Due to vulnerables in some ssh ciphers, I put this in bitbucket.properties :
plugin.ssh.disabled.ciphers=arcfour128,arcfour256,aes128-cbc,aes192-cbc,aes256-cbc,3des-cbc,blowfish-cbc
After that, these ciphere still enabled:
arcfour256, aes192-cbc, aes256-cbc
The command used to check:
nmap --script ssh2-enum-algos -sV -p 7999 localhost
Why some ciphers from the list still enabled?
