darkoperator / darkoperator/Posh-SSH
Get Fingerprint
Nobody has claimed this yet.
- Dominant language
- PowerShell
- Stars
- 1.1k
- Forks
- 222
- PR merge metrics
- No merged PRs in 30d
Description
First of all, thank you for this module. I have been using it in various projects for a few years - not sure what I would have done without it!
Would it be possible to implement a function which returns the fingerprint of a specified target server?
Ideally the fingerprint would be obtained prior to authentication. It wouldn't make sense from a security perspective to authenticate against a server, obtain the fingerprint and then upon examination of the fingerprint realise you just connected to a rogue server and provided it with your credentials.
My objective is to programmatically obtain the fingerprint of a server and check whether it has been trusted (resides in the registry) using Get-SSHTrustedHost.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the Get-SSHTrustedHost entry point and the module’s SSH connection and authentication flow. Determine how a target server’s fingerprint could be obtained before credentials are sent and compared with the trusted-host registry; done means the requested pre-authentication check is defined and supported.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- powershell
- Domain
- authentication, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100