Mailing List Archive: Weak ssh keys

Weak ssh keys

May 14, 2008, 4:00 AM

Post #1 of 4 (3428 views)

Hi All,

Is anyone working on a test for the weak debian/ubuntu ssh keys
yet? It would be a simple modification to ssh_proto_version.nasl
to store the fingerprint in the knowledge base, and another
simple plugin to see if it's in the blacklist.

Cheers

Rich.
--
Richard Moore, Principal Software Engineer,
Westpoint Ltd,
Albion Wharf, 19 Albion Street, Manchester, M1 5LN, England
Tel: +44 161 237 1028
Fax: +44 161 237 1031
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers

Re: Weak ssh keys [ In reply to ]

deraison at nessus

May 14, 2008, 6:03 AM

Post #2 of 4 (3250 views)

Permalink

Hi Richard,

On May 14, 2008, at 1:00 PM, Richard Moore wrote:

> Hi All,
>
> Is anyone working on a test for the weak debian/ubuntu ssh keys
> yet? It would be a simple modification to ssh_proto_version.nasl
> to store the fingerprint in the knowledge base, and another
> simple plugin to see if it's in the blacklist.

We're working on this and should have a plugin soon,

-- Renaud
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers

Re: Weak ssh keys [ In reply to ]

rich at westpoint

May 14, 2008, 6:23 AM

Post #3 of 4 (3242 views)

Permalink

Renaud Deraison wrote:
> We're working on this and should have a plugin soon,

Great, thanks Renaud.

Rich.
--
Richard Moore, Principal Software Engineer,
Westpoint Ltd,
Albion Wharf, 19 Albion Street, Manchester, M1 5LN, England
Tel: +44 161 237 1028
Fax: +44 161 237 1031
_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers

Re: Weak ssh keys [ In reply to ]

deraison at nessus

May 14, 2008, 10:55 PM

Post #4 of 4 (3230 views)

Permalink

Quick followup : plugin#32314 has been pushed into the plugin feed and
checks for weak RSA/DSA SSH keys.

Have a good day,

-- Renaud

On May 14, 2008, at 3:03 PM, Renaud Deraison wrote:

>
>
> Hi Richard,
>
> On May 14, 2008, at 1:00 PM, Richard Moore wrote:
>
>> Hi All,
>>
>> Is anyone working on a test for the weak debian/ubuntu ssh keys
>> yet? It would be a simple modification to ssh_proto_version.nasl
>> to store the fingerprint in the knowledge base, and another
>> simple plugin to see if it's in the blacklist.
>
>
> We're working on this and should have a plugin soon,
>
>
>
> -- Renaud
> _______________________________________________
> Plugins-writers mailing list
> Plugins-writers@list.nessus.org
> http://mail.nessus.org/mailman/listinfo/plugins-writers
>

_______________________________________________
Plugins-writers mailing list
Plugins-writers@list.nessus.org
http://mail.nessus.org/mailman/listinfo/plugins-writers