Skip to content
This repository was archived by the owner on Oct 14, 2020. It is now read-only.

Commit 8f9facf

Browse files
rfelberrfelber
committed
Added ssh_scan specific examples attacking the demo apps
1 parent d2de289 commit 8f9facf

5 files changed

Lines changed: 262 additions & 2 deletions

File tree

‎scanners/ssh_scan/examples/demo-app-ssh/findings.yaml‎

Lines changed: 120 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,120 @@
1+
[
2+
{
3+
"name": "SSH Service",
4+
"description": "SSH Service Information",
5+
"category": "SSH Service",
6+
"osi_layer": "APPLICATION",
7+
"severity": "INFORMATIONAL",
8+
"reference": {},
9+
"hint": "",
10+
"location": "dummy-ssh.demo-apps.svc",
11+
"attributes": {
12+
"hostname": "dummy-ssh.demo-apps.svc",
13+
"ip_address": "10.102.131.102",
14+
"server_banner": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8",
15+
"ssh_version": 2,
16+
"os_cpe": "o:canonical:ubuntu:16.04",
17+
"ssh_lib_cpe": "a:openssh:openssh:7.2p2",
18+
"compliance_policy": "Mozilla Modern",
19+
"compliant": false,
20+
"grade": "D",
21+
"references": [
22+
"https://wiki.mozilla.org/Security/Guidelines/OpenSSH"
23+
],
24+
"auth_methods": [
25+
"publickey",
26+
"password"
27+
],
28+
"key_algorithms": [
29+
"curve25519-sha256@libssh.org",
30+
"ecdh-sha2-nistp256",
31+
"ecdh-sha2-nistp384",
32+
"ecdh-sha2-nistp521",
33+
"diffie-hellman-group-exchange-sha256",
34+
"diffie-hellman-group14-sha1"
35+
],
36+
"encryption_algorithms": [
37+
"chacha20-poly1305@openssh.com",
38+
"aes128-ctr",
39+
"aes192-ctr",
40+
"aes256-ctr",
41+
"aes128-gcm@openssh.com",
42+
"aes256-gcm@openssh.com"
43+
],
44+
"mac_algorithms": [
45+
"umac-64-etm@openssh.com",
46+
"umac-128-etm@openssh.com",
47+
"hmac-sha2-256-etm@openssh.com",
48+
"hmac-sha2-512-etm@openssh.com",
49+
"hmac-sha1-etm@openssh.com",
50+
"umac-64@openssh.com",
51+
"umac-128@openssh.com",
52+
"hmac-sha2-256",
53+
"hmac-sha2-512",
54+
"hmac-sha1"
55+
],
56+
"compression_algorithms": [
57+
"none",
58+
"zlib@openssh.com"
59+
]
60+
},
61+
"id": "17ac9886-d083-4c58-8518-557aa3b38d2d"
62+
},
63+
{
64+
"name": "Insecure SSH Key Algorithms",
65+
"description": "Deprecated / discouraged SSH key algorithms are used",
66+
"category": "SSH Policy Violation",
67+
"osi_layer": "NETWORK",
68+
"severity": "MEDIUM",
69+
"reference": {},
70+
"hint": "Remove these key exchange algorithms: diffie-hellman-group14-sha1",
71+
"location": "dummy-ssh.demo-apps.svc",
72+
"attributes": {
73+
"hostname": "dummy-ssh.demo-apps.svc",
74+
"ip_address": "10.102.131.102",
75+
"payload": [
76+
"diffie-hellman-group14-sha1"
77+
]
78+
},
79+
"id": "650c5ed1-00fb-44e3-933c-515dca4a1eda"
80+
},
81+
{
82+
"name": "Insecure SSH MAC Algorithms",
83+
"description": "Deprecated / discouraged SSH MAC algorithms are used",
84+
"category": "SSH Policy Violation",
85+
"osi_layer": "NETWORK",
86+
"severity": "MEDIUM",
87+
"reference": {},
88+
"hint": "Remove these MAC algorithms: umac-64-etm@openssh.com, hmac-sha1-etm@openssh.com, umac-64@openssh.com, hmac-sha1",
89+
"location": "dummy-ssh.demo-apps.svc",
90+
"attributes": {
91+
"hostname": "dummy-ssh.demo-apps.svc",
92+
"ip_address": "10.102.131.102",
93+
"payload": [
94+
"umac-64-etm@openssh.com",
95+
"hmac-sha1-etm@openssh.com",
96+
"umac-64@openssh.com",
97+
"hmac-sha1"
98+
]
99+
},
100+
"id": "5b681ed0-b509-400b-bb1e-ae839bb1b766"
101+
},
102+
{
103+
"name": "Discouraged SSH authentication methods",
104+
"description": "Discouraged SSH authentication methods are used",
105+
"category": "SSH Policy Violation",
106+
"osi_layer": "NETWORK",
107+
"severity": "MEDIUM",
108+
"reference": {},
109+
"hint": "Remove these authentication methods: password",
110+
"location": "dummy-ssh.demo-apps.svc",
111+
"attributes": {
112+
"hostname": "dummy-ssh.demo-apps.svc",
113+
"ip_address": "10.102.131.102",
114+
"payload": [
115+
"password"
116+
]
117+
},
118+
"id": "4485916d-3747-4c16-a730-a9b1146dd9a2"
119+
}
120+
]

‎scanners/ssh_scan/examples/demo-app-ssh/scan.yaml‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,9 @@
1+
apiVersion: "execution.experimental.securecodebox.io/v1"
2+
kind: Scan
3+
metadata:
4+
name: "ssh-ssh-demo-cluster-internal"
5+
spec:
6+
scanType: "ssh-scan"
7+
parameters:
8+
- "-t"
9+
- "dummy-ssh.demo-apps.svc"

‎scanners/ssh_scan/examples/demo-app-ssh/ssh-scan-results.json‎

Lines changed: 131 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,131 @@
1+
[
2+
{
3+
"ssh_scan_version": "0.0.43",
4+
"ip": "10.102.131.102",
5+
"hostname": "dummy-ssh.demo-apps.svc",
6+
"port": 22,
7+
"server_banner": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8",
8+
"ssh_version": 2.0,
9+
"os": "ubuntu",
10+
"os_cpe": "o:canonical:ubuntu:16.04",
11+
"ssh_lib": "openssh",
12+
"ssh_lib_cpe": "a:openssh:openssh:7.2p2",
13+
"key_algorithms": [
14+
"curve25519-sha256@libssh.org",
15+
"ecdh-sha2-nistp256",
16+
"ecdh-sha2-nistp384",
17+
"ecdh-sha2-nistp521",
18+
"diffie-hellman-group-exchange-sha256",
19+
"diffie-hellman-group14-sha1"
20+
],
21+
"encryption_algorithms_client_to_server": [
22+
"chacha20-poly1305@openssh.com",
23+
"aes128-ctr",
24+
"aes192-ctr",
25+
"aes256-ctr",
26+
"aes128-gcm@openssh.com",
27+
"aes256-gcm@openssh.com"
28+
],
29+
"encryption_algorithms_server_to_client": [
30+
"chacha20-poly1305@openssh.com",
31+
"aes128-ctr",
32+
"aes192-ctr",
33+
"aes256-ctr",
34+
"aes128-gcm@openssh.com",
35+
"aes256-gcm@openssh.com"
36+
],
37+
"mac_algorithms_client_to_server": [
38+
"umac-64-etm@openssh.com",
39+
"umac-128-etm@openssh.com",
40+
"hmac-sha2-256-etm@openssh.com",
41+
"hmac-sha2-512-etm@openssh.com",
42+
"hmac-sha1-etm@openssh.com",
43+
"umac-64@openssh.com",
44+
"umac-128@openssh.com",
45+
"hmac-sha2-256",
46+
"hmac-sha2-512",
47+
"hmac-sha1"
48+
],
49+
"mac_algorithms_server_to_client": [
50+
"umac-64-etm@openssh.com",
51+
"umac-128-etm@openssh.com",
52+
"hmac-sha2-256-etm@openssh.com",
53+
"hmac-sha2-512-etm@openssh.com",
54+
"hmac-sha1-etm@openssh.com",
55+
"umac-64@openssh.com",
56+
"umac-128@openssh.com",
57+
"hmac-sha2-256",
58+
"hmac-sha2-512",
59+
"hmac-sha1"
60+
],
61+
"compression_algorithms_client_to_server": [
62+
"none",
63+
"zlib@openssh.com"
64+
],
65+
"compression_algorithms_server_to_client": [
66+
"none",
67+
"zlib@openssh.com"
68+
],
69+
"languages_client_to_server": [
70+
71+
],
72+
"languages_server_to_client": [
73+
74+
],
75+
"auth_methods": [
76+
"publickey",
77+
"password"
78+
],
79+
"keys": {
80+
"rsa": {
81+
"raw": "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDm2L8IYocSd9gmOCacv/W8rYTloYr3xqOiP65rdu1pqoRkhgdIe4KluDj3dor/cuPwl0W/E3v9eI5HJTJ0WfbPVUzNTDCoX+Fj4g2kdwGQdhePlYjfEBeLxze2cNK5bVP2ngjRAkhgDl9w0oQoFVAi4rpzvyu5xOO/YcmE0hMboQmAL5ckWxZNP3XPrEbxqUUzb1B5QU7oq2D8oh9o8WaLvTplssBH3ut/i7e4Tva2Y6d+lwlB4lep1Tat0sNyn8P5l5acprjA6CM4Dd2bd1mz/1L4hhX4bAx5fhuDGbM1OJvsLiDQx3Eic5q5iCrBFpjTs/4m4W3aLAo1jgXziMGv",
82+
"length": 2048,
83+
"fingerprints": {
84+
"md5": "a5:6f:62:26:81:03:b7:5e:06:48:10:04:79:4b:ac:32",
85+
"sha1": "89:df:39:42:b6:32:b0:0d:99:e0:42:de:29:8f:dc:bf:af:d0:e9:d2",
86+
"sha256": "31:b4:57:fc:28:10:c8:de:bf:a7:cf:d9:8c:e4:6e:ad:f6:89:a8:38:6e:e1:51:08:59:f5:e8:d0:19:f1:68:21"
87+
}
88+
},
89+
"ecdsa-sha2-nistp256": {
90+
"raw": "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBOcE3ozTkDElL4Gdd+phO3+3bNlIG6yU8rLKWWJ9eOlArBJgFkK1lqQnM3Ac4ITwwGBwAhMqlREFQtc8ZIuUMi0=",
91+
"length": 520,
92+
"fingerprints": {
93+
"md5": "f5:fb:82:83:cd:0e:1f:af:2a:45:17:0b:b7:3c:9f:ee",
94+
"sha1": "01:30:c1:d2:7c:21:93:fc:45:7a:90:35:a0:6f:78:fe:d6:20:cc:8c",
95+
"sha256": "a5:af:89:c1:ac:79:b3:28:9e:cd:f2:f6:f6:8e:a3:ea:e6:96:06:82:5e:2b:f2:d9:27:c3:97:53:03:eb:13:90"
96+
}
97+
},
98+
"ed25519": {
99+
"raw": "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIProev4CeCXno/TMpdg0lVlsp19iF2tIB0dkT/Akid2w",
100+
"length": 256,
101+
"fingerprints": {
102+
"md5": "c8:65:6b:d1:59:03:56:21:d9:0f:84:83:ce:ac:40:86",
103+
"sha1": "6d:05:43:94:57:96:c2:70:ff:ed:d3:e6:c0:03:95:a4:7e:58:d2:0c",
104+
"sha256": "78:bc:20:cf:28:ef:ae:9c:03:6c:3a:fe:a4:36:c8:7d:48:65:34:03:41:e0:33:c7:f7:fd:30:d6:f1:9a:f3:b1"
105+
}
106+
}
107+
},
108+
"dns_keys": [
109+
110+
],
111+
"duplicate_host_key_ips": [
112+
113+
],
114+
"compliance": {
115+
"policy": "Mozilla Modern",
116+
"compliant": false,
117+
"recommendations": [
118+
"Remove these key exchange algorithms: diffie-hellman-group14-sha1",
119+
"Remove these MAC algorithms: umac-64-etm@openssh.com, hmac-sha1-etm@openssh.com, umac-64@openssh.com, hmac-sha1",
120+
"Remove these authentication methods: password"
121+
],
122+
"references": [
123+
"https://wiki.mozilla.org/Security/Guidelines/OpenSSH"
124+
],
125+
"grade": "D"
126+
},
127+
"start_time": "2020-06-28 17:55:43 +0000",
128+
"end_time": "2020-06-28 17:55:43 +0000",
129+
"scan_duration_seconds": 0.2357902
130+
}
131+
]

‎scanners/ssh_scan/examples/example.com/scan.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ kind: Scan
33
metadata:
44
name: "ssh-www.example.com"
55
labels:
6-
company: iteratec
6+
company: example
77
spec:
88
scanType: "ssh-scan"
99
parameters:

‎scanners/ssh_scan/examples/localhost/scan.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ kind: Scan
33
metadata:
44
name: "ssh-localhost"
55
labels:
6-
company: iteratec
6+
company: localhost
77
spec:
88
scanType: "ssh-scan"
99
parameters:

0 commit comments

Comments
 (0)