mirror of https://github.com/jtesta/ssh-audit.git synced 2024-12-22 22:15:22 +01:00

SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

Go to file

Andris Raugulis 744aec76fb Finish implementing compatibility feature. Fix wrong algorithm warning. Stop on empty packet.		2016-08-12 04:28:46 +03:00
.gitignore	Init project.	2015-12-23 04:56:13 +02:00
README.md	Update screenshot.	2016-08-03 17:42:11 +03:00
ssh-audit.py	Finish implementing compatibility feature.	2016-08-12 04:28:46 +03:00

ssh-audit

ssh-audit is a tool for ssh server auditing.

Features

grab banner, detect ssh1 protocol and zlib compression;
gather key-exchange, host-key, encryption and message authentication code algorithms;
output algorithm information (available since, removed/disabled, unsafe/weak/legacy, etc);
historical information from OpenSSH and Dropbear SSH;
no dependencies, compatible with python2 and python3;

usage: ssh-audit.py [-nv] host[:port]

   -v  verbose
   -n  disable colors

Verbose flag will fill each row, i.e, not leave blanks, for easier usage with batch scripts or with manual grepping.