RUB-NDS / Terrapin-Scanner

This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".
https://terrapin-attack.com
Apache License 2.0
931 stars 62 forks source link

json output not working? #26

Closed UltimateSolar closed 7 months ago

UltimateSolar commented 7 months ago

Hello,

thanks for writing this scanner :)

tried this:

./Terrapin_Scanner_Linux_amd64 -json -connect 127.0.0.1

./Terrapin_Scanner_Linux_amd64 --json -connect 127.0.0.1

./Terrapin_Scanner_Linux_amd64 -connect 127.0.0.1 -json

result is:

flag provided but not defined: -json

TrueSkrillor commented 7 months ago

Can you confirm that you are running the latest version of the scanner? Support for --json (one dash is accepted as well) has been added in v1.1.0. You can check the tool's version using the --version flag. If you get a similar error for this command, you most likely run a pre-v1.1.0 version, as support for this has been added in v1.1.0.

In that case, either update to the lastest Terrapin-Scanner by downloading the corresponding prebuilt binary or running go install -u github.com/RUB-NDS/Terrapin-Scanner@latest. The most recent version is also available as a Docker image.

UltimateSolar commented 7 months ago

yes that was indeed the case.

thanks for fast response :)

wget https://github.com/RUB-NDS/Terrapin-Scanner/releases/download/v1.1.2/Terrapin_Scanner_Linux_amd64

chmod +x ./Terrapin_Scanner_Linux_amd64

./Terrapin_Scanner_Linux_amd64 --version Terrapin Vulnerability Scanner v1.1.2

./Terrapin_Scanner_Linux_amd64 --connect 127.0.0.1 --json { "Banner": "SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2", "SupportsChaCha20": true, "SupportsCbcEtm": false, "SupportsStrictKex": true, "Vulnerable": false }

TrueSkrillor commented 7 months ago

Nice to hear 👍

UltimateSolar commented 7 months ago

not sure HOW ended up with v1.0.3 release...

might be of interest:

https://infosec.exchange/@shadowserver/ https://dashboard.shadowserver.org/statistics/combined/map/?map_type=std&day=2024-01-02&source=ssh&source=ssh6&tag=cve-2023-48795%2B&geo=all&data_set=count&scale=log