Add files via upload

Author: righettod

scripts/generate-report-sshaudit.py

@@ -0,0 +1,121 @@
+#!/usr/bin/env python
+import json
+import colorama
+import sys
+from tabulate import tabulate
+from termcolor import colored
+
+'''
+Quick script to format the result of a scan of "ssh-audit":
+    ssh-audit --json --threads=1 --port=22 [HOST] > report.json
+    python generate-report-sshaudit.py report.json
+
+Dependencies:
+    pip install colorama termcolor tabulate
+
+ssh-audit:
+    https://github.com/jtesta/ssh-audit
+'''
+
+# I expliclty exclude INFO level as I only want to keep the algorithms with errors or warnings
+SEVERITY_COLOR_MAPPING = {"CRITICAL": "red", "FAIL": "red", "WARNING": "light_yellow", "WARN": "light_yellow"}
+SEVERITY_LEVEL_RECOMMANDATIONS = ["critical", "warning"]
+SEVERITY_LEVEL_VALIDATIONS = ["fail", "warn"]
+ALGO_TYPES_MAPPING = {"enc": "Encryption", "kex": "Key Exchange", "key": "Key", "mac": "Message Authentication Code"}
+
+
+def get_color(severity):
+    sev = severity.upper()
+    severity_color = "white"
+    if sev in SEVERITY_COLOR_MAPPING:
+        severity_color = SEVERITY_COLOR_MAPPING[sev]
+    return severity_color
+
+
+def get_action_name(action_code):
+    act_name = "NA"
+    if action_code == "del":
+        act_name = "Remove"
+    elif action_code == "add":
+        act_name = "Add"
+    return act_name
+
+
+def get_algo_notes(algo_json_item):
+    desc_list = []
+    notes = algo_json_item["notes"]
+    for level in SEVERITY_LEVEL_VALIDATIONS:
+        if level in notes:
+            desc = colored(level.capitalize(), get_color(level)) + ": "
+            desc += ", ".join(notes[level])
+            desc += "."
+            desc_list.append(desc)
+    return desc_list
+
+
+def get_table_for_algorithms_by_type(report_json_data):
+    rows = [["Algorithm type", "Algorithm name", "Status"]]
+    for algo_type, algo_label in ALGO_TYPES_MAPPING.items():
+        algos = report_json_data[algo_type]
+        for algo in algos:
+            algo_name = algo["algorithm"]
+            algo_notes = get_algo_notes(algo)
+            # No note indicate that algo is OK
+            if len(algo_notes) > 0:
+                for algo_note in algo_notes:
+                    rows.append([algo_label, algo_name, algo_note])
+    #  No data
+    if len(rows) == 1:
+        rows = None
+    return rows
+
+
+def get_table_for_recommendations(report_json_data):
+    rows = [["Severity", "Algorithm type", "Algorithm name", "Action"]]
+    recommendations_data = report_json_data["recommendations"]
+    if len(recommendations_data) > 0:
+
+        for level in SEVERITY_LEVEL_RECOMMANDATIONS:
+            level_reco_datas = recommendations_data[level]
+            for action_name in level_reco_datas:
+                action_full_name = get_action_name(action_name)
+                action_reco_datas = recommendations_data[level][action_name]
+                for algo_type, algo_label in ALGO_TYPES_MAPPING.items():
+                    if algo_type in action_reco_datas:
+                        algo_reco_datas = action_reco_datas[algo_type]
+                        for algo_reco_data in algo_reco_datas:
+                            algo_name = algo_reco_data["name"]
+                            rows.append([colored(level.capitalize(), get_color(level)), algo_label, algo_name, action_full_name])
+    #  No data
+    if len(rows) == 1:
+        rows = None
+    return rows
+
+
+colorama.init()
+report_file = sys.argv[1]
+with open(report_file, mode="r", encoding="utf-8") as f:
+    report_json_data = json.load(f)
+print(colored("[+] SSH version", "yellow"))
+print(report_json_data["banner"]["raw"])
+print("")
+print(colored("[+] CVE", "yellow"))
+cves = report_json_data["cves"]
+if len(cves) == 0:
+    print("No CVE found.")
+else:
+    print(", ".join(cves))
+print("")
+print(colored("[+] Algorithms with issues", "yellow"))
+table_rows = get_table_for_algorithms_by_type(report_json_data)
+if table_rows is None:
+    print("No issue found.")
+else:
+    print(tabulate(table_rows[1:], headers=table_rows[0], tablefmt="outline", stralign="left"))
+print("")
+print(colored("[+] Recommendations", "yellow"))
+table_rows = get_table_for_recommendations(report_json_data)
+if table_rows is None:
+    print("No recommandation available.")
+else:
+    print(tabulate(table_rows[1:], headers=table_rows[0], tablefmt="outline", stralign="left"))