Commit Graph

  • a8f6c98f89
    make the fork statement clear #58 Alexandre ZANNI 2020-08-15 16:12:43 +0200
  • 3e20f7c622 Fixed optional host key values. Joe Testa 2020-08-12 15:26:18 -0400
  • 1123ac718c Send peer a list of supported algorithms after the banner exchange. Fixes not only the weird case of an ssh-audit client hanging against an ssh-audit server, but perhaps some real-world hangs as well. Joe Testa 2020-08-11 20:11:42 -0400
  • 6d84cfdc31 Updated program return values for various connection error instances and unknown errors. Joe Testa 2020-08-11 19:45:59 -0400
  • c7ad1828d8 Fixed return value processing and mypy warning in algorithm_lookup(). Updated help listing, man page, and README. Joe Testa 2020-08-11 19:28:53 -0400
  • 86cb453928
    Algorithm lookup (#53) thecliguy 2020-08-12 00:02:35 +0100
  • f3b0bb5d8a Removed the use of an error handler from algorithm_lookup and implemented suggestions made by jugmac00 and jtesta #53 Adam Russell 2020-08-01 14:41:25 +0100
  • a7a882d5af Adding ssh-audit.py to algorithm_lookup_branch Adam Russell 2020-07-30 22:55:08 +0100
  • 0c00b37328 Added .deepsource.toml for DeepSource integration. Joe Testa 2020-07-30 12:08:18 -0400
  • 936acfa37d Added more structure to JSON result when policy errors are found. Joe Testa 2020-07-29 12:36:08 -0400
  • b5d7f73125 When an unexpected exit code is returned, print more debugging info. Joe Testa 2020-07-29 12:31:24 -0400
  • 6a7bed06d7 Added two new key exchanges: 'kexAlgoCurve25519SHA256' and 'Curve25519SHA256'. Joe Testa 2020-07-28 21:17:29 -0400
  • 60246a8279 Fixed --json option under Python 3.8 #50 Alex Willmer 2020-07-18 13:41:24 +0100
  • 41e69dd6f2 Alphabetized options in usage message and README. Joe Testa 2020-07-16 12:07:02 -0400
  • 25faeb4c59 Added new man page. Joe Testa 2020-07-16 11:48:35 -0400
  • 8051078524 When a list of targets is provided (-T), skip empty lines. Joe Testa 2020-07-16 10:19:36 -0400
  • cf815a6652 Added hardened OpenSSH policies. Joe Testa 2020-07-15 14:35:18 -0400
  • 2d4eb7da28 Renamed policies to include 'Hardened' in title. Joe Testa 2020-07-15 14:33:10 -0400
  • 68a420ff00 Added policy support for optional host key types, like certificates and smart card-based types. Joe Testa 2020-07-15 14:32:14 -0400
  • 17f5eb0b38 Added -L option to list built-in policies. Joe Testa 2020-07-14 19:38:10 -0400
  • b95969bbc0 Policy output now more clearly prints the policy version. Joe Testa 2020-07-14 17:38:15 -0400
  • 00ce44e728 Added Ubuntu client policies. Joe Testa 2020-07-14 17:18:35 -0400
  • 8fb07edafd Added 'client policy' field in policy files to distinguish server from client policies. Joe Testa 2020-07-14 17:14:47 -0400
  • b27d768c79 Print client IP in output when doing policy audits. Joe Testa 2020-07-14 14:01:08 -0400
  • cb54c2bf33 Moved Windows build instructions to packages directory. Joe Testa 2020-07-14 11:03:35 -0400
  • 85f14720cb Added 3 new host keys: ssh-gost2001, ssh-gost2012-256, and ssh-gost2012-512. Joe Testa 2020-07-14 10:43:18 -0400
  • 1410894f45
    Update description for targets argument (#48) Jürgen Gmach 2020-07-14 16:35:54 +0200
  • df62ac7a25 Update description for targets argument #48 Jürgen Gmach 2020-07-14 06:23:38 +0200
  • 381ba1a660 Now supports a list of targets with -T (#11). Joe Testa 2020-07-13 18:39:05 -0400
  • 8e3f3c6044 Updated PyPI notes. Joe Testa 2020-07-11 12:42:11 -0400
  • f80e3f22ce Now returns -1 when an uncaught exception is found. Joe Testa 2020-07-07 16:31:44 -0400
  • 49bd2c96a8 Added return values for standard scans. Joe Testa 2020-07-07 15:56:37 -0400
  • 103b8fb934 Added official policies for hardened Ubuntu 16.04, 18.04, and 20.04. Joe Testa 2020-07-06 16:16:52 -0400
  • 1faa24ad86 Do not accidentally overwrite policies when creating new policy with -M. Joe Testa 2020-07-06 16:15:26 -0400
  • adc1007d7d Mark 'gss-group1-sha1-' kex as failure due to 1024-bit modulus. Joe Testa 2020-07-04 09:41:46 -0400
  • 8a406dd9d2
    Simplify mypy config (#45) Jürgen Gmach 2020-07-04 15:39:43 +0200
  • 50fb095185 Simplify mypy config #45 Jürgen Gmach 2020-07-04 12:58:30 +0200
  • d717f86238 Added check for use-after-free vulnerability in PuTTY v0.73. Joe Testa 2020-07-03 15:07:34 -0400
  • bf1fbbfa43
    Fix RuntimeError for the JSON export (#44) Jürgen Gmach 2020-07-03 20:56:46 +0200
  • e5f8e0d564 Fix linting error #44 Jürgen Gmach 2020-07-01 23:39:51 +0200
  • e36830c14f Add test case for #41 Jürgen Gmach 2020-07-01 23:26:20 +0200
  • 9b6213f5af Fix RuntimeError for the JSON export Jürgen Gmach 2020-07-01 21:43:36 +0200
  • 282770e698 Added 'ssh-dss-sha256@ssh.com' host key type, 'crypticore128@ssh.com' and 'seed-cbc@ssh.com' ciphers, and 'crypticore-mac@ssh.com' MAC. Joe Testa 2020-07-01 14:32:55 -0400
  • 01ec6b0b37 Removed header processing from policy checks, as this did not function the way users would expect. Joe Testa 2020-07-01 13:12:49 -0400
  • 30f2b7690a Enabled the following mypy options: check_untyped_defs, disallow_untyped_defs, disallow_untyped_calls, disallow_incomplete_defs, disallow_untyped_decorators, disallow_untyped_decorators, strict_equality, and strict. Joe Testa 2020-07-01 13:00:44 -0400
  • cabbe717d3 Added 'diffie-hellman-group1-sha256' kex. Joe Testa 2020-06-30 22:58:28 -0400
  • d5ef967758 Upgraded 1024-bit modulus warning to failure. Joe Testa 2020-06-30 22:51:13 -0400
  • dd44e2f010 Added policy checks (#10). Joe Testa 2020-06-30 15:53:50 -0400
  • 8e71c2d66b Handle case of KexDH.recv_reply() returning None. Joe Testa 2020-06-27 23:59:15 -0400
  • da31c19d38
    Re-enable mypy options (#43) Jürgen Gmach 2020-06-28 05:54:34 +0200
  • a21b182bfa Add type annotation for KexDH.__hostkey_type #43 Jürgen Gmach 2020-06-26 14:59:17 +0200
  • d00a940873 Delete unused variables KexDH.__h_sig and h_sig_len Jürgen Gmach 2020-06-26 14:55:46 +0200
  • c6efceef2f Delete unused variables KexDH.__f and f_len Jürgen Gmach 2020-06-26 14:51:58 +0200
  • 7ca750d926 Add type annotation to KexDH.get_dh_modulus_size Jürgen Gmach 2020-06-26 14:35:28 +0200
  • cdc3ac9a0f Add type annotation for KexGroupExchange.send_init Jürgen Gmach 2020-06-26 14:31:51 +0200
  • 1dd309d712 Add type annotation for KexNISTP521.send_init Jürgen Gmach 2020-06-26 14:30:47 +0200
  • de4b9367d1 Add type annotation for KexNISTP384.send_init Jürgen Gmach 2020-06-26 14:29:52 +0200
  • 55d353eb89 Add type annotation for KexNISTP256.sent_init Jürgen Gmach 2020-06-26 14:28:15 +0200
  • b7c1c30213 Add type annotation to KexCurve25519_SHA256.send_init Jürgen Gmach 2020-06-26 14:26:10 +0200
  • a1972e4954 Add type annotation for KexGroupExchange.__init__ Jürgen Gmach 2020-06-26 14:22:14 +0200
  • 46e771af4d Add type annotataion for KexGroupExchange.send_init_gex Jürgen Gmach 2020-06-26 14:17:00 +0200
  • 0d8d975dc9 Add type annotations to several init methods Jürgen Gmach 2020-06-26 14:10:38 +0200
  • 2c316c0c5e Add type annotation for KexNISTP256.__init__ Jürgen Gmach 2020-06-26 14:08:09 +0200
  • c9f9c823e1 Add type annotation for KexCurve25519_SHA256.__init__ Jürgen Gmach 2020-06-26 14:07:28 +0200
  • 4d2ffab3d4 Add type annotation for KexGroup18_SHA512.__init__ Jürgen Gmach 2020-06-26 14:05:56 +0200
  • e87a4dd8d3 Add type annotation for KexGroup16_SHA512.__init__ Jürgen Gmach 2020-06-26 14:05:05 +0200
  • 2087b4dbdc Add type annotation for KexGroup14_SHA256.__init__ Jürgen Gmach 2020-06-26 14:04:18 +0200
  • d7684025d7 Add type annotation to KexGroup14.__init__ Jürgen Gmach 2020-06-26 13:37:59 +0200
  • a06c9030da Add type annotation for KexDH.__get_bytes Jürgen Gmach 2020-06-26 13:25:49 +0200
  • 1af46443f1 Add type annotation to output_info Jürgen Gmach 2020-06-26 13:19:18 +0200
  • 73bc3168eb Add type annotation for KexDH.get_ca_size Jürgen Gmach 2020-06-26 13:13:52 +0200
  • 2c961a1026 Add annotations for KexDH key size handling Jürgen Gmach 2020-06-26 13:10:42 +0200
  • b3baad9d1c Do not commit breakpoint Jürgen Gmach 2020-06-26 12:52:09 +0200
  • cd94ebb11f Add type annotation for Socket.close Jürgen Gmach 2020-06-26 12:45:25 +0200
  • 85aa1f1180 Add type annotation for Socket.is_connected Jürgen Gmach 2020-06-26 12:44:12 +0200
  • 7688ed77a3 Move comment for is_connected into docstring. Jürgen Gmach 2020-06-26 12:43:17 +0200
  • 345d6d5ad8 Add type annotation to Socket.listen_and_accept Jürgen Gmach 2020-06-26 12:41:13 +0200
  • a9c3905051 Add type annoation for WriteBuf.reset Jürgen Gmach 2020-06-26 12:39:26 +0200
  • 0e000a02bf Add type annotation for ReadBuf.reset Jürgen Gmach 2020-06-26 12:37:28 +0200
  • f3f4387d42 Add type annotation for GexTest.run Jürgen Gmach 2020-06-26 12:36:22 +0200
  • b86ead0eac Add type annotation for GexTest.reconnect Jürgen Gmach 2020-06-26 12:33:21 +0200
  • 88f922cadc Add static typing to HostKeyTest.perform_test Jürgen Gmach 2020-06-26 12:26:13 +0200
  • ac5e5bc532 Add type annotation for HostKeyTest.run Jürgen Gmach 2020-06-26 12:03:08 +0200
  • 566152ef70 Add type annotation for Kex.host_keys Jürgen Gmach 2020-06-26 11:50:56 +0200
  • 282f1bfd07 Add type annotation for Kex.set_host_key Jürgen Gmach 2020-06-26 11:45:26 +0200
  • c99f5ae66f Add type annotation to Kex.dh_modulus_sizes Jürgen Gmach 2020-06-26 11:43:43 +0200
  • 6a42cc7886 Add type annotation for Kex.set_dh_modulus_size Jürgen Gmach 2020-06-26 11:41:09 +0200
  • e2ed79feb0 Add type annotation for Kex.rsa_key_sizes Jürgen Gmach 2020-06-26 11:38:50 +0200
  • dd962a7797 Add type annotation for Kex.set_rsa_key_size Jürgen Gmach 2020-06-26 11:23:26 +0200
  • 85c5eccae6 Add type annotation for KexDH.set_params Jürgen Gmach 2020-06-25 22:48:43 +0200
  • 3ba9d8ee1d Add type annotation for main function Jürgen Gmach 2020-06-25 22:31:44 +0200
  • 3e519f4484 Fix whitespace Jürgen Gmach 2020-06-25 22:27:49 +0200
  • 6aed1bc6f2 Change KexDH.__ed25519_pubkey's default type Jürgen Gmach 2020-06-25 21:26:40 +0200
  • 86d4fe88fa Do not uncomment check_untyped_defs yet Jürgen Gmach 2020-06-25 19:11:44 +0200
  • b689fee117 Fix arguments for Kex initialization Jürgen Gmach 2020-06-25 19:08:07 +0200
  • e1f8481895 Re-enable ignore_missing_imports Jürgen Gmach 2020-06-25 17:52:53 +0200
  • b87b5273bf Re-enable follow_imports Jürgen Gmach 2020-06-25 17:51:14 +0200
  • 2725ff0964 Re-enable disallow_subclassing_any Jürgen Gmach 2020-06-25 17:46:06 +0200
  • 3834001570 Remove warn_incomplete_stub Jürgen Gmach 2020-06-25 17:45:08 +0200
  • e3f3122a3d Re-enable warn_redundant_casts Jürgen Gmach 2020-06-25 17:42:27 +0200