SSHcan

Scans the entire IPv4 address space for SSH statistics and misconfiguration. Final Project for CYSE 330 at GMU.

Requirements

Linux-based OS with iptables
Masscan
Python 3
PIP 3
PIP dependencies (pip3 install -r requirements.txt)
Custom fork of the Paramiko library (automatically installed with the above command)
GeoLite2-City database saved to this directory. Available from https://dev.maxmind.com/geoip/geoip2/geolite2/

Run the scan.sh script as root to run the masscan program.
Run the processing scripts: python3 main.py <input_file> <output_file> (e.g. python3 main.py masscan_output.txt sshcan_output.json)
Perform data processing on the output file

Name		Name	Last commit message	Last commit date
Latest commit History 56 Commits
.gitignore		.gitignore
README.md		README.md
SSH_CVE.csv		SSH_CVE.csv
__init__.py		__init__.py
blacklist.txt		blacklist.txt
main.py		main.py
requirements.txt		requirements.txt
scan.sh		scan.sh
ssh_algorithms.py		ssh_algorithms.py
ssh_auth_types.py		ssh_auth_types.py
ssh_banner.py		ssh_banner.py
ssh_ciphers.py		ssh_ciphers.py
ssh_ciphers_threaded.py		ssh_ciphers_threaded.py
ssh_cve.py		ssh_cve.py
ssh_host_resolver.py		ssh_host_resolver.py
ssh_masscan_parser.py		ssh_masscan_parser.py
ssh_version.py		ssh_version.py