https://github.com/lupin3000/tinysshaudit
Tiny bash script to audit SSH server configuration
https://github.com/lupin3000/tinysshaudit
audit bash ssh
Last synced: 11 months ago
JSON representation
Tiny bash script to audit SSH server configuration
- Host: GitHub
- URL: https://github.com/lupin3000/tinysshaudit
- Owner: Lupin3000
- Created: 2017-03-05T13:46:26.000Z (over 9 years ago)
- Default Branch: master
- Last Pushed: 2017-03-05T13:58:43.000Z (over 9 years ago)
- Last Synced: 2025-06-12T11:55:23.916Z (about 1 year ago)
- Topics: audit, bash, ssh
- Language: Shell
- Homepage: softwaretester.info
- Size: 2.93 KB
- Stars: 1
- Watchers: 1
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# TinySSHAudit
Tiny SSH server configuration audit script
## Usage
After uploading to target host, follow these instructions as a root user:
```bash
# show help
$ ./ssh_audit.sh -h
# run with full outpu
$ ./ssh_audit.sh
# run without header
$ ./ssh_audit.sh -N
```
### Example output
```bash
[root@example ~]$ /tmp/ssh_audit.sh
------------------------------------------------------------------------------------------
Execute date 2017-03-05
Execute time 14:57:02
OS Linux "CentOS Linux 7 (Core)"
SSH Version OpenSSH_6.6.1p1, OpenSSL 1.0.1e-fips 11 Feb 2013
------------------------------------------------------------------------------------------
protocol 2 passed
permitrootlogin no passed
permitemptypasswords no passed
permituserenvironment no passed
passwordauthentication no passed
pubkeyauthentication yes passed
maxauthtries 6 failed Protect against brute-force attacks on the password
ignorerhosts yes passed
x11forwarding yes failed X11 protocol was never built with security in mind
usedns yes warning Use only when your internal DNS is properly configured
loglevel INFO passed
```