 Joe Testa
|
c7ad1828d8
|
Fixed return value processing and mypy warning in algorithm_lookup(). Updated help listing, man page, and README.
|
2020-08-11 19:28:53 -04:00 |
|
|
Joe Testa
|
0c00b37328
|
Added .deepsource.toml for DeepSource integration.
|
2020-07-30 12:08:18 -04:00 |
|
|
Joe Testa
|
936acfa37d
|
Added more structure to JSON result when policy errors are found.
|
2020-07-29 12:36:08 -04:00 |
|
|
Joe Testa
|
b5d7f73125
|
When an unexpected exit code is returned, print more debugging info.
|
2020-07-29 12:31:24 -04:00 |
|
|
Joe Testa
|
6a7bed06d7
|
Added two new key exchanges: 'kexAlgoCurve25519SHA256' and 'Curve25519SHA256'.
|
2020-07-28 21:17:29 -04:00 |
|
|
Joe Testa
|
41e69dd6f2
|
Alphabetized options in usage message and README.
|
2020-07-16 12:07:02 -04:00 |
|
|
Joe Testa
|
25faeb4c59
|
Added new man page.
|
2020-07-16 11:48:35 -04:00 |
|
|
Joe Testa
|
8051078524
|
When a list of targets is provided (-T), skip empty lines.
|
2020-07-16 10:19:36 -04:00 |
|
|
Joe Testa
|
cf815a6652
|
Added hardened OpenSSH policies.
|
2020-07-15 14:35:18 -04:00 |
|
|
Joe Testa
|
2d4eb7da28
|
Renamed policies to include 'Hardened' in title.
|
2020-07-15 14:33:10 -04:00 |
|
|
Joe Testa
|
68a420ff00
|
Added policy support for optional host key types, like certificates and smart card-based types.
|
2020-07-15 14:32:14 -04:00 |
|
|
Joe Testa
|
17f5eb0b38
|
Added -L option to list built-in policies.
|
2020-07-14 19:38:10 -04:00 |
|
|
Joe Testa
|
b95969bbc0
|
Policy output now more clearly prints the policy version.
|
2020-07-14 17:38:15 -04:00 |
|
|
Joe Testa
|
00ce44e728
|
Added Ubuntu client policies.
|
2020-07-14 17:18:35 -04:00 |
|
|
Joe Testa
|
8fb07edafd
|
Added 'client policy' field in policy files to distinguish server from client policies.
|
2020-07-14 17:14:47 -04:00 |
|
|
Joe Testa
|
b27d768c79
|
Print client IP in output when doing policy audits.
|
2020-07-14 14:01:08 -04:00 |
|
|
Joe Testa
|
cb54c2bf33
|
Moved Windows build instructions to packages directory.
|
2020-07-14 11:03:35 -04:00 |
|
|
Joe Testa
|
85f14720cb
|
Added 3 new host keys: ssh-gost2001, ssh-gost2012-256, and ssh-gost2012-512.
|
2020-07-14 10:43:18 -04:00 |
|
|
Joe Testa
|
381ba1a660
|
Now supports a list of targets with -T (#11).
|
2020-07-13 18:39:05 -04:00 |
|
|
Joe Testa
|
8e3f3c6044
|
Updated PyPI notes.
|
2020-07-11 12:42:11 -04:00 |
|
|
Joe Testa
|
f80e3f22ce
|
Now returns -1 when an uncaught exception is found.
|
2020-07-07 16:31:44 -04:00 |
|
|
Joe Testa
|
49bd2c96a8
|
Added return values for standard scans.
|
2020-07-07 15:56:37 -04:00 |
|
|
Joe Testa
|
103b8fb934
|
Added official policies for hardened Ubuntu 16.04, 18.04, and 20.04.
|
2020-07-06 16:16:52 -04:00 |
|
|
Joe Testa
|
1faa24ad86
|
Do not accidentally overwrite policies when creating new policy with -M.
|
2020-07-06 16:15:26 -04:00 |
|
|
Joe Testa
|
adc1007d7d
|
Mark 'gss-group1-sha1-' kex as failure due to 1024-bit modulus.
|
2020-07-04 09:41:46 -04:00 |
|
|
Joe Testa
|
d717f86238
|
Added check for use-after-free vulnerability in PuTTY v0.73.
|
2020-07-03 15:07:34 -04:00 |
|
|
Joe Testa
|
282770e698
|
Added 'ssh-dss-sha256@ssh.com' host key type, 'crypticore128@ssh.com' and 'seed-cbc@ssh.com' ciphers, and 'crypticore-mac@ssh.com' MAC.
|
2020-07-01 14:32:55 -04:00 |
|
|
Joe Testa
|
01ec6b0b37
|
Removed header processing from policy checks, as this did not function the way users would expect.
|
2020-07-01 13:12:49 -04:00 |
|
|
Joe Testa
|
30f2b7690a
|
Enabled the following mypy options: check_untyped_defs, disallow_untyped_defs, disallow_untyped_calls, disallow_incomplete_defs, disallow_untyped_decorators, disallow_untyped_decorators, strict_equality, and strict.
|
2020-07-01 13:00:44 -04:00 |
|
|
Joe Testa
|
cabbe717d3
|
Added 'diffie-hellman-group1-sha256' kex.
|
2020-06-30 22:58:28 -04:00 |
|
|
Joe Testa
|
d5ef967758
|
Upgraded 1024-bit modulus warning to failure.
|
2020-06-30 22:51:13 -04:00 |
|
|
Joe Testa
|
dd44e2f010
|
Added policy checks (#10).
|
2020-06-30 15:53:50 -04:00 |
|
|
Joe Testa
|
8e71c2d66b
|
Handle case of KexDH.recv_reply() returning None.
|
2020-06-27 23:59:15 -04:00 |
|
|
Joe Testa
|
d168524a5d
|
Updated README.
|
2020-06-16 23:10:08 -04:00 |
|
|
Joe Testa
|
42fecf83e6
|
Re-enabled test_ssh2_server_simple. Fixes #33.
|
2020-06-13 12:22:59 -04:00 |
|
|
Joe Testa
|
9463aab4f7
|
Disable Python2 tests. Fix pylint warnings.
|
2020-06-13 11:27:01 -04:00 |
|
|
Joe Testa
|
22ac41bfb8
|
Converted tab indents to spaces.
|
2020-06-12 21:01:10 -04:00 |
|
|
Joe Testa
|
bbc4ab542d
|
Added Homebrew installation instructions (#27).
|
2020-05-31 11:44:00 -04:00 |
|
|
Joe Testa
|
edc363db60
|
Suppress recommendation of token host key types.
|
2020-05-31 11:42:06 -04:00 |
|
|
Joe Testa
|
4b314a55ef
|
Added 2 new ciphers: AEAD_AES_128_GCM and AEAD_AES_256_GCM.
|
2020-03-24 14:12:15 -04:00 |
|
|
Joe Testa
|
4ffae85325
|
Added hmac-sha3-224 MAC.
|
2020-03-20 09:16:41 -04:00 |
|
|
Joe Testa
|
2c4fb971cd
|
Added 1 new MAC: chacha20-poly1305@openssh.com.
|
2020-03-20 00:34:04 -04:00 |
|
|
Joe Testa
|
1ac4041c09
|
Added one new host key type (ssh-rsa1) and one new cipher (blowfish).
|
2020-03-18 12:19:05 -04:00 |
|
|
Joe Testa
|
b70f4061cc
|
Added PyPI and snap package info.
|
2020-03-12 23:20:31 -04:00 |
|
|
Joe Testa
|
c3aaf6e2a7
|
Added snap package support.
|
2020-03-12 21:56:23 -04:00 |
|
|
Joe Testa
|
f35c7dbee7
|
Updated PyPI notes.
|
2020-03-11 12:45:28 -04:00 |
|
|
Joe Testa
|
e447c42a79
|
Bumped version to v2.2.0.
|
2020-03-11 11:55:14 -04:00 |
|
|
Joe Testa
|
5292066e66
|
Added new ciphers (camellia128-cbc, camellia128-ctr, camellia192-cbc, camellia192-ctr, camellia256-cbc, camellia256-ctr). Fixed certain algorithms not appearing in the recommendations list (#16).
|
2020-03-10 19:22:15 -04:00 |
|
|
Joe TestaandGitHub
|
c043570879
|
Merge pull request #20 from KiloFoxtrotPapa/fix-lopt-port
Fix long option for port=
|
2020-02-27 10:48:51 -05:00 |
|
|
Joe Testa
|
c9a2f2955c
|
Marked host key type 'ssh-rsa' as weak due to practical SHA-1 collisions.
|
2020-02-08 23:56:54 -05:00 |
|
|
Joe Testa
|
99ae10440b
|
Added new hostkey types for OpenSSH 8.2.
|
2020-02-08 19:05:36 -05:00 |
|
|
Joe Testa
|
8cafcd4eb5
|
Added many new algorithms.
|
2020-02-08 18:44:42 -05:00 |
|
|
Joe Testa
|
262e9b1826
|
Added *.exe and *.asc to ignore list.
|
2019-12-25 14:42:17 -05:00 |
|
|
Joe Testa
|
06f868d76f
|
Added timeout of 0 to container stop command.
|
2019-11-30 23:49:31 -05:00 |
|
|
Joe Testa
|
8e3e8aa423
|
Updated README regarding Windows builds.
|
2019-11-30 17:15:54 -05:00 |
|
|
Joe Testa
|
96b6a62f05
|
Added Windows build instructions and icon.
|
2019-11-30 16:55:43 -05:00 |
|
|
Joe Testa
|
229a4f2af9
|
Bumped version number.
|
2019-11-26 12:13:56 -05:00 |
|
|
Joe Testa
|
5c63f907f7
|
Updated pypi package description.
|
2019-11-26 12:13:07 -05:00 |
|
|
Joe Testa
|
cba89f70e3
|
Updated pypi notes.
|
2019-11-26 12:12:47 -05:00 |
|
|
Joe Testa
|
dc36622b50
|
Bumped version to v2.1.1.
|
2019-11-26 11:48:18 -05:00 |
|
|
Joe Testa
|
8e0b83176a
|
Updated ChangeLog. Added link to hardening guide.
|
2019-11-26 11:47:35 -05:00 |
|
|
Joe Testa
|
a16eb2d6cb
|
Added three new PuTTY vulns.
|
2019-11-18 22:08:17 -05:00 |
|
|
Joe Testa
|
2848c1fb16
|
Added two new ciphers: 'des', and '3des'.
|
2019-11-18 20:22:12 -05:00 |
|
|
Joe Testa
|
2cff202b32
|
Added two new host key types: 'rsa-sha2-256-cert-v01@openssh.com' and 'rsa-sha2-512-cert-v01@openssh.com'.
|
2019-11-14 16:45:40 -05:00 |
|
|
Joe Testa
|
dae92513fd
|
During client tests, client IP is now listed in output.
|
2019-11-14 13:52:36 -05:00 |
|
|
Joe Testa
|
e101e22720
|
Bumped version number.
|
2019-11-14 11:07:16 -05:00 |
|
|
Joe Testa
|
b3a46e8318
|
Added pypi notes.
|
2019-11-14 11:06:05 -05:00 |
|
|
Joe Testa
|
3606863ebf
|
Updated client auditing screen shot.
|
2019-11-14 10:15:30 -05:00 |
|
|
Joe Testa
|
cf1e069db4
|
Updated version to 2.1.0.
|
2019-11-14 08:56:43 -05:00 |
|
|
Joe Testa
|
1e1220807f
|
Updated README with client auditing screen shot and credit for JSON output code.
|
2019-11-14 08:56:14 -05:00 |
|
|
Joe Testa
|
0263769243
|
Added JSON output tests to docker testing suite.
|
2019-11-08 18:40:32 -05:00 |
|
|
Joe Testa
|
e6c31ee4f5
|
Added JSON output to ChangeLog.
|
2019-11-08 11:10:41 -05:00 |
|
|
Joe Testa
|
14e0ed0e00
|
Fixed minor whitespace issue.
|
2019-11-08 11:09:00 -05:00 |
|
|
Joe TestaandGitHub
|
0f21f2131c
|
Merge pull request #12 from x-way/json_output
RFC: JSON output
|
2019-11-08 11:06:09 -05:00 |
|
|
Joe Testa
|
1ec13c653e
|
A timeout can now be specified when auditing client connections.
|
2019-11-06 20:40:25 -05:00 |
|
|
Joe Testa
|
a401afd099
|
Merged arthepsy/ssh-audit#47
|
2019-10-25 11:48:02 -04:00 |
|
|
Joe Testa
|
8a3ae321f1
|
Added five kex algorithms: gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha1-, gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha256-toWM5Slw5Ew8Mqkay+al2g==, gss-group15-sha512-toWM5Slw5Ew8Mqkay+al2g==; added four ciphers: idea-cbc, serpent128-cbc, serpent192-cbc, serpent256-cbc; added four MACs: hmac-ripemd, hmac-sha256-96@ssh.com, umac-32@openssh.com, umac-96@openssh.com.
|
2019-10-25 11:27:22 -04:00 |
|
|
Joe Testa
|
e62b548677
|
Updated info on curve25519-sha256 kex.
|
2019-10-21 11:50:23 -04:00 |
|
|
Joe Testa
|
fd85e247e7
|
Improved IPv4/IPv6 error handling during client testing.
|
2019-10-10 23:09:45 -04:00 |
|
|
Joe Testa
|
e3a59a3e21
|
Client auditing feature now supports IPv6.
|
2019-10-09 22:29:56 -04:00 |
|
|
Joe Testa
|
4ebefdf894
|
Updated usage message.
|
2019-10-09 21:12:09 -04:00 |
|
|
Joe Testa
|
83544836c9
|
Fixed client parsing crash.
|
2019-10-09 20:57:31 -04:00 |
|
|
Joe Testa
|
4c9b871f5c
|
Removed duplicate MAC.
|
2019-10-07 11:00:11 -04:00 |
|
|
Joe Testa
|
1d707276d7
|
Updated README.
|
2019-10-07 10:59:52 -04:00 |
|
|
Joe Testa
|
166c93ace4
|
Updated project description to mention client auditing ability.
|
2019-09-27 18:19:49 -04:00 |
|
|
Joe Testa
|
9759480ae4
|
Updated ChangeLog.
|
2019-09-27 18:16:50 -04:00 |
|
|
Joe Testa
|
fd3a1f7d41
|
Added client audit functionality. (#3)
|
2019-09-27 18:14:36 -04:00 |
|
|
Joe Testa
|
08677d65b1
|
Added potential fix for additional crash against Sun_SSH.
|
2019-09-19 22:25:30 -04:00 |
|
|
Joe Testa
|
8c5493ae3e
|
Added 2 key exchanges (ecdh-sha2-1.3.132.0.10, curve448-sha512), 1 host key type (ecdsa-sha2-1.3.132.0.10), and 2 MACs (hmac-sha2-256-96-etm@openssh.com, hmac-sha2-512-96-etm@openssh.com).
|
2019-09-19 22:19:26 -04:00 |
|
|
Joe Testa
|
14af53cf04
|
Updated ChangeLog for v2.1.0.
|
2019-09-19 20:10:37 -04:00 |
|
|
Joe Testa
|
bbf6204ce1
|
Add support for Sun_SSH (on Solaris). Add 'gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==' key exchange.
|
2019-09-19 20:08:10 -04:00 |
|
|
Joe Testa
|
0df63c20ac
|
Updated screen shot.
|
2019-09-05 18:52:32 -04:00 |
|
|
Joe Testa
|
209bcab427
|
Added entries to .gitignore.
|
2019-09-04 15:06:49 -04:00 |
|
|
Joe Testa
|
eac81455a9
|
Added PyPI package support.
|
2019-09-04 15:05:07 -04:00 |
|
|
Joe Testa
|
bce9e2b152
|
Added new KEX: diffie-hellman-group15-sha256.
|
2019-09-03 20:41:53 -04:00 |
|
|
Joe Testa
|
f5431559ff
|
Bumped version number.
|
2019-08-29 16:52:38 -04:00 |
|
|
Joe Testa
|
6f60722455
|
Fixed version number.
|
2019-08-29 15:53:35 -04:00 |
|
|
Joe Testa
|
f7cbe71aba
|
Updated for v2.0.0 release.
|
2019-08-29 15:34:19 -04:00 |
|
|
Joe Testa
|
c185a25af1
|
For unrecognized servers, only recommend algorithm changes & removals, not additions (since they can be very inaccurate).
|
2019-08-28 00:37:55 -04:00 |
|
|
Joe Testa
|
7221413567
|
Added TinySSH test.
|
2019-08-27 22:28:24 -04:00 |
|