elie/ssh-audit
1
0
Fork 0
mirror of https://github.com/jtesta/ssh-audit.git synced 2026-05-02 12:56:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • c9a2f2955c Marked host key type 'ssh-rsa' as weak due to practical SHA-1 collisions. Joe Testa 2020-02-08 23:56:54 -05:00
  • 99ae10440b Added new hostkey types for OpenSSH 8.2. Joe Testa 2020-02-08 19:05:36 -05:00
  • 8cafcd4eb5 Added many new algorithms. Joe Testa 2020-02-08 18:44:42 -05:00
  • 262e9b1826 Added *.exe and *.asc to ignore list. Joe Testa 2019-12-25 14:42:17 -05:00
  • 06f868d76f Added timeout of 0 to container stop command. Joe Testa 2019-11-30 23:49:31 -05:00
  • 8e3e8aa423 Updated README regarding Windows builds. Joe Testa 2019-11-30 17:15:54 -05:00
  • 96b6a62f05 Added Windows build instructions and icon. Joe Testa 2019-11-30 16:55:43 -05:00
  • 229a4f2af9 Bumped version number. Joe Testa 2019-11-26 12:13:56 -05:00
  • 5c63f907f7 Updated pypi package description. Joe Testa 2019-11-26 12:13:07 -05:00
  • cba89f70e3 Updated pypi notes. Joe Testa 2019-11-26 12:12:47 -05:00
  • dc36622b50 Bumped version to v2.1.1. v2.1.1 Joe Testa 2019-11-26 11:48:18 -05:00
  • 8e0b83176a Updated ChangeLog. Added link to hardening guide. Joe Testa 2019-11-26 11:47:35 -05:00
  • a16eb2d6cb Added three new PuTTY vulns. Joe Testa 2019-11-18 22:08:17 -05:00
  • 2848c1fb16 Added two new ciphers: 'des', and '3des'. Joe Testa 2019-11-18 20:22:12 -05:00
  • 2cff202b32 Added two new host key types: 'rsa-sha2-256-cert-v01@openssh.com' and 'rsa-sha2-512-cert-v01@openssh.com'. Joe Testa 2019-11-14 16:45:40 -05:00
  • dae92513fd During client tests, client IP is now listed in output. Joe Testa 2019-11-14 13:52:36 -05:00
  • e101e22720 Bumped version number. Joe Testa 2019-11-14 11:07:16 -05:00
  • b3a46e8318 Added pypi notes. Joe Testa 2019-11-14 11:06:05 -05:00
  • 3606863ebf Updated client auditing screen shot. v2.1.0 Joe Testa 2019-11-14 10:15:30 -05:00
  • cf1e069db4 Updated version to 2.1.0. Joe Testa 2019-11-14 08:56:43 -05:00
  • 1e1220807f Updated README with client auditing screen shot and credit for JSON output code. Joe Testa 2019-11-14 08:56:14 -05:00
  • 0263769243 Added JSON output tests to docker testing suite. Joe Testa 2019-11-08 18:40:32 -05:00
  • e6c31ee4f5 Added JSON output to ChangeLog. Joe Testa 2019-11-08 11:10:41 -05:00
  • 14e0ed0e00 Fixed minor whitespace issue. Joe Testa 2019-11-08 11:09:00 -05:00
  • 0f21f2131c Merge pull request #12 from x-way/json_output Joe Testa 2019-11-08 11:06:09 -05:00
  • b6c64d296b Add --json output option Andreas Jaggi 2019-11-07 22:08:09 +01:00
  • 1ec13c653e A timeout can now be specified when auditing client connections. Joe Testa 2019-11-06 20:40:25 -05:00
  • a401afd099 Merged arthepsy/ssh-audit#47 Joe Testa 2019-10-25 11:48:02 -04:00
  • 8a3ae321f1 Added five kex algorithms: gss-gex-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha1-, gss-group14-sha1-toWM5Slw5Ew8Mqkay+al2g==, gss-group14-sha256-toWM5Slw5Ew8Mqkay+al2g==, gss-group15-sha512-toWM5Slw5Ew8Mqkay+al2g==; added four ciphers: idea-cbc, serpent128-cbc, serpent192-cbc, serpent256-cbc; added four MACs: hmac-ripemd, hmac-sha256-96@ssh.com, umac-32@openssh.com, umac-96@openssh.com. Joe Testa 2019-10-25 11:27:22 -04:00
  • e62b548677 Updated info on curve25519-sha256 kex. Joe Testa 2019-10-21 11:50:23 -04:00
  • fd85e247e7 Improved IPv4/IPv6 error handling during client testing. Joe Testa 2019-10-10 23:09:45 -04:00
  • e3a59a3e21 Client auditing feature now supports IPv6. Joe Testa 2019-10-09 22:29:56 -04:00
  • 4ebefdf894 Updated usage message. Joe Testa 2019-10-09 21:12:09 -04:00
  • 83544836c9 Fixed client parsing crash. Joe Testa 2019-10-09 20:57:31 -04:00
  • 4c9b871f5c Removed duplicate MAC. Joe Testa 2019-10-07 11:00:11 -04:00
  • 1d707276d7 Updated README. Joe Testa 2019-10-07 10:59:52 -04:00
  • 166c93ace4 Updated project description to mention client auditing ability. Joe Testa 2019-09-27 18:19:49 -04:00
  • 9759480ae4 Updated ChangeLog. Joe Testa 2019-09-27 18:16:50 -04:00
  • fd3a1f7d41 Added client audit functionality. (#3) Joe Testa 2019-09-27 18:14:36 -04:00
  • 08677d65b1 Added potential fix for additional crash against Sun_SSH. Joe Testa 2019-09-19 22:25:30 -04:00
  • 8c5493ae3e Added 2 key exchanges (ecdh-sha2-1.3.132.0.10, curve448-sha512), 1 host key type (ecdsa-sha2-1.3.132.0.10), and 2 MACs (hmac-sha2-256-96-etm@openssh.com, hmac-sha2-512-96-etm@openssh.com). Joe Testa 2019-09-19 22:19:26 -04:00
  • 14af53cf04 Updated ChangeLog for v2.1.0. Joe Testa 2019-09-19 20:10:37 -04:00
  • bbf6204ce1 Add support for Sun_SSH (on Solaris). Add 'gss-group1-sha1-toWM5Slw5Ew8Mqkay+al2g==' key exchange. Joe Testa 2019-09-19 20:08:10 -04:00
  • 0df63c20ac Updated screen shot. Joe Testa 2019-09-05 18:52:32 -04:00
  • 209bcab427 Added entries to .gitignore. Joe Testa 2019-09-04 15:06:49 -04:00
  • eac81455a9 Added PyPI package support. Joe Testa 2019-09-04 15:05:07 -04:00
  • bce9e2b152 Added new KEX: diffie-hellman-group15-sha256. Joe Testa 2019-09-03 20:41:53 -04:00
  • f5431559ff Bumped version number. Joe Testa 2019-08-29 16:52:38 -04:00
  • 6f60722455 Fixed version number. v2.0.0 Joe Testa 2019-08-29 15:53:35 -04:00
  • f7cbe71aba Updated for v2.0.0 release. Joe Testa 2019-08-29 15:34:19 -04:00
  • c185a25af1 For unrecognized servers, only recommend algorithm changes & removals, not additions (since they can be very inaccurate). Joe Testa 2019-08-28 00:37:55 -04:00
  • 7221413567 Added TinySSH test. Joe Testa 2019-08-27 22:28:24 -04:00
  • 747177c1c7 Added TinySSH support. Fixes #7. Joe Testa 2019-08-27 17:02:03 -04:00
  • 6846b1bf29 Added two KEX algorithms: diffie-hellman-group16-sha256 and diffie-hellman-group-exchange-sha512@ssh.com. Joe Testa 2019-08-26 15:28:37 -04:00
  • af7e2a088c Added hmac-sha512 and hmac-sha512@ssh.com MACs. Added diffie-hellman-group17-sha512 key exchange. Joe Testa 2019-08-26 15:19:49 -04:00
  • 120f898539 Added Dropbear test. Joe Testa 2019-08-26 14:45:31 -04:00
  • 0b034b8226 Marked 3des-ctr as a weak cipher. Joe Testa 2019-08-26 14:44:35 -04:00
  • 4ebccb8068 Added OpenSSH v4.0 test. Joe Testa 2019-08-22 16:48:23 -04:00
  • 4f138d7f82 Added docker testing framework. Joe Testa 2019-08-22 16:04:46 -04:00
  • 7a06b872f9 Fixed automatic links in changelog. Joe Testa 2019-08-22 15:54:14 -04:00
  • 6baff0f8fe Updated changelog for v2.0.0. Joe Testa 2019-08-22 15:49:10 -04:00
  • af663da838 Now SHA256 fingerprints are displayed for RSA and ED25519 host keys. Fixes #2. Joe Testa 2019-08-22 15:47:37 -04:00
  • ed11fc135b When unknown algorithms are encountered, ask the user to report them. Joe Testa 2019-08-18 15:20:16 -04:00
  • afa73d2dd2 Added 1 kex (diffie-hellman-group-exchange-sha256@ssh.com), 3 encryption algs (des-cbc-ssh1, blowfish-ctr, twofish-ctr), and 8 macs (hmac-sha2-56, hmac-sha2-224, hmac-sha2-384, hmac-sha3-256, hmac-sha3-384, hmac-sha3-512, hmac-sha256, hmac-sha256@ssh.com). Joe Testa 2019-08-18 14:38:39 -04:00
  • 64656b5228 Added timeout option to usage message. Joe Testa 2019-08-18 10:03:44 -04:00
  • 99ac875542 Added timeout argument. Joe Testa 2019-08-18 10:03:03 -04:00
  • f9a51d4108 Default interpreter changed to python3. Joe Testa 2019-08-18 00:34:03 -04:00
  • 8527d13343 Added documentation on ALGORITHMS structure. Joe Testa 2019-08-18 00:32:59 -04:00
  • f8fcd119e2 Tagged sntrup4591761x25519-sha512@tinyssh.org as experimental, just as the OpenSSH 8.0 release notes say. Joe Testa 2019-08-18 00:16:42 -04:00
  • 76a4750934 Added support for kex sntrup4591761x25519-sha512@tinyssh.org, introduced in OpenSSH 8.0. Joe Testa 2019-08-18 00:09:40 -04:00
  • 7155efeb4a Added CVEs for Dropbear & libssh. Fixed libssh CVE parsing. Now prints CVEs in red when score is >= 8.0, otherwise they are printed in orange. Joe Testa 2019-08-17 23:11:03 -04:00
  • 41d396f551 Updated version, copyright header, URL, and added Python 2 warning. Joe Testa 2019-08-17 20:59:23 -04:00
  • a9933f9211 Added myself to copyright header in license. Joe Testa 2019-08-16 08:56:50 -04:00
  • b35ca6c6f3 Merged all_my_patches branch to master, since a new project maintainer is needed. Joe Testa 2019-08-16 08:30:45 -04:00
  • f2e6f1a71c Replace getopt.getopt with getopt.gnu_getopt Shaun Hammill 2019-06-05 16:19:33 -04:00
  • f44663bfc4 Fixed Socket.connect() method arguments. Joe Testa 2017-10-31 16:49:19 -04:00
  • 95ca0bb243 Fixed merge collision in connect() method. Joe Testa 2017-10-31 16:40:02 -04:00
  • a9f6b93391 Merge branch 'timeout_arg' into all_my_patches Joe Testa 2017-10-31 16:36:20 -04:00
  • 04973df2af Added command-line option to modify connection/read timeout. Joe Testa 2017-10-29 17:48:04 -04:00
  • a3f126a1dd Added missing algorithms from RFC4250 and RFC4432. Joe Testa 2017-10-11 15:47:01 -04:00
  • 1bb5490e01 Added new algorithms (some as per RFC4344). Joe Testa 2017-10-11 15:13:58 -04:00
  • c1d0540d1e Fixed one more warning. Joe Testa 2017-09-27 22:42:49 -04:00
  • cd80917c62 Fixed more warnings. Joe Testa 2017-09-27 22:36:23 -04:00
  • b7bf8ab38a Suppressed more unused variables warnings. Joe Testa 2017-09-27 22:22:42 -04:00
  • a3c6d16500 Suppressing pylint warnings on unused variables. Joe Testa 2017-09-27 22:14:48 -04:00
  • 4f6e23e568 Fixed send_init() inheritance problems. Now kex failures will try to continue on instead of terminating the program. Joe Testa 2017-09-27 21:27:08 -04:00
  • b2775c9cf9 Python3 fixes. Joe Testa 2017-09-26 20:51:10 -04:00
  • ee5dde1cde Added RSA certificate auditing. Joe Testa 2017-09-26 20:46:00 -04:00
  • 33ae2946ea Syntax fix for Python2. Joe Testa 2017-09-22 15:01:51 -04:00
  • 7c919b093b Added RSA & DH modulus size auditing. Joe Testa 2017-09-21 22:44:34 -04:00
  • d8eb46d766 Correct IPv6 parsing in command-line. Fixes #26. Andris Raugulis 2017-05-05 14:12:45 +03:00
  • 96d442ec62 Test Timeframe repr(). Andris Raugulis 2017-04-11 13:32:38 +03:00
  • 9c463b4e06 Fix lint tox environment. Andris Raugulis 2017-04-10 19:32:40 +03:00
  • 1d1f842bed Refactor output level/colors, fix python:S1845. Andris Raugulis 2017-04-10 19:11:12 +03:00
  • 72a6b9eeaf Refactor and test SSH.Algorithm. Andris Raugulis 2017-04-10 13:20:32 +03:00
  • 774d1c1fe4 Ignore linting long assertion lines. Andris Raugulis 2017-04-10 13:20:02 +03:00
  • 6c8173d409 Fix to_ntext test. Andris Raugulis 2017-04-06 05:27:40 +03:00
  • 21a93cbd66 Condition must be a boolean fixes. Andris Raugulis 2017-04-06 05:27:13 +03:00
  • 0d555d43b3 Condition must be a boolean fixes. Andris Raugulis 2017-04-05 18:12:26 +03:00
  • e4bdabb891 Fix method type and naming. Andris Raugulis 2017-04-05 16:31:43 +03:00