Joe Testa

icon indicating a website link https://www.positronsecurity.com/

icon company Positron Security icon location Rochester, NY icon location Principal penetration tester and founder of Positron Security. @therealjoetesta

Results 33 issues of Joe Testa

New algorithms

3 comment

I found some non-standard SSH algorithms in use out in the wild that are not currently supported: ``` des-cbc-ssh1 blowfish-ctr hmac-sha256 [email protected] hmac-sha2-384 ```

Add support for RFC 8308

[RFC 8308](https://tools.ietf.org/html/rfc8308) adds support for extension negotiation. Of the four extensions defined, it seems like one, `server-sig-algs` (in [section 3.1](https://tools.ietf.org/html/rfc8308#section-3.1)) might be interesting to analyze from a security standpoint.

Fix --conn-rate-test feature on Windows

The `--conn-rate-test` feature is broken on Windows. It is suspected that this is due to the different semantics of the `select()` system call.