Open jamieleinchen opened 8 months ago
Thanks for the report; I'll dig into this (although I'll have to check if and how I can reproduce this issue). The user "fabian" is my local user and is displayed as I don't strip debug info from the resulting binaries before release. It doesn't affect the tool's execution on your local system.
Okay, I think I have an idea what is causing this issue. As I don't have the switch you mentioned laying around, would you mind providing me two Wireshark captures? One when connecting to your switch via OpenSSH from command line, and the second one when connecting with the tool?
I tried to scan my Cisco Business Switch for the vulnerability.
Client Info
Operating System: Debian GNU/Linux 12 (bookworm) Used binary: Terrapin_Scanner_Linux_amd64 v1.1.1 via
go install github.com/RUB-NDS/Terrapin-Scanner@latest
but similar problem with v1.1.0 on the Release Page Usual SSH Client I use: openssh-client/stable-security,now 1:9.2p1-2+deb12u2 amd64 Switch Connect Method: ~/.ssh/config:Why? It won't connect with just
ssh jamie@yusw1
, you need to specify the support of these keysScanned Device Info
Model: Cisco CBS250-8T-D Firmware Version: 3.3.0.16
Error
v1.1.1 via
go install github.com/RUB-NDS/Terrapin-Scanner@latest
v1.1.0 from Release Page
Comments: I don't have a user "Fabian", seems to be something static? See y'all