Introduction to web security SSH testing and defense

SSH brief introduction ：

SSH by Secure Shell Abbreviation , from IETF Network group of （Network Working Group） Established by ;SSH For the security protocol based on the application layer .SSH It's more reliable , A protocol designed to provide security for remote login sessions and other network services .

SSH Blast

If you are setting SSH The service , The administrator sets the user name and password that are easy to guess （ Weak password ）, Then the ECS is easy for hackers to use the corresponding password tools to violently explode weak passwords . After blasting, you can log in to the system with the corresponding user name and password . So remind everyone ： The login password of ECS must not be set to weak password .

Defensive skills

1、 The most important thing is to modify SSH Default login port , The modification method is mainly to modify ssh The configuration file

2、 Use a password with high complexity

3、 Use key pair （ The key file ） land

Caught analysis

Use kali Medium hydra Tools

Create a user name dictionary

Create account information

I found that I had been trying ssh land

Log in the recorded information successfully .