HASSH
A network fingerprinting standard that identifies SSH client and server implementations via MD5 hashes of algorithm sets.
What is HASSH?
HASSH is a network fingerprinting standard that identifies SSH client and server implementations by creating MD5 hashes from the algorithms exchanged during SSH connection setup. It solves the problem of accurately identifying SSH software beyond IP addresses, which can be obscured by NAT or shared across multiple clients.
Security engineers, network defenders, and forensic analysts who need to monitor SSH traffic for malicious activity, detect compromised systems, or enforce SSH client policies in controlled environments.
Developers choose HASSH because it provides a standardized, lightweight method to fingerprint SSH implementations with high accuracy, enabling detection of stealthy attacks, IoT devices, and malicious tools that traditional IP-based monitoring misses.
Overview
HASSH is a network fingerprinting standard which can be used to identify specific Client and Server SSH implementations. The fingerprints can be easily stored, searched and shared in the form of a small MD5 fingerprint.
Use Cases
Best For
- Detecting SSH brute force attacks from NATed or botnet IPs
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
