BSD Ports

security/ssh-audit 3.3.0 NetBSD

Tool for SSH server & client configuration auditing

System
NetBSD
Repository
pkgsrc
Maintainer
[email protected]
Last update
Commit
74cc78069d
License
mit
Categories
security
Package size
189.4 KiB, 1261.3 KiB installed

Description

ssh-audit is a tool for ssh server & client configuration auditing.

Features: * SSH1 and SSH2 protocol server support * analyze SSH client configuration * grab banner, recognize device or software and OS, detect compression * gather key-exchange, host-key, encryption and MAC algorithms * output algorithm information (available since, removed/disabled, unsafe/weak/legacy, etc) * output algorithm recommendations (append or remove based on recognized software version) * output security information (related issues, assigned CVE list, etc) * analyze SSH version compatibility based on algorithm information * historical information from OpenSSH, Dropbear SSH and libssh * policy scans to ensure adherence to a hardened/standard configuration

In the other systems

SystemPortVersion
NetBSDsecurity/ssh-audit3.3.0
OpenBSDsecurity/ssh-audit3.9.0

Install

Binary package:

pkgin install ssh-audit

From pkgsrc:

cd /usr/pkgsrc/security/ssh-audit && make install clean

Dependencies

Run dependencies 1

No port depends on this one.

Commit history 1

DateCommitCreditsLog message
74cc78069d adam ssh-audit: updated to 3.9.0
3.9.0 The highlights of this release are: Warnings will be issued on key exchanges that are not post-quantum safe. Hardening guides are now included for all supported platforms (see --list-hardening-guides). UNIX sockets can be used as scan targets (specified with unix:///path/to/socket); useful in containerized environments such as CI/CD pipelines. Scanning through SOCKS5 proxies can now be done (with --socks5). A variety of new post-quantum algorithms can now be identified.