Files
nuclei-templates/network/detection/sshd-dropbear-detect.yaml
2024-12-01 13:57:55 +00:00

31 lines
961 B
YAML

id: sshd-dropbear-detect
info:
name: Dropbear sshd Detection
author: pussycat0x
severity: info
description: |
Dropbear is a software package written by Matt Johnston that provides a Secure Shell-compatible server and client. It is designed as a replacement for standard OpenSSH for environments with low memory and processor resources, such as embedded systems
metadata:
verified: true
max-request: 1
shodan-query: product:"Dropbear sshd"
tags: network,ssh,dropbear,detect,detection,tcp
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
port: 22
matchers:
- type: word
words:
- "dropbear"
extractors:
- type: regex
regex:
- "SSH-([0-9.]+)-dropbear_([0-9.]+)"
# digest: 490a00463044022048dd80f10fca5342caa47ce2b376a6fd9fc2a66c9d6728b31bb557e34899148102206db83cf8ca6b1e24b8b997253db1869fa49d391d1efc7163dde0373414264984:922c64590222798bb761d5b6d8e72950