GitHub - jtesta/ssh-audit: SSH server & client security auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)

SSH1 and SSH2 protocol server support; analyze SSH client configuration; grab banner, recognize device or software and operating system, detect compression; gather key-exchange, host-key, encryption and message authentication code algorithms; output algorithm information (available since, removed/disabled, unsafe/weak/legacy, etc); output algorithm recommendations (append or remove based on recogn

[tmatsuu]

SSHのサーバ/クライアント双方の監査ツール。ssh_config(~/.ssh/config)の設定をチェックしたり、実際にSSH接続を行いサーバ側のよくない設定を指摘。自前でポリシーを作成することも可能。いいね。python実装。