trufflesecurity / driftwood Goto Github PK

Describe the bug
/driftwood ~/test.rsa
just hangs. debugging it with
/driftwood --debug ~/test.rsa
shows the error from the backend "Method Not Allowed"

To Reproduce
Steps to reproduce the behavior:
Just run driftwood with any private key.

Or du a post to keychecker.trufflesecurity.com

Expected behavior
It should not run forever

Desktop (please complete the following information):

• OS: Fedora
• Version

I dont know how to run the tool after I installed it

Is your feature request related to a problem? Please describe.
Similar to GitHub, it would be great if we could ascertain GitLab ssh keys.

Describe the solution you'd like

• Identify keys that are used in GitLab
• Identify keys that are used in both GitHub and GitLab

Describe alternatives you've considered
Custom python scripts

Additional context

Security people get a little twitchy with things touching the private keys, it would be great if this supported reading the public keys if someone already has them.

I suggest looking into https://opendata.rapid7.com/ for additional data about public certificates.

This is regarding SSH public key added in Github.

Describe the bug

Currently when you run driftwood, it loops within the main client for loop and then doesn't ever exit.

This is because driftwood doesn't throw a fatal exception during the loop and exit upon receiving a non HTTP-OK response.

To Reproduce
Steps to reproduce the behaviour:

1. Run driftwood against any private key

Expected behavior
The program:

• doesn't loop when receiving non-OK HTTP response patterns

The API:

• doesn't 503

Screenshots

Desktop (please complete the following information):

• All versions

Additional context
Let me know if you want a PR for adding non-ok pattern matching