search

RUB-NDS / Terrapin-Scanner

This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".
https://terrapin-attack.com
Apache License 2.0
931 stars 62 forks source link

Feature: Colored status output and machine parseable output #2

Closed carnil closed 8 months ago

carnil commented 8 months ago

Hi

Thanks for providing the Terrapin-Scanner to test against various server and client SSH implementations and kudos for your findings.

I realize this is not really the scope of the tool, but could you consider making the status output (and status indication for the various support) coloured like spectre-meltdown-checker does? And maybe add a machine parseable output format, which e.g. may result in:

Remote Banner: some-banner
ChaCha20-Poly1305 support: true
CBC-EtM support: false
Strict key exchange support: true
Status: NOT VULNERABLE

?