search

RUB-NDS / Terrapin-Scanner

This repository contains a simple vulnerability scanner for the Terrapin attack present in the paper "Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation".
https://terrapin-attack.com
Apache License 2.0
931 stars 62 forks source link

Feature: IPv6 compatibility #3

Closed BernhardGruen closed 8 months ago

BernhardGruen commented 8 months ago

If I try to scan an IPv6 address I get the following error message:

panic: dial tcp: address xxxx:xxxx:xxxx:xxxx::2: too many colons in address

The following command lines were tried:

My workaround for the moment: I use jtesta/ssh-audit for these cases. Joe Testa luckily implemented the scan for terrapin into his software.

TrueSkrillor commented 8 months ago

Thanks for the report. This is to be expected given that the socket is always tcp, not tcp6. I try to add support for IPv6 today.

TrueSkrillor commented 8 months ago

v1.1.0 is now available, adding support for IPv6. Note that literal IPv6 addresses must be enclosed by square brackets. This was also one of the problems that you encountered. Happy to hear if the latest release works for you.

BernhardGruen commented 8 months ago

Hey @TrueSkrillor,

Thank you for your fast fix and sorry for the late response. I can confirm that it works as expected using the following command line: terrapin-scanner -connect [xxxx:xxxx:xxxx:xxxx::2]:22 (Port is optional)