Created
October 22, 2016 11:06
-
-
Save hvardhanx/78fbd5d1f4d16dc323e4f139826f83e4 to your computer and use it in GitHub Desktop.
Extend ssh fingerprints to include DSA
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/* https://www.shodan.io/host/128.104.222.95 */ | |
~/ssh_scan (master ✔) ᐅ ./bin/ssh_scan --suppress-update-status -t 128.104.222.95 | |
I, [2016-10-22T16:32:56.293495 #31222] INFO -- : Started ssh_scan of 128.104.222.95 | |
I, [2016-10-22T16:33:05.999246 #31222] INFO -- : Completed ssh_scan of 128.104.222.95 | |
[ | |
{ | |
"ssh_scan_version": "0.0.15", | |
"ip": "128.104.222.95", | |
"port": 22, | |
"server_banner": "SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.8", | |
"ssh_version": 2.0, | |
"os": "ubuntu", | |
"os_cpe": "o:canonical:ubuntu:14.04", | |
"ssh_lib": "openssh", | |
"ssh_lib_cpe": "a:openssh:openssh:6.6.1p1", | |
"cookie": "f123428e210e8f9e8f33e8ae1ef6beeb", | |
"key_algorithms": [ | |
"[email protected]", | |
"ecdh-sha2-nistp256", | |
"ecdh-sha2-nistp384", | |
"ecdh-sha2-nistp521", | |
"diffie-hellman-group-exchange-sha256", | |
"diffie-hellman-group-exchange-sha1", | |
"diffie-hellman-group14-sha1", | |
"diffie-hellman-group1-sha1" | |
], | |
"server_host_key_algorithms": [ | |
"ssh-rsa", | |
"ssh-dss" | |
], | |
"encryption_algorithms_client_to_server": [ | |
"aes128-ctr", | |
"aes192-ctr", | |
"aes256-ctr", | |
"arcfour256", | |
"arcfour128", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"aes128-cbc", | |
"3des-cbc", | |
"blowfish-cbc", | |
"cast128-cbc", | |
"aes192-cbc", | |
"aes256-cbc", | |
"arcfour", | |
"[email protected]" | |
], | |
"encryption_algorithms_server_to_client": [ | |
"aes128-ctr", | |
"aes192-ctr", | |
"aes256-ctr", | |
"arcfour256", | |
"arcfour128", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"aes128-cbc", | |
"3des-cbc", | |
"blowfish-cbc", | |
"cast128-cbc", | |
"aes192-cbc", | |
"aes256-cbc", | |
"arcfour", | |
"[email protected]" | |
], | |
"mac_algorithms_client_to_server": [ | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"hmac-md5", | |
"hmac-sha1", | |
"[email protected]", | |
"[email protected]", | |
"hmac-sha2-256", | |
"hmac-sha2-512", | |
"hmac-ripemd160", | |
"[email protected]", | |
"hmac-sha1-96", | |
"hmac-md5-96" | |
], | |
"mac_algorithms_server_to_client": [ | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"[email protected]", | |
"hmac-md5", | |
"hmac-sha1", | |
"[email protected]", | |
"[email protected]", | |
"hmac-sha2-256", | |
"hmac-sha2-512", | |
"hmac-ripemd160", | |
"[email protected]", | |
"hmac-sha1-96", | |
"hmac-md5-96" | |
], | |
"compression_algorithms_client_to_server": [ | |
"none", | |
"[email protected]" | |
], | |
"compression_algorithms_server_to_client": [ | |
"none", | |
"[email protected]" | |
], | |
"languages_client_to_server": [ | |
], | |
"languages_server_to_client": [ | |
], | |
"hostname": "", | |
"auth_methods": [ | |
"publickey", | |
"password" | |
], | |
"fingerprints": { | |
"rsa": { | |
"md5": "1f:f4:d6:18:e3:4d:18:04:89:19:af:90:53:dd:90:0b", | |
"sha1": "22:3f:f5:16:ac:34:39:a2:e8:76:6b:06:3d:f1:4e:9c:21:1b:a5:31", | |
"sha256": "fe:8a:07:dd:7e:60:1e:8c:88:15:81:68:97:c4:76:bb:45:e9:c4:c1:a0:9a:5b:d1:ce:73:d8:b2:e0:5d:1a:e5" | |
}, | |
"dsa": { | |
"md5": "26:a8:60:dc:c6:a0:5a:68:7f:3c:59:3c:59:de:13:06", | |
"sha1": "ae:65:0c:e3:0e:89:a7:2c:57:2a:c2:d3:bc:e6:ec:60:03:67:09:c9", | |
"sha256": "f2:ef:66:35:91:db:a2:a9:1b:93:45:55:12:03:1e:a8:fd:16:e1:5c:bc:ef:f1:6a:d8:c5:69:c0:b4:41:07:bc" | |
} | |
}, | |
"start_time": "2016-10-22 16:32:56 +0530", | |
"end_time": "2016-10-22 16:33:05 +0530", | |
"scan_duration_seconds": 9.705549181, | |
"duplicate_host_key_ips": [ | |
], | |
"compliance": { | |
"policy": "Mozilla Modern", | |
"compliant": false, | |
"recommendations": [ | |
"Remove these Key Exchange Algos: diffie-hellman-group-exchange-sha1, diffie-hellman-group14-sha1, diffie-hellman-group1-sha1", | |
"Remove these MAC Algos: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected], hmac-md5, hmac-sha1, [email protected], hmac-ripemd160, [email protected], hmac-sha1-96, hmac-md5-96", | |
"Remove these Encryption Ciphers: arcfour256, arcfour128, aes128-cbc, 3des-cbc, blowfish-cbc, cast128-cbc, aes192-cbc, aes256-cbc, arcfour, [email protected]", | |
"Remove these Authentication Methods: password" | |
], | |
"references": [ | |
"https://wiki.mozilla.org/Security/Guidelines/OpenSSH" | |
] | |
} | |
} | |
] |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment