ssh-audit

dropbear_2019.78_test1.json

Fixed Docker tests.

2026-10-17 15:40:00 -04:00

dropbear_2019.78_test1.txt

Fixed Docker tests.

2026-10-17 15:40:00 -04:00

openssh_4.0p1_test1.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_4.0p1_test1.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_5.6p1_custom_policy_test1.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test1.txt

Moved built-in policies from external files to internal database. (#75 )

2020-10-19 17:27:37 -04:00

openssh_5.6p1_custom_policy_test2.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test2.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test3.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test3.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test4.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test4.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test5.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test5.txt

Now reports policy errors in an easier to read format. (#63 )

2020-10-20 16:25:39 -04:00

openssh_5.6p1_custom_policy_test7.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test7.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_custom_policy_test8.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test8.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_custom_policy_test9.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test9.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_custom_policy_test10.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_5.6p1_custom_policy_test10.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_5.6p1_test1.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_5.6p1_test1.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_5.6p1_test2.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_5.6p1_test2.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_5.6p1_test3.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_5.6p1_test3.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_5.6p1_test4.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_5.6p1_test4.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_5.6p1_test5.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_5.6p1_test5.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_8.0p1_builtin_policy_test1.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_builtin_policy_test1.txt

Added note that when a target is properly configured against the Terrapin vulnerability that unpatched peers may still create vulnerable connections. Updated Ubuntu Server & Client 20.04 & 22.04 policies to include new key exchange markers related to Terrapin counter-measures.

2023-12-19 14:03:28 -05:00

openssh_8.0p1_builtin_policy_test2.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_builtin_policy_test2.txt

Added note that when a target is properly configured against the Terrapin vulnerability that unpatched peers may still create vulnerable connections. Updated Ubuntu Server & Client 20.04 & 22.04 policies to include new key exchange markers related to Terrapin counter-measures.

2023-12-19 14:03:28 -05:00

openssh_8.0p1_custom_policy_test6.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test6.txt

Moved built-in policies from external files to internal database. (#75 )

2020-10-19 17:27:37 -04:00

openssh_8.0p1_custom_policy_test11.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test11.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_8.0p1_custom_policy_test12.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test12.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_8.0p1_custom_policy_test13.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test13.txt

Added support for mixed host key/CA key types (i.e.: RSA host keys signed by ED25519 CAs) (#120 ).

2023-04-25 09:17:32 -04:00

openssh_8.0p1_custom_policy_test14.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test14.txt

Refined GEX testing against OpenSSH servers: when the fallback mechanism is suspected of being triggered, perform an additional test to obtain more accurate results.

2023-09-03 16:13:00 -04:00

openssh_8.0p1_custom_policy_test15.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test15.txt

Added tests and other cleanups resulting from merging PR #252 .

2024-03-18 17:48:50 -04:00

openssh_8.0p1_custom_policy_test16.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test16.txt

Added tests and other cleanups resulting from merging PR #252 .

2024-03-18 17:48:50 -04:00

openssh_8.0p1_custom_policy_test17.json

Issue a warning if an out-dated policy is used.

2024-10-10 15:57:29 -04:00

openssh_8.0p1_custom_policy_test17.txt

Added allow_larger_keys flag to custom policies to control whether targets can have larger keys, and added Docker tests to complete work started in PR #242 .

2024-03-19 14:45:19 -04:00

openssh_8.0p1_custom_policy_test18.json

Added policy option to allow host key subsets and/or reorderings.

2025-09-01 16:22:40 -04:00

openssh_8.0p1_custom_policy_test18.txt

Added policy option to allow host key subsets and/or reorderings.

2025-09-01 16:22:40 -04:00

openssh_8.0p1_test1.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_8.0p1_test1.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_8.0p1_test2.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_8.0p1_test2.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

openssh_8.0p1_test3.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

openssh_8.0p1_test3.txt

Aside from linking to online hardening guides, mention that built-in guides are also available.

2025-08-30 16:26:57 -04:00

tinyssh_20190101_test1.json

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00

tinyssh_20190101_test1.txt

Added warnings to all key exchanges that do not provide protection against quantum attacks.

2024-11-25 15:56:51 -05:00