Skip to content

Listener mode, IP address of connected host is not reported #34

Description

@PSLLSP

I would like to see IP address of client that connected to the scanner in listening mode. IP address is missing in the report:

user@ubuntu:~$ ./Terrapin_Scanner_Linux -listen 0.0.0.0:34567
Listening for incoming client connection on 0.0.0.0:34567
================================================================================
==================================== Report ====================================
================================================================================

Remote Banner: SSH-2.0-OpenSSH_9.5

ChaCha20-Poly1305 support:   true
CBC-EtM support:             false

Strict key exchange support: false

The scanned peer is VULNERABLE to Terrapin.

Note: This tool is provided as is, with no warranty whatsoever. It determines
      the vulnerability of a peer by checking the supported algorithms and
      support for strict key exchange. It may falsely claim a peer to be
      vulnerable if the vendor supports countermeasures other than strict key
      exchange.

For more details visit our website available at https://terrapin-attack.com

IP address is reported when scanner is reporting result in JSON format, it means that scanner knows IP address and can report it in any mode:

user@ubuntu:~$ ./Terrapin_Scanner_Linux -json -listen 0.0.0.0:34567
Listening for incoming client connection on 0.0.0.0:34567
{
    "RemoteAddr": "192.168.32.1:44706",
    "IsServer": false,
    "Banner": "SSH-2.0-OpenSSH_9.5",
    "SupportsChaCha20": true,
    "SupportsCbcEtm": false,
    "SupportsStrictKex": false,
    "Vulnerable": true
}

Version:

user@ubuntu:~$ ./Terrapin_Scanner_Linux -version
Terrapin Vulnerability Scanner v1.1.3

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions