Files
nuclei-templates/network/detection/SSH/allegrosoft-romsshell-detect.yaml
pussycat0x a0fd48aab8 lint - fix
2025-12-13 16:49:43 +05:30

32 lines
792 B
YAML

id: allegrosoft-romsshell-detect
info:
name: AllegroSoft RomSShell SSH - Detection
author: pussycat0x
severity: info
description: |
AllegroSoft RomSShell SSH server detection. AllegroSoft RomSShell is an embedded SSH server implementation for embedded systems and IoT devices. It can be identified by the SSH banner format SSH-2.0-RomSShell_version.
metadata:
verified: true
max-request: 1
shodan-query: product:"AllegroSoft RomSShell sshd"
tags: network,ssh,detect
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
port: 22
matchers:
- type: word
words:
- "SSH-"
- "RomSShell"
condition: and
extractors:
- type: regex
regex:
- "SSH-([0-9.]+)-RomSShell_([0-9.]+)"