Security/Automation/Winter Of Security 2016: Difference between revisions

=== ssh_scan: Improving Scalability and Feature Set ===

This project would work on improving the scalability and feature set of ssh_scan, a tool for scanning for ssh policy and compliance (mainly attributes found here https://github.com/claudijd/ssh_scan/blob/master/examples/192.168.1.1.json).  This tool is currently open-sourced as more of a prototype tool here (https://github.com/claudijd/ssh_scan).  Current feature gaps include the ability to detect the types of authentication (password/key-based/auth), nmap-style targeting and scanning, and IPv6 support.  Lastly, it might be useful to have some server-side infrastructure components/API developed for this service with a cool front end to assist with scanning/compliance automation.  These are the sorts of things this project team would attempt to solve and deliver during the project window.