ssh_scan

Build Status Code Climate

A Ruby-based SSH configuration and policy scanner

Key Benefits

  • Minimal Dependancies - Uses native Ruby and BinData to do it's work, no heavy dependancies.
  • Not Just a Script - Implementation is portable for use in another project or for automation of tasks.
  • Simple - Just point ssh_scan at an SSH service and get a JSON report of what is supports and it's policy status
  • Configurable - Make your own custom policies that fit your unique policy requirements.

Setup

To install as a gem, type

gem install ssh_scan
ssh_scan

To install from source, type

git clone https://github.com/claudijd/ssh_scan.git
cd ssh_scan
gem install bindata
./bin/ssh_scan

Example Command-Line Usage

Run ssh_scan -h to get this

Usage: ssh_scan [ip] [port]
    -h, --help                       Show this message

Example: ssh_scan 192.168.1.1
Example: ssh_scan 192.168.1.1 22

See here for example output

Rubies Supported

This project is integrated with travis-ci and is regularly tested to work with the following rubies:

To checkout the current build status for these rubies, click here.

Contributing

If you are interested in contributing to this project, please see CONTRIBUTING.md

Credits

Sources of Inspiration for ssh_scan

  • Mozilla OpenSSH Security Guide - For providing a sane baseline policy recommendation for SSH configuration parameters (eg. Ciphers, Macs, and KexAlgos).