Files
nuclei-templates/network/detection/SSH/bitvise-winsshd-detect.yaml
pussycat0x a0fd48aab8 lint - fix
2025-12-13 16:49:43 +05:30

33 lines
820 B
YAML

id: bitvise-winsshd-detect
info:
name: Bitvise WinSSHD - Detection
author: pussycat0x
severity: info
description: |
Bitvise WinSSHD SSH server detection. Bitvise WinSSHD is a Windows-based SSH server implementation that can be identified by the SSH banner format SSH-2.0-version sshlib: WinSSHD version.
metadata:
verified: true
max-request: 1
shodan-query: product:"Bitvise WinSSHD"
tags: network,ssh,detect
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
port: 22
matchers:
- type: word
words:
- "SSH-"
- "WinSSHD"
condition: and
extractors:
- type: regex
regex:
- "SSH-([0-9.-]+) FlowSsh: WinSSHD ([0-9.:]+)"
- "SSH-([0-9.-]+) FlowSsh: Bitvise SSH Server (WinSSHD) ([0-9.:]+)"