漏洞扫描＜SSH服务器CBC模式密码已启用＞＜SSH弱MAC算法启用＞＜SSH Weak Key Exchange Algorithms Enabled＞

作者：很楠不爱3 | 2024-04-25 19:18:12

踩

ssh服务器cbc模式密码已启用

rpm包https://download.csdn.net/download/kewen_123/88279957


# 安装检测软件
rpm -i nmap-7.92-1.x86_64.rpm
 
# 修改配置文件
vim /etc/ssh/sshd_config
 
# 结尾添加
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
MACs hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com
KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1
 
# 重启sshd
systemctl stop sshd
systemctl start sshd
 
# 校验
nmap --script "ssh2*" 127.0.0.1

声明：本文内容由网友自发贡献，不代表【wpsshop博客】立场，版权归原作者所有，本站不承担相应法律责任。如您发现有侵权的内容，请联系我们。转载请注明出处：https://www.wpsshop.cn/w/很楠不爱3/article/detail/486843