ssh-audit

dropbear_2019.78_test1.json

Ensure ECDSA and DSS fingerprints are only output in verbose mode. Clean up Docker tests from merge of #286 .

2024-09-25 17:05:17 -04:00

dropbear_2019.78_test1.txt

Updated notes on OpenSSH default key exchanges. (#258 )

2024-03-19 18:24:22 -04:00

openssh_4.0p1_test1.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_4.0p1_test1.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_custom_policy_test1.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test1.txt

Moved built-in policies from external files to internal database. (#75 )

2020-10-19 17:27:37 -04:00

openssh_5.6p1_custom_policy_test2.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test2.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test3.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test3.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test4.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test4.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test5.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test5.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test7.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test7.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_custom_policy_test8.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test8.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_custom_policy_test9.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test9.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_custom_policy_test10.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test10.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_test1.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test1.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test2.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test2.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test3.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test3.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test4.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test4.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test5.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_5.6p1_test5.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_8.0p1_builtin_policy_test1.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_builtin_policy_test1.txt

Added note that when a target is properly configured against the Terrapin vulnerability that unpatched peers may still create vulnerable connections. Updated Ubuntu Server & Client 20.04 & 22.04 policies to include new key exchange markers related to Terrapin counter-measures.

2023-12-19 14:03:28 -05:00

openssh_8.0p1_builtin_policy_test2.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_builtin_policy_test2.txt

Added note that when a target is properly configured against the Terrapin vulnerability that unpatched peers may still create vulnerable connections. Updated Ubuntu Server & Client 20.04 & 22.04 policies to include new key exchange markers related to Terrapin counter-measures.

2023-12-19 14:03:28 -05:00

openssh_8.0p1_custom_policy_test6.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test6.txt

Moved built-in policies from external files to internal database. (#75 )

2020-10-19 17:27:37 -04:00

openssh_8.0p1_custom_policy_test11.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test11.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_8.0p1_custom_policy_test12.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test12.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_8.0p1_custom_policy_test13.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test13.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_8.0p1_custom_policy_test14.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test14.txt

Refined GEX testing against OpenSSH servers: when the fallback mechanism is suspected of being triggered, perform an additional test to obtain more accurate results.

2023-09-03 16:13:00 -04:00

openssh_8.0p1_custom_policy_test15.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test15.txt

Added tests and other cleanups resulting from merging PR #252 .

2024-03-18 17:48:50 -04:00

openssh_8.0p1_custom_policy_test16.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test16.txt

Added tests and other cleanups resulting from merging PR #252 .

2024-03-18 17:48:50 -04:00

openssh_8.0p1_custom_policy_test17.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test17.txt

Added allow_larger_keys flag to custom policies to control whether targets can have larger keys, and added Docker tests to complete work started in PR #242 .

2024-03-19 14:45:19 -04:00

openssh_8.0p1_test1.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_8.0p1_test1.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_8.0p1_test2.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_8.0p1_test2.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_8.0p1_test3.json

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

openssh_8.0p1_test3.txt

Removed version-based CVE information. (#240 )

2024-09-26 13:15:58 -04:00

tinyssh_20190101_test1.json

Added implementation for DHEat denial-of-service attack (CVE-2002-20001). (#211 , #217 )

2024-04-18 13:58:13 -04:00

tinyssh_20190101_test1.txt

Updated notes on OpenSSH default key exchanges. (#258 )

2024-03-19 18:24:22 -04:00