GithubHelp home page GithubHelp logo

salesforce / hassh Goto Github PK

View Code? Open in Web Editor NEW
530.0 27.0 77.0 199 KB

HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.

License: BSD 3-Clause "New" or "Revised" License

Dockerfile 3.82% Python 73.30% Zeek 22.88%

hassh's People

Stargazers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Watchers

avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar

Forkers

0x4d31 justinazoff hmilkovi olivierh59500 raystyle fo0nikens gavz jxt-eden avaudioplayer killvxk nileshph batermj ro9ueadmin adventurepatel marcinantkiewicz lovebair2022 c002 rajivraj b-xiang keyman9848 aisnnu jmeredith16 chungmin99 kaka77 sasqwatch joshuaguild primmus shsingh ozonejunkieau benjeems seclab-int-dev-group rezamt awesome-security botsonar muthhus seabreg 4n6strider modulexcite cnxtech backwardn cheneydc pombredanne lazerhawk docterling ne0ke718 optionalg threatintel-c philhagen wqj111186 blue-infosec xiongzx nexthacker ykankaya 5l1v3r1 jerry-bond rickchen147258 raimundojimenez ninjajc01 ekmixon dankkk200 ericmartin trafgen hackerthinktank dekoder isabella232 s3ancascadia lawrence-davis gr3yr0n1n jrandomsage mclueppers starrysec leexuan exiahan acey9 dmitri131313

hassh's Issues

Bro 2.6 will fix SSH capabilities "is_server" flag

The bug fix at zeek/zeek#191 now allows these workarounds to be updated:

hassh/bro/hassh.bro

Lines 114 to 133 in a9f1854

# bro currently has a bug which it reverses the Client/server flag.
# The following "if" statements reverses this bug. Once the bro bug is patched,
# this logic must return to the proper form.
if ( capabilities$is_server == T ) {
get_hassh(c, capabilities);
c$ssh$hasshVersion = c$hassh$hasshVersion;
c$ssh$hassh = c$hassh$hassh;
# ===> Log Client variables <=== #
# Comment out any fields that are not required to be logged in their raw form to ssh.log
#c$ssh$ckex = c$hassh$ckex;
c$ssh$cshka = c$hassh$cshka;
#c$ssh$ceacts = c$hassh$ceacts;
#c$ssh$cmacts = c$hassh$cmacts;
#c$ssh$ccacts = c$hassh$ccacts;
#c$ssh$clcts = c$hassh$clcts;
c$ssh$hasshAlgorithms = c$hassh$hasshAlgorithms;
}
if ( capabilities$is_server == F ) {

If you want things to keep working with both Bro 2.5.x and 2.6, you should be able to branch on Version::info.

Inventory notification

HASSH has been inventoried on Rawsec's CyberSecurity Inventory.

https://inventory.raw.pm/tools.html#HASSH

What is Rawsec's CyberSecurity Inventory?

An inventory of tools and resources about CyberSecurity. This inventory aims to help people to find everything related to CyberSecurity.

More details about features here.

Note: the inventory is a FLOSS (Free, Libre and Open-Source Software) project.

Why should you care about being inventoried?

Mainly because this is giving visibility to your tool and improve its referencing.

Badges

The badge shows to your community that your are inventoried. It looks good but also shows you care about your project, that your tool is referenced.

Feel free to claim your badge here: http://inventory.raw.pm/features.html#badges, it looks like that Rawsec's CyberSecurity Inventory, but there are several styles available.

Want to thank us?

If you want to thank us, you can help make our open project better known by tweeting about it! For example: Twitter URL

So what?

That's all, this message is just to notify you if you care. Else you can close this issue.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.