Merge pull request #1358 from iamthefrogy/patch-7

Create deprecated-sshv1-detection.yaml
2021-04-24 09:10:06 +05:30 · 2021-04-24 09:10:06 +05:30 · 2c80419cb9
parent 865b3193a6 7a2716d529
commit 2c80419cb9
1 changed files with 20 additions and 0 deletions
--- a/network/deprecated-sshv1-detection.yaml
+++ b/network/deprecated-sshv1-detection.yaml
@ -0,0 +1,20 @@
+id: deprecated-sshv1-detection
+
+info:
+  name: Deprecated SSHv1 Protocol Detection
+  author: iamthefrogy
+  severity: medium
+  tags: network,ssh,openssh
+  description: SSHv1 is a deprecated and have known cryptographic issues.
+  reference: |
+     - https://www.kb.cert.org/vuls/id/684820
+     - https://nvd.nist.gov/vuln/detail/CVE-2001-1473
+
+network:
+  - host:
+      - "{{Hostname}}"
+      - "{{Hostname}}:22"
+    matchers:
+      - type: word
+        words:
+          - "SSH-1"