Networking and servers • Terrapin Vulnerability Scanner (SSH)

There is a new SSH vulnerability discovered by researchers of Ruhr University Bochum/Germany.

They provide a scanner for testing clients and servers:
https://github.com/RUB-NDS/Terrapin-Scanner

I did not want to build with Go and downloaded prebuilt aarch64 scanner from release page.
You can build from source as well.

I did test my personal website SSH connection, and that is vulnerable (like 11million other SSH servers with unique IP addresses).
I created a support ticket for my SSH access.
(it seems only certain protocols need to be removed, ike "ChaCha20-Poly1305" reported for my SSH access)

Statistics: Posted by HermannSW — Thu Jan 04, 2024 10:36 am

---