ssh-audit
ssh-audit 是一款由 Joe Testa 开发的安全审计工具，专门用于检查 SSH 服务器和客户端的配置安全性。它能扫描密钥交换算法、加密算法、消息认证码等，帮助发现弱加密、过时的协议版本等潜在风险，确保您的 SSH 连接符合最佳安全实践。
该工具跨平台支持，可在 Windows 系统上完美运行。通过详细的报告，您可以轻松了解当前配置的兼容性和安全等级，并采取相应措施加固系统。无论是个人服务器还是企业环境，ssh-audit 都是维护 SSH 安全的必备利器。
新内容
3h 前已验证The highlights of this release are:
* Warnings will be issued on key exchanges that are not post-quantum safe.
* Hardening guides are now included for all supported platforms (see `--list-hardening-guides`).
* UNIX sockets can be used as scan targets (specified with `unix:///path/to/socket`); useful in containerized environments such as CI/CD pipelines.
* Scanning through SOCKS5 proxies can now be done (with `--socks5`).
* A variety of new post-quantum algorithms can now be identified.
BIG THANKS to [realmiwi](https://github.com/realmiwi) for being the project's *very first sponsor!!*
The full release notes are:
- Added support for Python 3.14.
- Dropped support for Python 3.8, as it reached end-of-life in October 2024.
- Dropped support for Python 3.9, as it reached end-of-life in October 2025.
- Added warning to all key exchanges that do not include protections against quantum attacks due to the Harvest Now, Decrypt Later strategy (see https://en.wikipedia.org/wiki/Harvest_now,_decrypt_later).
- Removed SSHv1 support (rationale is documented in: https://github.com/jtesta/ssh-audit/issues/298).
- Added hardening guides (see `--list-hardening-guides` and `--g
完整发布说明 →
* Warnings will be issued on key exchanges that are not post-quantum safe.
* Hardening guides are now included for all supported platforms (see `--list-hardening-guides`).
* UNIX sockets can be used as scan targets (specified with `unix:///path/to/socket`); useful in containerized environments such as CI/CD pipelines.
* Scanning through SOCKS5 proxies can now be done (with `--socks5`).
* A variety of new post-quantum algorithms can now be identified.
BIG THANKS to [realmiwi](https://github.com/realmiwi) for being the project's *very first sponsor!!*
The full release notes are:
- Added support for Python 3.14.
- Dropped support for Python 3.8, as it reached end-of-life in October 2024.
- Dropped support for Python 3.9, as it reached end-of-life in October 2025.
- Added warning to all key exchanges that do not include protections against quantum attacks due to the Harvest Now, Decrypt Later strategy (see https://en.wikipedia.org/wiki/Harvest_now,_decrypt_later).
- Removed SSHv1 support (rationale is documented in: https://github.com/jtesta/ssh-audit/issues/298).
- Added hardening guides (see `--list-hardening-guides` and `--g
官方下载源
以下每个来源均已针对批准的发布者域名进行验证并经编辑批准。链接通过安全的内部重定向进行路由。
已验证校验和 文件完整性
3/45 引擎标记了此文件 VirusTotal ↗安装前验证您下载的文件与发布者的官方哈希值匹配。
SHA-256
8fbacc731e8e3dc850204e8eefa909baed219bc3f90b83905c8421ca3ad25177
平台： Windows
ssh-audit 对比
仅基于已验证数据的事实性并排概览。
| 属性 | ssh-audit 本页 | Pritunl Client | KeeWeb | Captain Compliance |
|---|---|---|---|---|
| 开发者 | Joe Testa | Pritunl | Danila Vershinin | Captain Compliance |
| 分类 | Security | Security | Security | Security |
| 平台 | Windows | Windows | Windows | Web |
| 官方来源 | 1 | 1 | 1 | 1 |
| 已验证官方 | ✓ | ✓ | ✓ | ✓ |
ssh-audit 的替代品
同一分类下的已验证官方下载。
常见问题
我可以在哪里安全下载 ssh-audit？
使用本页列出的官方来源。每个链接都针对批准的发布者域名进行了验证，并通过安全的内部重定向进行路由——无第三方或捆绑安装程序。
ssh-audit 支持哪些平台？
ssh-audit 适用于 Windows。
这是 ssh-audit 的官方下载吗？
是的。此处显示的每个来源都经过发布者批准域名验证，并在发布前经过编辑审核。
谁开发了 ssh-audit？
ssh-audit 由 Joe Testa 开发。
ssh-audit 的最佳替代品是什么？
流行的替代品包括 Avast One, Hiddify 和 gopass。查看上方对比以获取并排概览。
评论和评分
暂无评论——成为第一个分享体验的人。
写评论