 Joe Testa
|
d717f86238
|
Added check for use-after-free vulnerability in PuTTY v0.73.
|
2020-07-03 15:07:34 -04:00 |
|
|
Joe Testa
|
282770e698
|
Added 'ssh-dss-sha256@ssh.com' host key type, 'crypticore128@ssh.com' and 'seed-cbc@ssh.com' ciphers, and 'crypticore-mac@ssh.com' MAC.
|
2020-07-01 14:32:55 -04:00 |
|
|
Joe Testa
|
01ec6b0b37
|
Removed header processing from policy checks, as this did not function the way users would expect.
|
2020-07-01 13:12:49 -04:00 |
|
|
Joe Testa
|
30f2b7690a
|
Enabled the following mypy options: check_untyped_defs, disallow_untyped_defs, disallow_untyped_calls, disallow_incomplete_defs, disallow_untyped_decorators, disallow_untyped_decorators, strict_equality, and strict.
|
2020-07-01 13:00:44 -04:00 |
|
|
Joe Testa
|
cabbe717d3
|
Added 'diffie-hellman-group1-sha256' kex.
|
2020-06-30 22:58:28 -04:00 |
|
|
Joe Testa
|
d5ef967758
|
Upgraded 1024-bit modulus warning to failure.
|
2020-06-30 22:51:13 -04:00 |
|
|
Joe Testa
|
dd44e2f010
|
Added policy checks (#10).
|
2020-06-30 15:53:50 -04:00 |
|
|
Joe Testa
|
8e71c2d66b
|
Handle case of KexDH.recv_reply() returning None.
|
2020-06-27 23:59:15 -04:00 |
|
|
Joe Testa
|
d168524a5d
|
Updated README.
|
2020-06-16 23:10:08 -04:00 |
|
|
Joe Testa
|
42fecf83e6
|
Re-enabled test_ssh2_server_simple. Fixes #33.
|
2020-06-13 12:22:59 -04:00 |
|
|
Joe Testa
|
9463aab4f7
|
Disable Python2 tests. Fix pylint warnings.
|
2020-06-13 11:27:01 -04:00 |
|
|
Joe Testa
|
22ac41bfb8
|
Converted tab indents to spaces.
|
2020-06-12 21:01:10 -04:00 |
|
|
Joe Testa
|
bbc4ab542d
|
Added Homebrew installation instructions (#27).
|
2020-05-31 11:44:00 -04:00 |
|
|
Joe Testa
|
edc363db60
|
Suppress recommendation of token host key types.
|
2020-05-31 11:42:06 -04:00 |
|
|
Joe Testa
|
4b314a55ef
|
Added 2 new ciphers: AEAD_AES_128_GCM and AEAD_AES_256_GCM.
|
2020-03-24 14:12:15 -04:00 |
|
|
Joe Testa
|
4ffae85325
|
Added hmac-sha3-224 MAC.
|
2020-03-20 09:16:41 -04:00 |
|
|
Joe Testa
|
2c4fb971cd
|
Added 1 new MAC: chacha20-poly1305@openssh.com.
|
2020-03-20 00:34:04 -04:00 |
|
|
Joe Testa
|
1ac4041c09
|
Added one new host key type (ssh-rsa1) and one new cipher (blowfish).
|
2020-03-18 12:19:05 -04:00 |
|
|
Joe Testa
|
b70f4061cc
|
Added PyPI and snap package info.
|
2020-03-12 23:20:31 -04:00 |
|
|
Joe Testa
|
c3aaf6e2a7
|
Added snap package support.
|
2020-03-12 21:56:23 -04:00 |
|
|
Joe Testa
|
f35c7dbee7
|
Updated PyPI notes.
|
2020-03-11 12:45:28 -04:00 |
|
|
Joe Testa
|
e447c42a79
|
Bumped version to v2.2.0.
|
2020-03-11 11:55:14 -04:00 |
|
|
Joe Testa
|
5292066e66
|
Added new ciphers (camellia128-cbc, camellia128-ctr, camellia192-cbc, camellia192-ctr, camellia256-cbc, camellia256-ctr). Fixed certain algorithms not appearing in the recommendations list (#16).
|
2020-03-10 19:22:15 -04:00 |
|
|
Joe TestaandGitHub
|
c043570879
|
Merge pull request #20 from KiloFoxtrotPapa/fix-lopt-port
Fix long option for port=
|
2020-02-27 10:48:51 -05:00 |
|
|
Joe Testa
|
c9a2f2955c
|
Marked host key type 'ssh-rsa' as weak due to practical SHA-1 collisions.
|
2020-02-08 23:56:54 -05:00 |
|
|
Joe Testa
|
99ae10440b
|
Added new hostkey types for OpenSSH 8.2.
|
2020-02-08 19:05:36 -05:00 |
|
|
Joe Testa
|
8cafcd4eb5
|
Added many new algorithms.
|
2020-02-08 18:44:42 -05:00 |
|
|
Joe Testa
|
262e9b1826
|
Added *.exe and *.asc to ignore list.
|
2019-12-25 14:42:17 -05:00 |
|
|
Joe Testa
|
06f868d76f
|
Added timeout of 0 to container stop command.
|
2019-11-30 23:49:31 -05:00 |
|
|
Joe Testa
|
8e3e8aa423
|
Updated README regarding Windows builds.
|
2019-11-30 17:15:54 -05:00 |
|
|
Joe Testa
|
96b6a62f05
|
Added Windows build instructions and icon.
|
2019-11-30 16:55:43 -05:00 |
|
|
Joe Testa
|
229a4f2af9
|
Bumped version number.
|
2019-11-26 12:13:56 -05:00 |
|
|
Joe Testa
|
5c63f907f7
|
Updated pypi package description.
|
2019-11-26 12:13:07 -05:00 |
|
|
Joe Testa
|
cba89f70e3
|
Updated pypi notes.
|
2019-11-26 12:12:47 -05:00 |
|
|
Joe Testa
|
dc36622b50
|
Bumped version to v2.1.1.
|
2019-11-26 11:48:18 -05:00 |
|
|
Joe Testa
|
8e0b83176a
|
Updated ChangeLog. Added link to hardening guide.
|
2019-11-26 11:47:35 -05:00 |
|
|
Joe Testa
|
a16eb2d6cb
|
Added three new PuTTY vulns.
|
2019-11-18 22:08:17 -05:00 |
|
|
Joe Testa
|
2848c1fb16
|
Added two new ciphers: 'des', and '3des'.
|
2019-11-18 20:22:12 -05:00 |
|
|
Joe Testa
|
2cff202b32
|
Added two new host key types: 'rsa-sha2-256-cert-v01@openssh.com' and 'rsa-sha2-512-cert-v01@openssh.com'.
|
2019-11-14 16:45:40 -05:00 |
|
|
Joe Testa
|
dae92513fd
|
During client tests, client IP is now listed in output.
|
2019-11-14 13:52:36 -05:00 |
|
|
Joe Testa
|
e101e22720
|
Bumped version number.
|
2019-11-14 11:07:16 -05:00 |
|
|
Joe Testa
|
b3a46e8318
|
Added pypi notes.
|
2019-11-14 11:06:05 -05:00 |
|
|
Joe Testa
|
3606863ebf
|
Updated client auditing screen shot.
|
2019-11-14 10:15:30 -05:00 |
|
|
Joe Testa
|
cf1e069db4
|
Updated version to 2.1.0.
|
2019-11-14 08:56:43 -05:00 |
|
|
Joe Testa
|
1e1220807f
|
Updated README with client auditing screen shot and credit for JSON output code.
|
2019-11-14 08:56:14 -05:00 |
|
|
Joe Testa
|
0263769243
|
Added JSON output tests to docker testing suite.
|
2019-11-08 18:40:32 -05:00 |
|
|
Joe Testa
|
e6c31ee4f5
|
Added JSON output to ChangeLog.
|
2019-11-08 11:10:41 -05:00 |
|
|
Joe Testa
|
14e0ed0e00
|
Fixed minor whitespace issue.
|
2019-11-08 11:09:00 -05:00 |
|
|
Joe TestaandGitHub
|
0f21f2131c
|
Merge pull request #12 from x-way/json_output
RFC: JSON output
|
2019-11-08 11:06:09 -05:00 |
|
|
Joe Testa
|
1ec13c653e
|
A timeout can now be specified when auditing client connections.
|
2019-11-06 20:40:25 -05:00 |
|
|
Joe Testa
|
a401afd099
|
Merged arthepsy/ssh-audit#47
|
2019-10-25 11:48:02 -04:00 |
|
|
Joe Testa
|
8a3ae321f1
|
Added five kex algorithms: gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha1-, gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha256-toWM5Slw5Ew8Mqkay+al2g==, gss-group15-sha512-toWM5Slw5Ew8Mqkay+al2g==; added four ciphers: idea-cbc, serpent128-cbc, serpent192-cbc, serpent256-cbc; added four MACs: hmac-ripemd, hmac-sha256-96@ssh.com, umac-32@openssh.com, umac-96@openssh.com.
|
2019-10-25 11:27:22 -04:00 |
|
|
Joe Testa
|
e62b548677
|
Updated info on curve25519-sha256 kex.
|
2019-10-21 11:50:23 -04:00 |
|
|
Joe Testa
|
fd85e247e7
|
Improved IPv4/IPv6 error handling during client testing.
|
2019-10-10 23:09:45 -04:00 |
|
|
Joe Testa
|
e3a59a3e21
|
Client auditing feature now supports IPv6.
|
2019-10-09 22:29:56 -04:00 |
|
|
Joe Testa
|
4ebefdf894
|
Updated usage message.
|
2019-10-09 21:12:09 -04:00 |
|
|
Joe Testa
|
83544836c9
|
Fixed client parsing crash.
|
2019-10-09 20:57:31 -04:00 |
|
|
Joe Testa
|
4c9b871f5c
|
Removed duplicate MAC.
|
2019-10-07 11:00:11 -04:00 |
|
|
Joe Testa
|
1d707276d7
|
Updated README.
|
2019-10-07 10:59:52 -04:00 |
|
|
Joe Testa
|
166c93ace4
|
Updated project description to mention client auditing ability.
|
2019-09-27 18:19:49 -04:00 |
|
|
Joe Testa
|
9759480ae4
|
Updated ChangeLog.
|
2019-09-27 18:16:50 -04:00 |
|
|
Joe Testa
|
fd3a1f7d41
|
Added client audit functionality. (#3)
|
2019-09-27 18:14:36 -04:00 |
|
|
Joe Testa
|
08677d65b1
|
Added potential fix for additional crash against Sun_SSH.
|
2019-09-19 22:25:30 -04:00 |
|
|
Joe Testa
|
8c5493ae3e
|
Added 2 key exchanges (ecdh-sha2-1.3.132.0.10, curve448-sha512), 1 host key type (ecdsa-sha2-1.3.132.0.10), and 2 MACs (hmac-sha2-256-96-etm@openssh.com, hmac-sha2-512-96-etm@openssh.com).
|
2019-09-19 22:19:26 -04:00 |
|
|
Joe Testa
|
14af53cf04
|
Updated ChangeLog for v2.1.0.
|
2019-09-19 20:10:37 -04:00 |
|
|
Joe Testa
|
bbf6204ce1
|
Add support for Sun_SSH (on Solaris). Add 'gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==' key exchange.
|
2019-09-19 20:08:10 -04:00 |
|
|
Joe Testa
|
0df63c20ac
|
Updated screen shot.
|
2019-09-05 18:52:32 -04:00 |
|
|
Joe Testa
|
209bcab427
|
Added entries to .gitignore.
|
2019-09-04 15:06:49 -04:00 |
|
|
Joe Testa
|
eac81455a9
|
Added PyPI package support.
|
2019-09-04 15:05:07 -04:00 |
|
|
Joe Testa
|
bce9e2b152
|
Added new KEX: diffie-hellman-group15-sha256.
|
2019-09-03 20:41:53 -04:00 |
|
|
Joe Testa
|
f5431559ff
|
Bumped version number.
|
2019-08-29 16:52:38 -04:00 |
|
|
Joe Testa
|
6f60722455
|
Fixed version number.
|
2019-08-29 15:53:35 -04:00 |
|
|
Joe Testa
|
f7cbe71aba
|
Updated for v2.0.0 release.
|
2019-08-29 15:34:19 -04:00 |
|
|
Joe Testa
|
c185a25af1
|
For unrecognized servers, only recommend algorithm changes & removals, not additions (since they can be very inaccurate).
|
2019-08-28 00:37:55 -04:00 |
|
|
Joe Testa
|
7221413567
|
Added TinySSH test.
|
2019-08-27 22:28:24 -04:00 |
|
|
Joe Testa
|
747177c1c7
|
Added TinySSH support. Fixes #7.
|
2019-08-27 17:02:03 -04:00 |
|
|
Joe Testa
|
6846b1bf29
|
Added two KEX algorithms: diffie-hellman-group16-sha256 and diffie-hellman-group-exchange-sha512@ssh.com.
|
2019-08-26 15:28:37 -04:00 |
|
|
Joe Testa
|
af7e2a088c
|
Added hmac-sha512 and hmac-sha512@ssh.com MACs. Added diffie-hellman-group17-sha512 key exchange.
|
2019-08-26 15:19:49 -04:00 |
|
|
Joe Testa
|
120f898539
|
Added Dropbear test.
|
2019-08-26 14:45:31 -04:00 |
|
|
Joe Testa
|
0b034b8226
|
Marked 3des-ctr as a weak cipher.
|
2019-08-26 14:44:35 -04:00 |
|
|
Joe Testa
|
4ebccb8068
|
Added OpenSSH v4.0 test.
|
2019-08-22 16:48:23 -04:00 |
|
|
Joe Testa
|
4f138d7f82
|
Added docker testing framework.
|
2019-08-22 16:04:46 -04:00 |
|
|
Joe Testa
|
7a06b872f9
|
Fixed automatic links in changelog.
|
2019-08-22 15:54:14 -04:00 |
|
|
Joe Testa
|
6baff0f8fe
|
Updated changelog for v2.0.0.
|
2019-08-22 15:49:10 -04:00 |
|
|
Joe Testa
|
af663da838
|
Now SHA256 fingerprints are displayed for RSA and ED25519 host keys. Fixes #2.
|
2019-08-22 15:47:37 -04:00 |
|
|
Joe Testa
|
ed11fc135b
|
When unknown algorithms are encountered, ask the user to report them.
|
2019-08-18 15:20:16 -04:00 |
|
|
Joe Testa
|
afa73d2dd2
|
Added 1 kex (diffie-hellman-group-exchange-sha256@ssh.com), 3 encryption algs (des-cbc-ssh1, blowfish-ctr, twofish-ctr), and 8 macs (hmac-sha2-56, hmac-sha2-224, hmac-sha2-384, hmac-sha3-256, hmac-sha3-384, hmac-sha3-512, hmac-sha256, hmac-sha256@ssh.com).
|
2019-08-18 14:38:39 -04:00 |
|
|
Joe Testa
|
64656b5228
|
Added timeout option to usage message.
|
2019-08-18 10:03:44 -04:00 |
|
|
Joe Testa
|
99ac875542
|
Added timeout argument.
|
2019-08-18 10:03:03 -04:00 |
|
|
Joe Testa
|
f9a51d4108
|
Default interpreter changed to python3.
|
2019-08-18 00:34:03 -04:00 |
|
|
Joe Testa
|
8527d13343
|
Added documentation on ALGORITHMS structure.
|
2019-08-18 00:32:59 -04:00 |
|
|
Joe Testa
|
f8fcd119e2
|
Tagged sntrup4591761x25519-sha512@tinyssh.org as experimental, just as the OpenSSH 8.0 release notes say.
|
2019-08-18 00:16:42 -04:00 |
|
|
Joe Testa
|
76a4750934
|
Added support for kex sntrup4591761x25519-sha512@tinyssh.org, introduced in OpenSSH 8.0.
|
2019-08-18 00:09:40 -04:00 |
|
|
Joe Testa
|
7155efeb4a
|
Added CVEs for Dropbear & libssh. Fixed libssh CVE parsing. Now prints CVEs in red when score is >= 8.0, otherwise they are printed in orange.
|
2019-08-17 23:11:03 -04:00 |
|
|
Joe Testa
|
41d396f551
|
Updated version, copyright header, URL, and added Python 2 warning.
|
2019-08-17 20:59:23 -04:00 |
|
|
Joe Testa
|
a9933f9211
|
Added myself to copyright header in license.
|
2019-08-16 08:56:50 -04:00 |
|
|
Joe Testa
|
b35ca6c6f3
|
Merged all_my_patches branch to master, since a new project maintainer is needed.
|
2019-08-16 08:30:45 -04:00 |
|
|
Joe Testa
|
f44663bfc4
|
Fixed Socket.connect() method arguments.
|
2017-10-31 16:49:19 -04:00 |
|
|
Joe Testa
|
95ca0bb243
|
Fixed merge collision in connect() method.
|
2017-10-31 16:40:02 -04:00 |
|
|
Joe Testa
|
a9f6b93391
|
Merge branch 'timeout_arg' into all_my_patches
|
2017-10-31 16:36:20 -04:00 |
|