mirror of
https://github.com/jtesta/ssh-audit.git
synced 2024-12-22 22:15:22 +01:00
SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
f15f7dac23
- send client banner first - use data read in first chunk (buffer data) |
||
---|---|---|
.gitignore | ||
README.md | ||
ssh-audit.py |
ssh-audit
ssh-audit is a tool for ssh server auditing.
Features
- grab banner, detect ssh1 protocol and zlib compression;
- gather key-exchange, host-key, encryption and message authentication code algorithms;
- output algorithm information (available since, removed/disabled, unsafe/weak/legacy, etc);
- compatible with python2 and python3;
Usage
usage: ssh-audit.py [-nv] host[:port]
-v verbose
-n disable colors
Verbose flag will fill each row, i.e, not leave blanks, for easier usage with batch scripts or with manual grepping.
example
ChangeLog
v1.0.20151223
- initial version