Joe Testa
2cff202b32
Added two new host key types: 'rsa-sha2-256-cert-v01@openssh.com' and 'rsa-sha2-512-cert-v01@openssh.com'.
2019-11-14 16:45:40 -05:00
Joe Testa
dae92513fd
During client tests, client IP is now listed in output.
2019-11-14 13:52:36 -05:00
Joe Testa
e101e22720
Bumped version number.
2019-11-14 11:07:16 -05:00
Joe Testa
cf1e069db4
Updated version to 2.1.0.
2019-11-14 08:56:43 -05:00
Joe Testa
0263769243
Added JSON output tests to docker testing suite.
2019-11-08 18:40:32 -05:00
Joe Testa
14e0ed0e00
Fixed minor whitespace issue.
2019-11-08 11:09:00 -05:00
Andreas Jaggi
b6c64d296b
Add --json output option
2019-11-07 22:08:09 +01:00
Joe Testa
1ec13c653e
A timeout can now be specified when auditing client connections.
2019-11-06 20:40:25 -05:00
Joe Testa
a401afd099
Merged arthepsy/ssh-audit#47
2019-10-25 11:48:02 -04:00
Joe Testa
8a3ae321f1
Added five kex algorithms: gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha1-, gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha256-toWM5Slw5Ew8Mqkay+al2g==, gss-group15-sha512-toWM5Slw5Ew8Mqkay+al2g==; added four ciphers: idea-cbc, serpent128-cbc, serpent192-cbc, serpent256-cbc; added four MACs: hmac-ripemd, hmac-sha256-96@ssh.com, umac-32@openssh.com, umac-96@openssh.com.
2019-10-25 11:27:22 -04:00
Joe Testa
e62b548677
Updated info on curve25519-sha256 kex.
2019-10-21 11:50:23 -04:00
Joe Testa
fd85e247e7
Improved IPv4/IPv6 error handling during client testing.
2019-10-10 23:09:45 -04:00
Joe Testa
e3a59a3e21
Client auditing feature now supports IPv6.
2019-10-09 22:29:56 -04:00
Joe Testa
4ebefdf894
Updated usage message.
2019-10-09 21:12:09 -04:00
Joe Testa
83544836c9
Fixed client parsing crash.
2019-10-09 20:57:31 -04:00
Joe Testa
4c9b871f5c
Removed duplicate MAC.
2019-10-07 11:00:11 -04:00
Joe Testa
fd3a1f7d41
Added client audit functionality. ( #3 )
2019-09-27 18:14:36 -04:00
Joe Testa
08677d65b1
Added potential fix for additional crash against Sun_SSH.
2019-09-19 22:25:30 -04:00
Joe Testa
8c5493ae3e
Added 2 key exchanges (ecdh-sha2-1.3.132.0.10, curve448-sha512), 1 host key type (ecdsa-sha2-1.3.132.0.10), and 2 MACs (hmac-sha2-256-96-etm@openssh.com, hmac-sha2-512-96-etm@openssh.com).
2019-09-19 22:19:26 -04:00
Joe Testa
bbf6204ce1
Add support for Sun_SSH (on Solaris). Add 'gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==' key exchange.
2019-09-19 20:08:10 -04:00
Joe Testa
eac81455a9
Added PyPI package support.
2019-09-04 15:05:07 -04:00
Joe Testa
bce9e2b152
Added new KEX: diffie-hellman-group15-sha256.
2019-09-03 20:41:53 -04:00
Joe Testa
f5431559ff
Bumped version number.
2019-08-29 16:52:38 -04:00
Joe Testa
6f60722455
Fixed version number.
2019-08-29 15:53:35 -04:00
Joe Testa
c185a25af1
For unrecognized servers, only recommend algorithm changes & removals, not additions (since they can be very inaccurate).
2019-08-28 00:37:55 -04:00
Joe Testa
747177c1c7
Added TinySSH support. Fixes #7 .
2019-08-27 17:02:03 -04:00
Joe Testa
6846b1bf29
Added two KEX algorithms: diffie-hellman-group16-sha256 and diffie-hellman-group-exchange-sha512@ssh.com.
2019-08-26 15:28:37 -04:00
Joe Testa
af7e2a088c
Added hmac-sha512 and hmac-sha512@ssh.com MACs. Added diffie-hellman-group17-sha512 key exchange.
2019-08-26 15:19:49 -04:00
Joe Testa
0b034b8226
Marked 3des-ctr as a weak cipher.
2019-08-26 14:44:35 -04:00
Joe Testa
af663da838
Now SHA256 fingerprints are displayed for RSA and ED25519 host keys. Fixes #2 .
2019-08-22 15:47:37 -04:00
Joe Testa
ed11fc135b
When unknown algorithms are encountered, ask the user to report them.
2019-08-18 15:20:16 -04:00
Joe Testa
afa73d2dd2
Added 1 kex (diffie-hellman-group-exchange-sha256@ssh.com), 3 encryption algs (des-cbc-ssh1, blowfish-ctr, twofish-ctr), and 8 macs (hmac-sha2-56, hmac-sha2-224, hmac-sha2-384, hmac-sha3-256, hmac-sha3-384, hmac-sha3-512, hmac-sha256, hmac-sha256@ssh.com).
2019-08-18 14:38:39 -04:00
Joe Testa
64656b5228
Added timeout option to usage message.
2019-08-18 10:03:44 -04:00
Joe Testa
f9a51d4108
Default interpreter changed to python3.
2019-08-18 00:34:03 -04:00
Joe Testa
8527d13343
Added documentation on ALGORITHMS structure.
2019-08-18 00:32:59 -04:00
Joe Testa
f8fcd119e2
Tagged sntrup4591761x25519-sha512@tinyssh.org as experimental, just as the OpenSSH 8.0 release notes say.
2019-08-18 00:16:42 -04:00
Joe Testa
76a4750934
Added support for kex sntrup4591761x25519-sha512@tinyssh.org, introduced in OpenSSH 8.0.
2019-08-18 00:09:40 -04:00
Joe Testa
7155efeb4a
Added CVEs for Dropbear & libssh. Fixed libssh CVE parsing. Now prints CVEs in red when score is >= 8.0, otherwise they are printed in orange.
2019-08-17 23:11:03 -04:00
Joe Testa
41d396f551
Updated version, copyright header, URL, and added Python 2 warning.
2019-08-17 20:59:23 -04:00
Shaun Hammill
f2e6f1a71c
Replace getopt.getopt with getopt.gnu_getopt
...
Addresses Issue #41 , gnu_getopt allows non-option arguments to be intermingled with option arguments whereas getopt stops processing arguments when a non option is found.
2019-06-05 16:19:33 -04:00
Joe Testa
f44663bfc4
Fixed Socket.connect() method arguments.
2017-10-31 16:49:19 -04:00
Joe Testa
95ca0bb243
Fixed merge collision in connect() method.
2017-10-31 16:40:02 -04:00
Joe Testa
a9f6b93391
Merge branch 'timeout_arg' into all_my_patches
2017-10-31 16:36:20 -04:00
Joe Testa
04973df2af
Added command-line option to modify connection/read timeout.
2017-10-29 17:48:04 -04:00
Joe Testa
a3f126a1dd
Added missing algorithms from RFC4250 and RFC4432.
2017-10-11 15:47:01 -04:00
Joe Testa
1bb5490e01
Added new algorithms (some as per RFC4344).
2017-10-11 15:13:58 -04:00
Joe Testa
c1d0540d1e
Fixed one more warning.
2017-09-27 22:42:49 -04:00
Joe Testa
cd80917c62
Fixed more warnings.
2017-09-27 22:36:23 -04:00
Joe Testa
b7bf8ab38a
Suppressed more unused variables warnings.
2017-09-27 22:22:42 -04:00
Joe Testa
a3c6d16500
Suppressing pylint warnings on unused variables.
2017-09-27 22:14:48 -04:00
