- $ ssh_scan -t 192.168.43.198 -p 22222 -L ssh-scan.log -V INFO
别的,可以应用 -P 或 --policy 选项来指定一个策略文件(默认是 Mozilla Modern)(LCTT 译注:这里的 Modern 可能指的是 https://wiki.mozilla.org/Security/Server_Side_TLS 中提到的 Modern compatibility ):
- $ ssh_scan -t 192.168.43.198 -L ssh-scan.log -V INFO -P /path/to/custom/policy/file
ssh_scan 应用赞助与其它示例:
- $ ssh_scan -t 192.168.43.198,200,205
- $ ssh_scan -t test.tecmint.lan
- $ ssh_scan -h
输出示例:
- ssh_scan v0.0.17 (https://github.com/mozilla/ssh_scan)
- Usage: ssh_scan [options]
- -t, --target [IP/Range/Hostname] IP/Ranges/Hostname to scan
- -f, --file [FilePath] File Path of the file containing IP/Range/Hostnames to scan
- -T, --timeout [seconds] Timeout per connect after which ssh_scan gives up on the host
- -L, --logger [Log File Path] Enable logger
- -O, --from_json [FilePath] File to read JSON output from
- -o, --output [FilePath] File to write JSON output to
- -p, --port [PORT] Port (Default: 22)
- -P, --policy [FILE] Custom policy file (Default: Mozilla Modern)
- --threads [NUMBER] Number of worker threads (Default: 5)
- --fingerprint-db [FILE] File location of fingerprint database (Default: ./fingerprints.db)
- --suppress-update-status Do not check for updates
- -u, --unit-test [FILE] Throw appropriate exit codes based on compliance status
- -V [STD_LOGGING_LEVEL],
- --verbosity
- -v, --version Display just version info
- -h, --help Show this message
- Examples:
- ssh_scan -t 192.168.1.1
- ssh_scan -t server.example.com
- ssh_scan -t ::1
- ssh_scan -t ::1 -T 5
推荐阅读
媒介:大年夜电报到5G通信,实际上是个关于频谱的故事,100多年来,若何更有效力的应用频谱,如安在有限频谱中>>>详细阅读
本文标题:ssh_scan:远程验证你SSH服务的配置和策略
地址:http://www.17bianji.com/lsqh/35596.html
1/2 1