Create ssh-password-auth.yaml

javascript/enumeration/ssh-password-auth.yaml

@@ -0,0 +1,31 @@
+id: ssh-password-auth
+
+info:
+  name: SSH Password-based Authentication
+  author: princechaddha
+  severity: info
+  reference:
+    - https://nmap.org/nsedoc/scripts/ssh-auth-methods.html
+  metadata:
+    max-request: 1
+    shodan-query: product:"OpenSSH"
+  tags: ssh,js,enum,network
+
+javascript:
+  - code: |
+      var m = require("nuclei/ssh");
+      var c = m.SSHClient();
+      var response = c.ConnectSSHInfoMode(Host, Port);
+      to_json(response);
+
+    args:
+      Host: "{{Host}}"
+      Port: "22"
+
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"UserAuth":'
+          - '"password"'
+        condition: and