Documentation ¶
Overview ¶
Package tscanner provides a scanner to validate if an ssh client or server is vulnerable to the Terrapin Attack. See more details at https://terrapin-attack.com.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Report ¶
type Report struct { // Contains the IP address and port of the scanned peer. RemoteAddr string // Indicates whether the scanned host was acting as client or server. IsServer bool // Banner contains the SSH banner of the remote peer. Banner string // SupportsChaCha20 indicates whether the remote peer supports the ChaCha20-Poly1305 cipher. SupportsChaCha20 bool // SupportsCbcEtm indicates whether the remote peer supports CBC ciphers with ETM. SupportsCbcEtm bool // SupportsStrictKex indicates whether the remote peer supports strict key exchange. SupportsStrictKex bool }
Report contains the results of a vulnerability scan.
func Scan ¶
Scan performs a vulnerability scan to check whether the remote peer is likely to be vulnerable against prefix truncation.
func ScanWithTimeout ¶ added in v1.1.2
ScanWithTimeout performs a vulnerability scan with configurable timeout to check whether the remote peer is likely to be vulnerable against prefix truncation.
func (*Report) IsVulnerable ¶
IsVulnerable evaluates whether the report indicates vulnerability to prefix truncation.
func (*Report) MarshalJSON ¶
MarshalJSON marshals the report to JSON.
Click to show internal directories.
Click to hide internal directories.