Skip to content

Python script to scan for weak CBC ciphers, weak MAC algorithms and support auth methods.

License

Notifications You must be signed in to change notification settings

ivanvza/sshscan

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

12 Commits
 
 
 
 
 
 

Repository files navigation

#SSHscan

This was made to scan for

  • CBC Ciphers
  • MAC Algorithms
  • Kex Algorithms

Future additions:

  • Determine authentication methods.

No other requirements are needed.

##Installation

git clone https://github.com/ivanvza/sshscan.git

##Sample Usage

$ ./sshscan.py

       _____ _____  __  __ _____
      / ___// ___/ / / / // ___/ _____ ____ _ ____   ____   ___   _____
      \__ \ \__ \ / /_/ / \__ \ / ___// __ `// __ \ / __ \ / _ \ / ___/
     ___/ /___/ // __  / ___/ // /__ / /_/ // / / // / / //  __// /
    /____//____//_/ /_/ /____/ \___/ \__,_//_/ /_//_/ /_/ \___//_/
                                                    -@viljoenivan

Usage: sshscan.py -i <IP>

SSH configuration scanner

Options:
  -h, --help            show this help message and exit
  -t TARGET, --target=TARGET
                        The target hostname / IP
  -p PORT, --port=PORT  Port of the SSH
  -v                    Verbose, show all information

##Sample Output

$ ./sshscan.py -t localhost -v

       _____ _____  __  __ _____
      / ___// ___/ / / / // ___/ _____ ____ _ ____   ____   ___   _____
      \__ \ \__ \ / /_/ / \__ \ / ___// __ `// __ \ / __ \ / _ \ / ___/
     ___/ /___/ // __  / ___/ // /__ / /_/ // / / // / / //  __// /
    /____//____//_/ /_/ /____/ \___/ \__,_//_/ /_//_/ /_/ \___//_/
                                                    -@viljoenivan


[Info] Banner: SSH-2.0-OpenSSH_6.2

[Info] Evaluating SSH Ciphers...
  [Weak] 3des-cbc supported
  [Weak] aes128-cbc supported
  [Weak] aes192-cbc supported
  [Weak] aes256-cbc supported
  [Good] aes128-ctr supported
  [Good] aes192-ctr supported
  [Good] aes256-ctr supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] arcfour supported
  [Good] arcfour128 supported
  [Good] arcfour256 supported
  [Weak] blowfish-cbc supported
  [Weak] cast128-cbc supported

[Info] Evaluating SSH MAC Algorithms...
  [Weak] hmac-md5 supported
  [Weak] hmac-md5-96 supported
  [Good] hmac-ripemd160 supported
  [Good] hmac-sha1 supported
  [Weak] hmac-sha1-96 supported
  [Good] hmac-sha2-256 supported
  [Good] hmac-sha2-512 supported
  [Good] umac-64 supported
  [Good] umac-128 supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] [email protected] supported
  [Good] [email protected] supported

[Info] Evaluating SSH KEX Algorithms...
  [Good] diffie-hellman-group1-sha1 supported
  [Good] diffie-hellman-group14-sha1 supported
  [Good] diffie-hellman-group-exchange-sha1 supported
  [Good] diffie-hellman-group-exchange-sha256 supported

About

Python script to scan for weak CBC ciphers, weak MAC algorithms and support auth methods.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages