diff --git a/exposures/configs/ssh-known-hosts.yaml b/exposures/configs/ssh-known-hosts.yaml new file mode 100644 index 0000000000..7d4036d11f --- /dev/null +++ b/exposures/configs/ssh-known-hosts.yaml @@ -0,0 +1,28 @@ +id: ssh-known-hosts + +info: + name: SSH Known Hosts + author: geeknik + reference: https://datacadamia.com/ssh/known_hosts + severity: low + tags: config,exposure,ssh + +requests: + - method: GET + path: + - "{{BaseURL}}/.ssh/known_hosts" + - "{{BaseURL}}/.ssh/known_hosts.old" + + matchers-condition: and + matchers: + - type: word + words: + - "ssh-dss" + - "ssh-ed25519" + - "ssh-rsa" + - "ecdsa-sha2-nistp256" + condition: or + + - type: status + status: + - 200