Joe Testa

SFTP connection fails for wodSSH clients

2

The following SFTP session fails with the "WeOnlyDo 3.7.3.170" client (which is perhaps [this software](https://www.weonlydo.com/SSH/ssh-activex-component.asp)). While this isn't very common client software, debugging this issue may fix other related problems....

The error message "MITM: rejecting X11 request." was observed many times in a real-world test. The difficulty of proxying this channel should be researched.

Sometimes the following message appears in the logs: "WARNING: could not open /usr/local/etc/moduli (No such file or directory), using fixed modulus" Appears to be a minor issue, but should be...

**Is your feature request related to a problem? Please describe.** A feature to add a watermark to the image would make reporting much easier. For example, if the images were...

Application fails to start: missing newrelic.ini

2

$ gunicorn -b 0.0.0.0:8080 NightShade.wsgi [2017-02-19 18:09:13 +0000] [2721] [INFO] Starting gunicorn 19.3.0 [2017-02-19 18:09:13 +0000] [2721] [INFO] Listening at: http://0.0.0.0:8080 (2721) [2017-02-19 18:09:13 +0000] [2721] [INFO] Using worker: sync...

I think my SSH MITM tool (https://github.com/jtesta/ssh-mitm) would make a great addition to your VM.

Added function caching and return value logging.

3

I incorporated the fixes for return value retrieval. That fixes most of the problems, yet some crashes on Windows still occur. Its gotten to the point where I'm not very...

Update warnings & failures

2

I think some algorithms & key sizes should be re-categorized. Instead of just issuing a PR, I thought I'd talk about it first and see if we are on the...

Session tickets are known to destroy the forward secrecy properties of Diffie-Hellman. A test should be added to check if they are enabled (they are by default in most TLS...

Fix detection of GSS algorithms

1

The following key exchanges are perhaps not detected properly: ``` gss-curve25519-sha256-toWM5Slw5Ew8Mqkay+al2g== gss-curve25519-sha256-vz8J1E9PzLr8b1K+0remTg== gss-gex-sha1-dZuIebMjgUqaxvbF7hDbAw== gss-gex-sha1-vz8J1E9PzLr8b1K+0remTg== gss-group14-sha1-dZuIebMjgUqaxvbF7hDbAw== gss-group14-sha1-vz8J1E9PzLr8b1K+0remTg== gss-group14-sha256-vz8J1E9PzLr8b1K+0remTg== gss-group16-sha512-toWM5Slw5Ew8Mqkay+al2g== gss-group16-sha512-vz8J1E9PzLr8b1K+0remTg== gss-group1-sha1-dZuIebMjgUqaxvbF7hDbAw== gss-group1-sha1-vz8J1E9PzLr8b1K+0remTg== gss-nistp256-sha256-toWM5Slw5Ew8Mqkay+al2g== gss-nistp256-sha256-vz8J1E9PzLr8b1K+0remTg== ```