.md (#54). Joe Testa 2020-09-26 22:06:49 -04:00
• a7581e07dc Added explicit statement regarding fork (#58). Joe Testa 2020-09-26 20:14:29 -04:00
• 4cae6aff43 Added 6 new host key types: 'spi-sign-rsa', 'ssh-ed448', 'x509v3-ecdsa-sha2-nistp256', 'x509v3-ecdsa-sha2-nistp384', 'x509v3-ecdsa-sha2-nistp521', 'x509v3-rsa2048-sha256'. Added 5 new key exchanges: 'gss-group14-sha256-', 'gss-group15-sha512-', 'gss-group16-sha512-', 'gss-nistp256-sha256-', 'gss-curve25519-sha256-'. Joe Testa 2020-09-26 19:32:19 -04:00
• 3e20f7c622 Fixed optional host key values. Joe Testa 2020-08-12 15:26:18 -04:00
• 1123ac718c Send peer a list of supported algorithms after the banner exchange. Fixes not only the weird case of an ssh-audit client hanging against an ssh-audit server, but perhaps some real-world hangs as well. Joe Testa 2020-08-11 20:11:42 -04:00
• 6d84cfdc31 Updated program return values for various connection error instances and unknown errors. Joe Testa 2020-08-11 19:45:59 -04:00
• c7ad1828d8 Fixed return value processing and mypy warning in algorithm_lookup(). Updated help listing, man page, and README. Joe Testa 2020-08-11 19:28:53 -04:00
• 86cb453928
  Algorithm lookup (#53) thecliguy 2020-08-12 00:02:35 +01:00
• 0c00b37328 Added .deepsource.toml for DeepSource integration. Joe Testa 2020-07-30 12:08:18 -04:00
• 936acfa37d Added more structure to JSON result when policy errors are found. Joe Testa 2020-07-29 12:36:08 -04:00
• b5d7f73125 When an unexpected exit code is returned, print more debugging info. Joe Testa 2020-07-29 12:31:24 -04:00
• 6a7bed06d7 Added two new key exchanges: 'kexAlgoCurve25519SHA256' and 'Curve25519SHA256'. Joe Testa 2020-07-28 21:17:29 -04:00
• 41e69dd6f2 Alphabetized options in usage message and README. Joe Testa 2020-07-16 12:07:02 -04:00
• 25faeb4c59 Added new man page. Joe Testa 2020-07-16 11:48:35 -04:00
• 8051078524 When a list of targets is provided (-T), skip empty lines. Joe Testa 2020-07-16 10:19:36 -04:00
• cf815a6652 Added hardened OpenSSH policies. Joe Testa 2020-07-15 14:35:18 -04:00
• 2d4eb7da28 Renamed policies to include 'Hardened' in title. Joe Testa 2020-07-15 14:33:10 -04:00
• 68a420ff00 Added policy support for optional host key types, like certificates and smart card-based types. Joe Testa 2020-07-15 14:32:14 -04:00
• 17f5eb0b38 Added -L option to list built-in policies. Joe Testa 2020-07-14 19:38:10 -04:00
• b95969bbc0 Policy output now more clearly prints the policy version. Joe Testa 2020-07-14 17:38:15 -04:00
• 00ce44e728 Added Ubuntu client policies. Joe Testa 2020-07-14 17:18:35 -04:00
• 8fb07edafd Added 'client policy' field in policy files to distinguish server from client policies. Joe Testa 2020-07-14 17:14:47 -04:00
• b27d768c79 Print client IP in output when doing policy audits. Joe Testa 2020-07-14 14:01:08 -04:00
• cb54c2bf33 Moved Windows build instructions to packages directory. Joe Testa 2020-07-14 11:03:35 -04:00
• 85f14720cb Added 3 new host keys: ssh-gost2001, ssh-gost2012-256, and ssh-gost2012-512. Joe Testa 2020-07-14 10:43:18 -04:00
• 1410894f45
  Update description for targets argument (#48) Jürgen Gmach 2020-07-14 16:35:54 +02:00
• 381ba1a660 Now supports a list of targets with -T (#11). Joe Testa 2020-07-13 18:39:05 -04:00
• 8e3f3c6044 Updated PyPI notes. Joe Testa 2020-07-11 12:42:11 -04:00
• f80e3f22ce Now returns -1 when an uncaught exception is found. Joe Testa 2020-07-07 16:31:44 -04:00
• 49bd2c96a8 Added return values for standard scans. Joe Testa 2020-07-07 15:56:37 -04:00
• 103b8fb934 Added official policies for hardened Ubuntu 16.04, 18.04, and 20.04. Joe Testa 2020-07-06 16:16:52 -04:00
• 1faa24ad86 Do not accidentally overwrite policies when creating new policy with -M. Joe Testa 2020-07-06 16:15:26 -04:00
• adc1007d7d Mark 'gss-group1-sha1-' kex as failure due to 1024-bit modulus. Joe Testa 2020-07-04 09:41:46 -04:00
• 8a406dd9d2
  Simplify mypy config (#45) Jürgen Gmach 2020-07-04 15:39:43 +02:00
• d717f86238 Added check for use-after-free vulnerability in PuTTY v0.73. Joe Testa 2020-07-03 15:07:34 -04:00
• bf1fbbfa43
  Fix RuntimeError for the JSON export (#44) Jürgen Gmach 2020-07-03 20:56:46 +02:00
• 282770e698 Added 'ssh-dss-sha256@ssh.com' host key type, 'crypticore128@ssh.com' and 'seed-cbc@ssh.com' ciphers, and 'crypticore-mac@ssh.com' MAC. Joe Testa 2020-07-01 14:32:55 -04:00
• 01ec6b0b37 Removed header processing from policy checks, as this did not function the way users would expect. Joe Testa 2020-07-01 13:12:49 -04:00
• 30f2b7690a Enabled the following mypy options: check_untyped_defs, disallow_untyped_defs, disallow_untyped_calls, disallow_incomplete_defs, disallow_untyped_decorators, disallow_untyped_decorators, strict_equality, and strict. Joe Testa 2020-07-01 13:00:44 -04:00
• cabbe717d3 Added 'diffie-hellman-group1-sha256' kex. Joe Testa 2020-06-30 22:58:28 -04:00
• d5ef967758 Upgraded 1024-bit modulus warning to failure. Joe Testa 2020-06-30 22:51:13 -04:00
• dd44e2f010 Added policy checks (#10). Joe Testa 2020-06-30 15:53:50 -04:00
• 8e71c2d66b Handle case of KexDH.recv_reply() returning None. Joe Testa 2020-06-27 23:59:15 -04:00
• da31c19d38
  Re-enable mypy options (#43) Jürgen Gmach 2020-06-28 05:54:34 +02:00
• a75be9ab41
  Convert type comments to annotations (#40) Jürgen Gmach 2020-06-26 23:51:08 +02:00
• d168524a5d Updated README. Joe Testa 2020-06-16 23:10:08 -04:00
• 1f48e7c92b
  Fix typing errors (#39) Jürgen Gmach 2020-06-17 04:54:39 +02:00
• 12f811cb5c
  Remove native text converter (#38) Jürgen Gmach 2020-06-17 04:50:07 +02:00
• ec1dda8d7f
  Remove some more Python 2 leftovers (#37) Jürgen Gmach 2020-06-15 23:05:31 +02:00
• 42fecf83e6 Re-enabled test_ssh2_server_simple. Fixes #33. Joe Testa 2020-06-13 12:22:59 -04:00
• 9463aab4f7 Disable Python2 tests. Fix pylint warnings. Joe Testa 2020-06-13 11:27:01 -04:00
• 22ac41bfb8 Converted tab indents to spaces. Joe Testa 2020-06-12 21:01:10 -04:00
• 246a41d46f
  Flake8 fixes (#35) Jürgen Gmach 2020-06-09 23:54:07 +02:00
• 29d874b450
  Fix tox and finally make Travis green (#29) Jürgen Gmach 2020-06-08 22:38:22 +02:00
• bbc4ab542d Added Homebrew installation instructions (#27). Joe Testa 2020-05-31 11:44:00 -04:00
• edc363db60 Suppress recommendation of token host key types. Joe Testa 2020-05-31 11:42:06 -04:00
• 4b314a55ef Added 2 new ciphers: AEAD_AES_128_GCM and AEAD_AES_256_GCM. Joe Testa 2020-03-24 14:12:15 -04:00
• 4ffae85325 Added hmac-sha3-224 MAC. Joe Testa 2020-03-20 09:16:41 -04:00
• 2c4fb971cd Added 1 new MAC: chacha20-poly1305@openssh.com. Joe Testa 2020-03-20 00:34:04 -04:00
• 1ac4041c09 Added one new host key type (ssh-rsa1) and one new cipher (blowfish). Joe Testa 2020-03-18 12:19:05 -04:00
• b70f4061cc Added PyPI and snap package info. Joe Testa 2020-03-12 23:20:31 -04:00
• c3aaf6e2a7 Added snap package support. Joe Testa 2020-03-12 21:56:23 -04:00
• f35c7dbee7 Updated PyPI notes. Joe Testa 2020-03-11 12:45:28 -04:00
• e447c42a79 Bumped version to v2.2.0. v2.2.0 Joe Testa 2020-03-11 11:55:14 -04:00
• 5292066e66 Added new ciphers (camellia128-cbc, camellia128-ctr, camellia192-cbc, camellia192-ctr, camellia256-cbc, camellia256-ctr). Fixed certain algorithms not appearing in the recommendations list (#16). Joe Testa 2020-03-10 19:22:15 -04:00
• c043570879
  Merge pull request #20 from KiloFoxtrotPapa/fix-lopt-port Joe Testa 2020-02-27 10:48:51 -05:00
• a04c96c5b2 Fix long option for port= kfp 2020-02-21 22:21:54 -08:00
• c9a2f2955c Marked host key type 'ssh-rsa' as weak due to practical SHA-1 collisions. Joe Testa 2020-02-08 23:56:54 -05:00
• 99ae10440b Added new hostkey types for OpenSSH 8.2. Joe Testa 2020-02-08 19:05:36 -05:00
• 8cafcd4eb5 Added many new algorithms. Joe Testa 2020-02-08 18:44:42 -05:00
• 262e9b1826 Added *.exe and *.asc to ignore list. Joe Testa 2019-12-25 14:42:17 -05:00
• 06f868d76f Added timeout of 0 to container stop command. Joe Testa 2019-11-30 23:49:31 -05:00
• 8e3e8aa423 Updated README regarding Windows builds. Joe Testa 2019-11-30 17:15:54 -05:00
• 96b6a62f05 Added Windows build instructions and icon. Joe Testa 2019-11-30 16:55:43 -05:00
• 229a4f2af9 Bumped version number. Joe Testa 2019-11-26 12:13:56 -05:00
• 5c63f907f7 Updated pypi package description. Joe Testa 2019-11-26 12:13:07 -05:00
• cba89f70e3 Updated pypi notes. Joe Testa 2019-11-26 12:12:47 -05:00
• dc36622b50 Bumped version to v2.1.1. v2.1.1 Joe Testa 2019-11-26 11:48:18 -05:00
• 8e0b83176a Updated ChangeLog. Added link to hardening guide. Joe Testa 2019-11-26 11:47:35 -05:00
• a16eb2d6cb Added three new PuTTY vulns. Joe Testa 2019-11-18 22:08:17 -05:00
• 2848c1fb16 Added two new ciphers: 'des', and '3des'. Joe Testa 2019-11-18 20:22:12 -05:00
• 2cff202b32 Added two new host key types: 'rsa-sha2-256-cert-v01@openssh.com' and 'rsa-sha2-512-cert-v01@openssh.com'. Joe Testa 2019-11-14 16:45:40 -05:00
• dae92513fd During client tests, client IP is now listed in output. Joe Testa 2019-11-14 13:52:36 -05:00
• e101e22720 Bumped version number. Joe Testa 2019-11-14 11:07:16 -05:00