ssh-audit
ssh-audit copied to clipboard
New algorithms
I found some non-standard SSH algorithms in use out in the wild that are not currently supported:
des-cbc-ssh1
blowfish-ctr
hmac-sha256
[email protected]
hmac-sha2-384
Do You have more information, e.g., where they originate from?
Nope. This is just from observing the debug log of what people are scanning with my online front-end (https://www.sshaudit.com/).
FYI https://soatok.blog/2022/05/19/guidance-for-choosing-an-elliptic-curve-signature-algorithm-in-2022/