Files
nuclei-templates/network/detection/sshd-dropbear-detect.yaml
2025-10-26 16:17:37 +00:00

31 lines
973 B
YAML

id: sshd-dropbear-detect
info:
name: Dropbear sshd Detection
author: pussycat0x
severity: info
description: |
Dropbear is a software package written by Matt Johnston that provides a Secure Shell-compatible server and client. It is designed as a replacement for standard OpenSSH for environments with low memory and processor resources, such as embedded systems
metadata:
verified: true
max-request: 1
shodan-query: product:"Dropbear sshd"
tags: network,ssh,dropbear,detect,detection,tcp,discovery
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
port: 22
matchers:
- type: word
words:
- "dropbear"
extractors:
- type: regex
regex:
- "SSH-([0-9.]+)-dropbear_([0-9.]+)"
# digest: 4a0a0047304502200aa049be9678e5b159ecf76a37f7744758c7f822bc2efd565970be1b4f136fa2022100de342dfea12e875fbde948c3560aecce13658aeadd3c94d96b03f3c05fde15b3:922c64590222798bb761d5b6d8e72950