mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-17 22:35:27 +00:00
dc44105baf
* use parsed options while signing * update project layout to v3 * fix .gitignore * remove example template * misc updates * bump tlsx version * hide template sig warning with env * js: retain value while using log * fix nil pointer derefernce * misc doc update --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
115 lines
3.0 KiB
Go
115 lines
3.0 KiB
Go
package ssh
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/protocols/common/protocolstate"
|
|
"github.com/zmap/zgrab2/lib/ssh"
|
|
)
|
|
|
|
// SSHClient is a client for SSH servers.
|
|
//
|
|
// Internally client uses github.com/zmap/zgrab2/lib/ssh driver.
|
|
type SSHClient struct{}
|
|
|
|
// Connect tries to connect to provided host and port
|
|
// with provided username and password with ssh.
|
|
//
|
|
// Returns state of connection and error. If error is not nil,
|
|
// state will be false
|
|
func (c *SSHClient) Connect(host string, port int, username, password string) (bool, error) {
|
|
conn, err := connect(host, port, username, password, "")
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer conn.Close()
|
|
|
|
return true, nil
|
|
}
|
|
|
|
// ConnectWithKey tries to connect to provided host and port
|
|
// with provided username and private_key.
|
|
//
|
|
// Returns state of connection and error. If error is not nil,
|
|
// state will be false
|
|
func (c *SSHClient) ConnectWithKey(host string, port int, username, key string) (bool, error) {
|
|
conn, err := connect(host, port, username, "", key)
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
defer conn.Close()
|
|
|
|
return true, nil
|
|
}
|
|
|
|
// ConnectSSHInfoMode tries to connect to provided host and port
|
|
// with provided host and port
|
|
//
|
|
// Returns HandshakeLog and error. If error is not nil,
|
|
// state will be false
|
|
//
|
|
// HandshakeLog is a struct that contains information about the
|
|
// ssh connection
|
|
func (c *SSHClient) ConnectSSHInfoMode(host string, port int) (*ssh.HandshakeLog, error) {
|
|
return connectSSHInfoMode(host, port)
|
|
}
|
|
|
|
func connectSSHInfoMode(host string, port int) (*ssh.HandshakeLog, error) {
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
// host is not valid according to network policy
|
|
return nil, protocolstate.ErrHostDenied.Msgf(host)
|
|
}
|
|
data := new(ssh.HandshakeLog)
|
|
|
|
sshConfig := ssh.MakeSSHConfig()
|
|
sshConfig.Timeout = 10 * time.Second
|
|
sshConfig.ConnLog = data
|
|
sshConfig.DontAuthenticate = true
|
|
sshConfig.BannerCallback = func(banner string) error {
|
|
data.Banner = strings.TrimSpace(banner)
|
|
return nil
|
|
}
|
|
rhost := fmt.Sprintf("%s:%d", host, port)
|
|
client, err := ssh.Dial("tcp", rhost, sshConfig)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer client.Close()
|
|
|
|
return data, nil
|
|
}
|
|
|
|
func connect(host string, port int, user, password, privateKey string) (*ssh.Client, error) {
|
|
if !protocolstate.IsHostAllowed(host) {
|
|
// host is not valid according to network policy
|
|
return nil, protocolstate.ErrHostDenied.Msgf(host)
|
|
}
|
|
if host == "" || port <= 0 {
|
|
return nil, errors.New("invalid host or port")
|
|
}
|
|
|
|
conf := &ssh.ClientConfig{
|
|
User: user,
|
|
Auth: []ssh.AuthMethod{},
|
|
}
|
|
if len(password) > 0 {
|
|
conf.Auth = append(conf.Auth, ssh.Password(password))
|
|
}
|
|
if len(privateKey) > 0 {
|
|
signer, err := ssh.ParsePrivateKey([]byte(privateKey))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
conf.Auth = append(conf.Auth, ssh.PublicKeys(signer))
|
|
}
|
|
|
|
client, err := ssh.Dial("tcp", fmt.Sprintf("%s:%d", host, port), conf)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return client, nil
|
|
}
|