A Python tool for auditing SSH server configurations, security, and compatibility.
ssh-audit is a Python-based tool for auditing SSH server configurations and security. It connects to SSH servers, analyzes their banners, algorithms, and settings, and identifies vulnerabilities, weak algorithms, and compatibility issues. The tool provides detailed recommendations to harden SSH servers based on historical data from implementations like OpenSSH, Dropbear SSH, and libssh.
System administrators, DevOps engineers, and security professionals responsible for maintaining and securing SSH servers in production environments.
Developers choose ssh-audit for its comprehensive, dependency-free auditing that combines protocol analysis, security intelligence, and compatibility checks in a single command-line tool, with support for both SSH1 and SSH2 protocols.
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Audits both SSH1 and SSH2 with automatic fallback, ensuring compatibility with legacy and modern servers as highlighted in the features list.
Classifies key-exchange, host-key, encryption, and MAC algorithms with safety ratings (e.g., unsafe/weak/legacy) based on historical data from OpenSSH, Dropbear SSH, and libssh.
Outputs related CVEs and security issues for major SSH implementations, providing actionable insights for vulnerability patching.
Runs on Python 2.6+, 3.x, and PyPy without external dependencies, making it portable and easy to deploy in various environments.
Supports batch output for automation, enabling large-scale audits in DevOps pipelines without manual intervention.
Command-line only, which limits accessibility for users preferring GUI-based security tools or those with minimal terminal experience.
Only audits configurations via banner and algorithm checks; does not perform active exploitation or runtime vulnerability testing.
For colored output on Windows, requires the optional colorama library, adding a dependency for full visual features as noted in the changelog.