漏洞扫描<SSH服务器CBC模式密码已启用><SSH弱MAC算法启用><SSH Weak Key Exchange Algorithms Enabled>
·
rpm包https://download.csdn.net/download/kewen_123/88279957
# 安装检测软件
rpm -i nmap-7.92-1.x86_64.rpm
# 修改配置文件
vim /etc/ssh/sshd_config
# 结尾添加
Ciphers aes128-ctr,aes192-ctr,aes256-ctr,aes128-gcm@openssh.com,aes256-gcm@openssh.com,chacha20-poly1305@openssh.com
MACs hmac-sha2-512,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-256-etm@openssh.com
KexAlgorithms curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1
# 重启sshd
systemctl stop sshd
systemctl start sshd
# 校验
nmap --script "ssh2*" 127.0.0.1更多推荐
所有评论(0)