Files
nuclei-templates/network/detection/SSH/ws-ftp-ssh-detect.yaml
pussycat0x a0fd48aab8 lint - fix
2025-12-13 16:49:43 +05:30

32 lines
724 B
YAML

id: ws-ftp-ssh-detect
info:
name: WS_FTP SSH - Detection
author: pussycat0x
severity: info
description: |
WS_FTP SSH server detection. WS_FTP is a Windows-based FTP/SFTP client and server that includes SSH functionality. It can be identified by the SSH banner format SSH-2.0-WS_FTP-SSH_version.
metadata:
verified: true
max-request: 1
shodan-query: ssh product:"WS_FTP sshd"
tags: network,ssh,detect
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
port: 22
matchers:
- type: word
words:
- "SSH-"
- "WS_FTP"
condition: and
extractors:
- type: regex
regex:
- "SSH-([0-9.]+)-WS_FTP-SSH_([0-9.]+)"