From 0393910b19cc70afcd3afed8097fd9652a3cce10 Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Mon, 6 Feb 2023 10:15:39 -0500 Subject: [PATCH] Enhancement: network/detection/openssh-detect.yaml by md --- network/detection/openssh-detect.yaml | 15 ++++++++++----- 1 file changed, 10 insertions(+), 5 deletions(-) diff --git a/network/detection/openssh-detect.yaml b/network/detection/openssh-detect.yaml index a67b819b55..a54704607b 100644 --- a/network/detection/openssh-detect.yaml +++ b/network/detection/openssh-detect.yaml @@ -1,19 +1,22 @@ id: openssh-detect info: - name: OpenSSH Service Detection + name: OpenSSH Service - Detect author: r3dg33k,daffainfo,iamthefrogy severity: info + description: | + OpenSSH service was detected. + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 reference: - http://www.openwall.com/lists/oss-security/2016/08/01/2 - http://www.openwall.com/lists/oss-security/2018/08/15/5 + - http://seclists.org/fulldisclosure/2016/Jul/51 - https://nvd.nist.gov/vuln/detail/CVE-2016-6210 - https://nvd.nist.gov/vuln/detail/CVE-2018-15473 - - http://seclists.org/fulldisclosure/2016/Jul/51 tags: seclists,network,ssh,openssh - description: | - OpenSSH is the premier connectivity tool for remote login with the SSH protocol. It encrypts all traffic to eliminate eavesdropping, connection hijacking, and other attacks. In addition, OpenSSH provides a large suite of secure tunneling capabilities, several authentication methods, and sophisticated configuration options. - network: - host: @@ -29,3 +32,5 @@ network: - type: regex regex: - '(?i)SSH-(.*)-OpenSSH_[^\r]+' + +# Enhanced by md on 2023/02/06