0x4d31/hassh repository overview

HASSH (https://github.com/salesforce/hassh⁠) is a method for creating SSH Client and Server fingerprints.

This is a dockerized version of hassh.py script (https://github.com/salesforce/hassh/tree/master/python⁠) to extract HASSH fingerprints from input PCAP files and live network traffic.

Example usage: docker pull 0x4d31/hassh

Reading from input PCAP files: You can mount your host ~/pcap dir to copy the pcaps and also keep the logs on your host: $ docker run -v ~/pcap:/tmp/ -it 0x4d31/hassh -d /tmp/ -l json -o /tmp/log.json

Live network traffic capture: $ docker run --net=host -it 0x4d31/hassh -i any --print

Note: According to Docker's docs, the host networking driver only works on Linux hosts, and is not supported on Docker for Mac, Docker for Windows, or Docker EE for Windows Server.