OWASP / Nettacker

Automated Penetration Testing Framework - Open-Source Vulnerability Scanner - Vulnerability Management
https://owasp.org/www-project-nettacker/
Apache License 2.0
3.05k stars 718 forks source link

Detecting open Dropbear server #808

Closed Captain-T2004 closed 3 months ago

Captain-T2004 commented 4 months ago

Checklist

Changes proposed in this pull request

This pull request solves issue #715, Due to internal workings of Paramiko library used to connect to SSH in core_ssh.py, Nettacker was unable to detect an open passwordless SSH server. Adding an exception fixes that problem. But to be on the safe side i have added an empty line to the default passwords list(Nettacker/lib/payloads/passwords/top_1000_common_passwords.txt).

Your development environment