Giter Club home page Giter Club logo

gh-audit-org-keys's Introduction

gh-audit-org-keys Release

The point of this project is to help demonstrate that users of GitHub could potentially fall victim to getting their private SSH key cracked. This based on the size and complexity of the key the user generates.

Programs like ssh2john from John the Ripper can best demonstrate how fast an SSH private key can be solved from a not so complex algorithm with low key lengths (think RSA < 1024 bits).

Installation

  1. Install the gh cli - see the installation

    Installation requires a minimum version (2.0.0) of the GitHub CLI that supports extensions.

  2. Install this extension:

    gh extension install jef/gh-audit-org-keys
Manual Installation

Requirements: cli/cli and go.

  1. Clone the repository

    # git
git clone [email protected]:jef/gh-audit-org-keys.git

# GitHub CLI
gh repo clone jef/gh-audit-org-keys

  2. cd into it

    cd gh-audit-org-keys

  3. Build it

    make build

  4. Install it locally

    gh extension install .

Usage

To run:

gh audit-org-keys

To upgrade:

gh extension upgrade audit-org-keys

Examples

  • gh audit-org-keys --organization="actions"
  • gh audit-org-keys --organization="actions" --show-users="all"

Acknowledgments

gh-audit-org-keys's People

Contributors

dependabot[bot] avatar github-actions[bot] avatar jef avatar

Stargazers

avatar avatar avatar avatar

Watchers

avatar

gh-audit-org-keys's Issues

refactor: structure of member

Description

Code is kind of convoluted, so it should be changed to be directly related to how it's presenting the data.

Possible solution

Change the struct of keyTable and update the logic around it.

refactor: move to rust

Description

I'd like to move to Rust as a learning exercise as well as (negligible) performance.

Possible solution

Use Rust.

feat: categories for keys

Description

It would be nice to display a count of how many keys are in each SSH key type (dsa, ecdsa, ed25519, rsa)

Possible solution

  • Parse the first N characters to get key type.
  • Update table to show multiple states demo

feat: strong and weak calculation

Description

It would be nice to see if people are using strong or weak SSH keys.

Possible solution

Not sure of one right now. Will update when more information is gathered.

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.